gcloud alpha compute tpus tpu-vm service-identity create - create a Cloud TPU VM service identity for a project

gcloud alpha compute tpus tpu-vm service-identity create[--zone=ZONE][GCLOUD_WIDE_FLAG …]

The Cloud TPU VM creates a service identity (Google-owned service account) formanagement of resources when the first Cloud TPU VM is created in a projectafter TPU service activation. However, there are cases where the serviceidentity may need to be created beforehand to grant specific IAM permissions toit, like access to a Google Cloud Storage bucket. This method generates theservice account without need to first create a Cloud TPU VM.

This command generates a service identity valid for Cloud TPU VMs across allzones in a project. The zone is required (either set in the gcloud configdefaults, as an environment variable, or--zone flag), but theservice identity generated will work across all Cloud TPU VM zones.

Location resource - Zone to use for the request.

If not specified, will use the value of the [compute/zone] property in thecurrent gcloud configuration. This represents a Cloud resource. (NOTE) Someattributes are not given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argument--zone on the command line with a fullyspecified name;
• set the propertycompute/zone with a fully specified name;
• provide the argument--project on the command line;
• set the propertycore/project.

--zone=ZONE

ID of the location or fully qualified identifier for the location.

To set thezone attribute:

• provide the argument--zone on the command line;
• set the propertycompute/zone.

Run$gcloud help for details.