Setup in Google | Cloudaware Documentation

Use this guide to configure a service account in Google Cloud.

Summary

To integrate Google Cloud Platform with Cloudaware:

Create a new service account for Cloudaware.
Assign the Viewer role to the project dedicated to Cloudaware. Create and assign a custom role^* for tagging & backups (optional).
Download a service account key (JSON).
Enable the required Google APIs:
- Compute Engine API
- Identity and Access Management (IAM) API
- Cloud Resource Manager API
Optional. Enable Google APIs:
- Kubernetes Engine API (to use Google Kubernetes Engine (GKE))
- Cloud Billing API (to use Google Cloud billing)

^*For more details on add-on permissions, see here.

Log in to the Google console. Select the Google project. Go to 'IAM & admin' → Service accounts → +CREATE SERVICE ACCOUNT.
Use a meaningful name, e.g., cloudaware-service-account. Click CREATE AND CONTINUE.
Assign the role Project Viewer^* to the service account. Click DONE.

^*This is the minimum access role required. For more detailed access information, refer to the guide Additional permissions in Google.

Select the service account that will be added to Cloudaware. Go to the tab 'Keys' → +Create key.
Select 'JSON' → CREATE. A JSON file will be automatically downloaded.

Save the key file in a secure location as it is is required for further setup in Cloudaware.

Go back to Google Organization → 'APIs & Services'.
Select the Google Project where the service account for Cloudaware was created. Click +ENABLE APIS AND SERVICES.
Using the search bar, find and enable the following APIs: