☁️ Google Vertex AI Login (gcloud)
If you want to use Vertex AI with LrGeniusAI, run the login on the machine where geniusai-server is running.
macOS
- Install Google Cloud CLI (if needed):
https://cloud.google.com/sdk/docs/install - Open Terminal and run:
gcloud init
gcloud config set project YOUR_PROJECT_ID
gcloud auth application-default login
- Optional verification:
gcloud auth application-default print-access-token
Windows (PowerShell)
- Install Google Cloud CLI (if needed):
https://cloud.google.com/sdk/docs/install - Open Google Cloud SDK Shell (or PowerShell with
gcloudin PATH) and run:
gcloud init
gcloud config set project YOUR_PROJECT_ID
gcloud auth application-default login
- Optional verification:
gcloud auth application-default print-access-token
Remote backend with Docker Compose
If your backend runs as a remote Docker container, authenticate inside the container and persist the Google Cloud CLI state with the bind mount in docker-compose.yml.
- Open a shell on the server in the repository root:
mkdir -p gcloud
docker compose up -d --build
- Set the Vertex project inside the running container:
docker compose exec geniusai-server gcloud config set project YOUR_PROJECT_ID
- Login for Application Default Credentials (ADC):
docker compose exec geniusai-server gcloud auth application-default login
- Optional verification:
docker compose exec geniusai-server gcloud auth application-default print-access-token
For headless SSH hosts without a browser, use:
docker compose exec geniusai-server gcloud auth application-default login --no-browser
Then follow the remote bootstrap flow shown by gcloud on a second trusted machine that has a browser and Google Cloud CLI installed.
Notes
gcloud auth application-default logincreates local Application Default Credentials (ADC).- In Docker Compose, the bind mount
./gcloud:/root/.config/gcloudkeeps ADC and the active gcloud project across container restarts and rebuilds. - Set
Vertex AI Project IDandVertex AI Locationin the Lightroom plugin settings. - Do not set
GOOGLE_APPLICATION_CREDENTIALSwhen you want the container to use ADC created bygcloud auth application-default login. - For headless/server deployments, prefer service-account auth via
GOOGLE_APPLICATION_CREDENTIALS.