GetServiceAccountToken returns a GCS oauth token based on the service account key and audience set through the ServiceAccountJson and ServiceAccountAudience env vars.

SetServiceAccountCredsEnv sets the environment variables ServiceAccountAudience and ServiceAccountJson based on the following conditions: > check if forceFetch is false > forceFetch is false > if env is set return > if env is not set read from the serviceAccountCredFile > if file is available and the creds can be read, set env return > read the creds from secrets manager > set the env variable and save the creds to the serviceAccountCredFile.

fetched from environment.

fetched from the serviceAccountCredFile.

fetched from the store.

FetchedFrom indicates where the credentials have been fetched from.