liveBook · Manning

Service account

As explained in .NET MAUI in Action

A service account is a non-human identity used by software to authenticate to cloud or application services.

A service account is a software identity that supplies credentials for automated access to cloud or application APIs. In a deployment workflow, it lets GitHub Actions upload signed Android builds to Google Play. section 12.2.4

Set up a Google Play deployment service account by:

  • Linking a Google Cloud Platform project to the Google Play Console. section 12.2.4
  • Creating the account from Google Play Console's API Access and Credentials area. section 12.2.4
  • Assigning Service Account User rather than the Owner role. section 12.2.4
  • Creating a key and storing its JSON credentials as a GitHub Actions secret. section 12.2.4

Using the account in GitHub Actions

The Android upload action reads the service account JSON from the GCP_SERVICE_ACCOUNT secret, then uploads a signed AAB to the internal Google Play track.

How .NET MAUI in Action covers it

How deep it goes
Defines creation, role assignment, key generation, secret storage, and workflow use, but does not detail key rotation.
Examples
Uses a GCP_SERVICE_ACCOUNT secret to authenticate an Android AAB upload action.
What it assumes
Assumes a linked Google Cloud project, Google Play Console access, and a deployment workflow requiring API credentials.
What you can do after
Operate a GitHub Actions job that uploads signed Android artifacts to Google Play.
How it connects
Connects Google Cloud Platform, Google Play Console, GitHub Actions, API credentials, secrets, and least privilege.

Also explained in

Compare how 10 books explain service account →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of .NET MAUI in Action. The section links point to the parts of the book it draws on.