Authentication on GCP with Docker: Application Default Credentials

How applications magically authenticate themselves with GCP through their environment, and how to make locally running containers magic too