CanImpersonate checks if a given service account can be impersonated by the authenticated user.

CheckActiveAccountSet ensures that the current gcloud config has an active account value and if an account is set, it returns the value.

ClientWithReason creates a client SDK with the provided reason field.

ConfigureGcloudProxy configures the current gcloud configuration to use the auth proxy.

GenerateTemporaryAccessToken generates short-lived credentials for the given service account.

GetCurrentProject get the active project from the gcloud config.

GetCurrentRegion get the active region from the gcloud config.

GetCurrentZone get the active zone from the gcloud config.

GetServiceAccounts fetches each of the service accounts that the authenticated user can impersonate in the active project.

UnsetGcloudProxy restores the auth proxy changes made to the gcloud config.