Skip to main content
Google Cloud NetApp Volumes

Set up Google Cloud NetApp Volumes

Contributors netapp-sineadd
PDFs

BlueXP needs the right permissions through a Google Cloud service account.

Complete the following tasks so that BlueXP can access your Google Cloud project:

  • If you do not already have an existing service account, create a new one.

  • Add the service account member to your project and assign it specific roles (permissions).

  • Create and download a key pair for the service account that is used to authenticate to Google.

  • Grant the IAM role in the shared project.

Set up a service account

  1. In the Google Cloud console, go to the Service accounts page.

  2. Click Select a project, choose your project, and click Open.

  3. (Optional) To create a service account, do the following:

    1. Click Create service account.

    2. Enter the service account name (friendly display name) and description.

      The Cloud Console generates a service account ID based on this name. Edit the ID if necessary - you cannot change the ID later.

    3. To set access controls now, click Create and then DONE from the bottom of the page, and continue to the next step.

Create and download a key pair

  1. Click the Service Account name, and then from the Service account details page, click Add key > Create new key.

  2. Select JSON as the key type and click Create.

    By clicking Create your new public/private key pair is generated and downloaded to your system. It serves as the only copy of the private key. Store this file securely because it can be used to authenticate as your service account.

Add the service account member

  1. In the IAM page click Add and fill out the fields in the Add Members page:

    1. In the New Members field, enter the full service account ID.

      For example: user1-service-account-gcnv@project1.iam.gserviceaccount.com

    2. Add one of these roles:

      • Google Cloud NetApp Volumes Admin
        OR

      • Google Cloud NetApp Volumes Viewer

  2. Click Save.

Create a shared VPC

In each additional GCP project that will use the service account, do the following:

  1. In the IAM page, select the Shared VPC host project from the project dropdown menu.

  2. Click Add Principal.

  3. In the New principals field, enter the email address of your service account.

  4. From the Select a role dropdown, choose the Google Cloud NetApp Volumes admin role.

  5. Click Save.

For detailed steps, refer to the Google Cloud documentation: