Docs: Create Google Account

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Ensure network connectivity between the platform and Google Cloud.
If the platform cannot reach Google Cloud directly, configure a proxy to access Google Cloud.

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create cloud account page.
Select “Google” as the cloud platform, then click “Next: Configure cloud account”.
Configure the following parameters:
- Name: Google Cloud account name.
- project_id, private_key_id, private_key, client_email, and related parameters: see How to obtain Google parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify that the parameters are correct.
After a successful test, click “Next: Configure sync regions” to configure resource sync regions (all regions are synced by default).
After configuration, click “Next: Billing file access information (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Google Cloud account.

How to obtain Google parameters

How to obtain Google Cloud service account key information?

Onboard a specific project

Open the “IAM & Admin – IAM” page in the GCP Console and sign in.
Click “Select a project” at the top and choose the project to authorize.
In the left navigation pane, go to “IAM & Admin”, click “Service Accounts”, and open the service accounts page.
Click “Create service account” to open the create service account page.
Configure the service account name, service account ID, and description, then click “Create and continue”.
Select the Project – Owner or Project – Viewer role. Owner grants management permissions on the project; Viewer grants read-only permissions. Click “Continue”.
Granting users access to this service account does not affect the cloud management platform; configure as needed. After configuration, click “Continue”.
On the service accounts page, click the actions button on the right of the newly created service account, then click “Manage keys”.
On the keys page, click “Add key”, then in the dialog click “Create new key”, select key type “JSON”, and click “Create” to download the JSON key file.

Onboard multiple projects

To use the service account key obtained above to onboard multiple projects, follow these steps:

Open the “IAM & Admin – IAM” page in the GCP Console and select another project to onboard.
Click “Add” at the top, add the service account created above as a new member, set the role to Project – Owner or Project – Viewer, then click “Save”.
Repeat the steps above to onboard more projects.

Google Cloud APIs are project-scoped. When onboarding multiple Google Cloud projects, enable the related APIs in each project.

APIs required for managing Google Cloud on the platform:

After obtaining the key file, enable the Cloud Resource Manager API, Cloud Build API (for creating machines from custom images), and Compute Engine API for the authorized project in the Google API Library.

On the Cloud Resource Manager API page in the API Library, enable the Cloud Resource Manager API for the authorized project.
On the Cloud Build API page in the API Library, enable the Cloud Build API for the authorized project.

APIs required for managing Google Cloud RDS on the platform:

On the Cloud SQL Admin API page in the API Library, enable the Cloud SQL Admin API.

Permission configuration

To manage Google Cloud resources through the platform, the cloud account needs the following permissions:

Permission description	Read-only	Read-write
Manage all Google Cloud resources	Viewer	Editor
Manage compute instances	Compute Viewer	Compute Editor
Manage network resources	Compute Network Viewer	Compute Network Admin
Manage object storage resources	Storage Legacy Bucket Reader, Storage Object Viewer	Storage Admin
Manage cloud databases	Cloud SQL Viewer	Cloud SQL Admin
Manage Redis	Redis Enterprise Cloud Viewer	Redis Enterprise Cloud Admin
Manage logs	Logs Viewer	Logging Admin
Manage file storage	Cloud Filestore Viewer	Cloud Filestore Editor
Manage all custom roles in the project	Role Viewer	Role Administrator
Manage DNS	DNS Reader	DNS Administrator
Manage account billing	Billing Account Viewer	Billing Account Administrator
Manage monitoring	Monitoring Viewer	Monitoring Admin

Billing configuration

Billing data source

Select where Google billing data is stored: BigQuery or bucket. Google billing no longer supports bucket.

How to configure and obtain BigQuery settings on Google Cloud?

Sign in to the Google Cloud Console, click “Billing” in the left menu, and open the billing page.
Click “Billing export” in the left menu. Under the BIGQUERY EXPORT tab, enable detailed usage cost and configure the project and dataset name.
Click the dataset name to open BigQuery, expand the right-side nodes, select the partitioned table under the dataset name, then on that page click the “Details” tab at the top to obtain the table ID.
On the table details page, click “Edit details” in the upper right and set expiration to None. If an expiration is set, expired data will be cleaned from BigQuery; configure carefully.

How to obtain the billing file bucket URL and file prefix?

Sign in to the Google Cloud Console, click “Billing” in the left menu, and open the billing page.
Click “Billing export” in the left menu. On the billing page, click the “File export” tab, then view and record the storage partition name and report prefix.
Click “Storage / Browser” in the left menu. On the storage page, click the corresponding storage partition name, then click the “Overview” tab. The link URL is the bucket URL.

Cloudpods – Google