Rotate GCP google cloud serviceaccount keys

rotatekeys.sh

# From https://cloud.google.com/iam/docs/creating-managing-service-account-keys#iam-service-account-keys-create-gcloud
# Enable IAM API https://cloud.google.com/iam/docs/creating-managing-service-account-keys#iam-service-account-keys-create-gcloud
# following script will rotate all json keys present in the current folder 
# Need the permission to roate keys to the current service accout key admin

mkdir -p backup
echo Starting key rotation
for filename in *.json; do
    echo Starting $filename
    cp $filename backup/$filename
    #filname=zeta-yen-319702-12df01c0a305.json
    saemail=$(jq -r ".client_email" $filename)
    sakey=$(jq -r ".private_key_id" $filename)

	echo Starting to rotate $saemail $saemail

    gcloud auth activate-service-account --key-file $filename
    gcloud iam service-accounts keys create newfile.json --iam-account $saemail

    gcloud iam service-accounts keys delete $sakey --iam-account $saemail --quiet

    gcloud iam service-accounts keys list     --iam-account=$saemail
    mv newfile.json $filename

done