This article explains how to set up a service account in Google Cloud Platform. Ensure you have the necessary permissions in Google Cloud.
Create Service Account
1. In the Google console, go to IAM & admin → Service accounts.
2. Click +CREATE SERVICE ACCOUNT*.
*If you already have a service account dedicated to Cloudaware, proceed to step 4.
3. Enter the name for the service account, in this guide cloudaware-service-account. Click CREATE AND CONTINUE.
4. Assign the role Project Viewer to the service account. Click DONE.
NOTE: If you use Google Organizations, assign the role 'Viewer' to the service account for Cloudaware to consume your Organization data. Assign the following roles to the service account created earlier:
Organization Role Viewer
Folder Viewer
Organization Viewer
Organization Policy Viewer
Project Viewer
Click Save.
Assign the 'Project Viewer' role on the organization level for Cloudaware to automatically add and collect Google Projects within a Google Organization:
Create Service Account Key
The service account key is required for setup in Cloudaware.
1. Select the service account. Click +Create key.
2. Select 'JSON' → Create.
A .json file will be automatically downloaded and saved.
Enable Google APIs for Google Project
1. Go back to the Organization → APIs & Services.
2. Select the Google Project where the service account was previously assigned the Project Viewer role.
3. Click +ENABLE APIS AND SERVICES.
4. Using the search bar, locate and enable:
Compute Engine API (see the example below)
Identity and Access Management (IAM) API
Cloud Resource Manager API
Kubernetes Engine API (learn more)
Cloud Billing API (learn more)
