- NAME
-
- gcloud beta iam service-accounts keys upload - upload a public key for an IAM service account
- SYNOPSIS
-
-
gcloud beta iam service-accounts keys uploadPUBLIC_KEY_FILE--iam-account=IAM_ACCOUNT[GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)Upload a public key for an IAM service account.If the service account does not exist, this command returns a
PERMISSION_DENIEDerror. - EXAMPLES
- The following command uploads a public key certificate to a service account:
gcloud beta iam service-accounts keys upload test_data/public_key.cert --iam-account = my-iam-account@my-project.iam.gserviceaccount.com
- POSITIONAL ARGUMENTS
-
-
PUBLIC_KEY_FILE - Path of the file containing the public key. Note that only public key data in the format of RSA_X509_PEM is supported. See https://cloud.google.com/iot/docs/concepts/device-security#public_key_format for more information.
-
- REQUIRED FLAGS
-
- IamAccount resource - The service account for which to upload a key. This
represents a Cloud resource. (NOTE) Some attributes are not given arguments in
this group but can be set in other ways.
To set the
projectattribute:- provide the argument
--iam-accounton the command line with a fully specified name; - provide the argument
--projecton the command line; - set the property
core/project.
This must be specified.
-
--iam-account=IAM_ACCOUNT - ID of the iamAccount or fully qualified identifier for the iamAccount.
To set the
iam-accountattribute:- provide the argument
--iam-accounton the command line.
- provide the argument
- provide the argument
- IamAccount resource - The service account for which to upload a key. This
represents a Cloud resource. (NOTE) Some attributes are not given arguments in
this group but can be set in other ways.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
- This command uses the
iam/v1API. The full documentation for this API can be found at: https://cloud.google.com/iam/ - NOTES
- This command is currently in beta and might change without notice. These
variants are also available:
gcloud iam service-accounts keys uploadgcloud alpha iam service-accounts keys upload
gcloud beta iam service-accounts keys upload
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

