Configuring GCP Service Account for Backstage in Roadie
Published on March 16th, 2021Introduction
This Google Cloud Platform (GCP) client in Roadie may be used to periodically to collect Backstage catalog information from Google Cloud
Storage. These settings are configured in https://<tenant-name>.roadie.so/administration/settings/secrets
.
This page describes how to get the client id and private key for GCP.
Steps
Step 1. Create a new GCP Service Account
- Start by logging into the cloud console of GCP
https://console.cloud.google.com/iam-admin/serviceaccounts?project=
- Click “Create Service Account”
- If your tenant name was acme, you would enter the following information
- Click create and then give the service account appropriate permissions to read the google cloud storage bucket.
- The following optional settings are not required, you may complete creating the service account.
- Click on the service account you have created to view the service account details page and then click on the “add key” drop down and then the “create new key” button.
- Select JSON and then click Create.
This will download a JSON file containing the credentials needed for next step.
Step 2. Enter the credentials in Backstage
- Copy the client email and the private key from the downloaded JSON file.
- Visit the page
https://<tenant-name>.roadie.so/administration/settings/secrets
- Enter the details you have copied into
GCP_CLIENT_EMAIL
andGCP_PRIVATE_KEY
Conclusion
After adding the credentials for GCP your Backstage instace will be able to authenticate against Google and fetch data for components registered in GCS locations.