in credhelper/helper.go [189:202]
func tokenFromGcloudSDK(gcloudCmd cmd.Command) (string, error) {
// shelling out to gcloud is the only currently supported way of
// obtaining the gcloud access_token
stdout, err := gcloudCmd.Exec("config", "config-helper", "--force-auth-refresh", "--format=value(credential.access_token)")
if err != nil {
return "", helperErr("`gcloud config config-helper` failed", err)
}
token := strings.TrimSpace(string(stdout))
if token == "" {
return "", helperErr("`gcloud config config-helper` returned an empty access_token", nil)
}
return token, nil
}