How to invoke gcloud with service account impersonation
问题 I have a service running in GCE with default service account A. This service uses gcloud to talk to various GCP services. Currently, it uses service account B to talk to some of the GCP services (using private key). However, we want to get rid of using private key and use account impersonation. To do that, I have added account A to the service account B's role and given token creator role. I wrote a test program in go and was able to verify the impersonation works. However, our service is in