build/push-official-release.sh checks if proper account is active, no…

…t just present

build/common.sh

@@ -1516,9 +1516,9 @@ function kube::release::docker::release() {
   fi
 }
 
-function kube::release::has_gcloud_account() {
+function kube::release::gcloud_account_is_active() {
   local -r account="${1-}"
-  if [[ -n $(gcloud auth list --filter-account $account 2>/dev/null) ]]; then
+  if [[ -n $(gcloud auth list --filter-account $account 2>/dev/null | grep "active") ]]; then
     return 0
   else
     return 1

build/push-official-release.sh

@@ -38,6 +38,7 @@ KUBE_GCS_PUBLISH_VERSION="${KUBE_RELEASE_VERSION}"
 
 KUBE_DOCKER_REGISTRY="gcr.io/google_containers"
 KUBE_DOCKER_IMAGE_TAG="${KUBE_RELEASE_VERSION}"
+KUBE_GCLOUD_PRODUCTION_ACCOUNT="[email protected]"
 
 KUBE_ROOT="$(dirname "${BASH_SOURCE}")/.."
 source "${KUBE_ROOT}/build/common.sh"
@@ -47,8 +48,8 @@ if "${KUBE_ROOT}/cluster/kubectl.sh" 'version' | grep 'Client' | grep 'dirty'; t
   exit 1
 fi
 
-if ! kube::release::has_gcloud_account [email protected]; then
-  kube::log::error "Pushing images to gcr.io/google_containers requires credentials for account [email protected]"
+if ! kube::release::gcloud_account_is_active "${KUBE_GCLOUD_PRODUCTION_ACCOUNT}"; then
+  kube::log::error "Pushing images to gcr.io/google_containers requires being logged in as ${KUBE_GCLOUD_PRODUCTION_ACCOUNT}"
   return 1
 fi