Add Google Cloud Platform (GCP) Credential

In order to allow Devopness to manage GCP resources on your behalf, Service Account key has to be provided.

If you don't have access to a GCP account, you can create an account for free following the cloud provider specific guide Google Cloud Free Tier

  1. Access a GCP project or create a new one: https://console.cloud.google.com/project

    If you created a new project, a notification modal will appear showing your new project creation status. Note: It might take a few seconds for the new project to be visible in the project list. If your new project is not listed a few seconds after its creation, reload the console page.

  2. Make sure Compute Engine API is enabled on the selected Project:

    • On GCP console, click on the dropdown menu and select APIs and Services
    • Make sure the correct project is selected in GCP console's header left side
    • Click on Enable APIs and Services on top of the page
    • On the Search box, enter “Compute Engine API” and select it from search results
    • If Compute Engine API is already activated, you will see the Manage button at the screen
    • Otherwise, click Enable button

  3. Make sure Cloud Asset API is enabled on the selected Project:

    • On GCP console, click on the dropdown menu and select APIs and Services
    • Make sure the correct project is selected in GCP console's header left side
    • Click on Enable APIs and Services on top of the page
    • On the Search box, enter “Cloud Asset API” and select it from search results
    • If Cloud Asset API is already activated, you will see the Manage button at the screen
    • Otherwise, click Enable button

  4. Go back to projects console

  5. Having your project listed, click the three dot button on it and pick the Settings option

  6. On the left side menu under IAM & Admin, select the Service Accounts option

  7. Make sure a service account named as <project-id>-compute@developer.gserviceaccount.com is listed

  8. If you do not have a service account, create a new one:

    • Click + CREATE SERVICE ACCOUNT option below the search bar
    • Name your new service account
    • Click DONE

  9. Having your service account listed, go to the Actions column, click the three dot menu on your service account and choose Manage details option

  10. Copy your service account email to your clipboard

  11. Bellow your service account name, go to the PERMISSIONS tab

  12. In the permissions table, go to VIEW BY ROLES tab

  13. Make sure your service account has the Compute Engine Service Agent role

    NOTE: You may need to check the box labeled “Include Google-provided role grants” to see the Compute Engine Service Agent role in the list.

  14. If the service account doesn't have the Compute Engine Service Agent role, set it:

    • Click GRANT ACCESS button
    • The Grant access to "..." form will be displayed
    • Under Add Principals, click the New principals field and paste the service account email you copied earlier
    • Under Assign roles, click the Role field and select the Compute Engine Service Agent option
    • Click SAVE

  15. On the left side menu under IAM & Admin, select the IAM option

  16. Having your service account listed, edit its roles:

    • Click the edit icon on your service account
    • Click ADD ANOTHER ROLE
    • Select the Compute Instance Admin (v1) role to this email
    • Click SAVE

  17. On the left side menu under IAM & Admin, select the Service Accounts option

  18. Go to the Actions column on your service account, click the three dot menu and choose Manage keys option

  19. Add a new service account key

    • Click ADD KEY button
    • Select Create new key option
    • Pick JSON key type
    • Click CREATE

  20. A JSON file containing your service account credentials will be downloaded, copy its content to your clipboard

  21. To add the copied credentials to Devopness see Add a Credential

Edit this page
Add a Credential Next