Setup in Google

Owned by Daria Lebedeva

Last updated: Dec 20, 2024

2 min read

This article explains how to set up a service account in Google Cloud Platform. Ensure you have the necessary permissions in Google Cloud.

1 Summary
2 Create service account
3 Create service account key
4 Enable Google APIs for Google Project

Summary

To integrate Google Cloud Platform with Cloudaware:

Create a new service account for Cloudaware
Assign the Project Viewer role. Create and assign a custom role for tagging & backups (optional).
Download a service account key (json).
Enable Google APIs:
- Compute Engine API
- Identity and Access Management (IAM) API
- Cloud Resource Manager API
- Kubernetes Engine API
- Cloud Billing API

For detailed setup instructions, refer to the in-depth guidelines below.

Create service account

Log in to the Google console. Select the Google project. Go to 'IAM & admin' → Service accounts → +CREATE SERVICE ACCOUNT.
Use a meaningful name, e.g. cloudaware-service-account. Click CREATE AND CONTINUE.
Assign the role Project Viewer* to the service account. Click DONE.

*This is the minimum access role required. For more detailed access information, refer to the guide Additional permissions in Google.

Create service account key

Select the service account that will be added to Cloudaware. Go to the tab 'Keys' → +Create key.
Select 'JSON' → CREATE. A .json file will be automatically downloaded.

Save the key in a secure location as it is is required for further setup in Cloudaware.

Enable Google APIs for Google Project

Go back to Google Organization → 'APIs & Services'.
Select the Google Project where the service account for Cloudaware was created. Click +ENABLE APIS AND SERVICES.
Using the search bar, find and enable the following APIs:

Compute Engine API
Identity and Access Management (IAM) API
Cloud Resource Manager API
Kubernetes Engine API (learn more)
Cloud Billing API (learn more)

! Next step - Google setup in Cloudaware