How to handle credentials for gcp logs?

Copied from here: Slack

What is the implication here in regards to credentials? Cloud setup GCP Logs | Grafana Loki documentation
Is it assumed that Promtail will be running in a GKE cluster with a ServiceAccount set up?
It does not seem to be possible to specify credentials for Promtail itself, right?

This was answered in the Slack thread linked in the original post.

In short:

It’s independent of Loki, We use gcp sdk (to talk to pubsub) and sdk is responsible for reading credentials from GOOGLE_APPLICATION_CREDENTIALS.
Kurzanleitung: Nachrichten in Pub/Sub mit einer Clientbibliothek veröffentlichen und empfangen  |  Cloud Pub/Sub-Dokumentation  |  Google Cloud