key

How to get a private key to access Google Cloud services

1. Go to the Service Account's section of IAM & Admin in the Google Cloud console.

---

2. Click on Create Service Account.

---

3. Choose a name, and required roles for this service account.

Three following keys are used in this project:

• Monitoring key: To monitor the history of Pub/Sub message sizes, select the Monitoring Admin and Monitoring Viewer roles for the service account associated with the monitoringKey.json key located in the current directory.

  

• Scheduler key: To store the decisions to the Datastore, select the Cloud Datastore Owner role for the service account associated with the schedulerKey.json key located in the current directory.

  

• Host agent key: To enable the periodic storage of host logs to the Datastore, and to allow downloading functions on the host, select the Cloud Datastore Owner, Cloud Functions Admin, Pub/Sub Publisher, and Pub/Sub Subscriber roles for the service account associated with the vmExeModule.json key. This key is located in this directory.

  

---

4. To add a new key for a service account, click on the Keys section after creating the service account.

---

5. Download the key file and place it in the appropriate directory along with the names previously mentioned in step 3.

The key information will appear as follows:

{
  "type": "service_account",
  "project_id": YOUR-PROJECT-NAME,
  "private_key_id": YOUR-PRIVATE-KEY-ID,
  "private_key": "-----BEGIN PRIVATE KEY-----\n-YOUR-PRIVATE-KEY-\n-----END PRIVATE KEY-----\n",
  "client_email": EMAIL-ASSIGNED-TO-THIS-SERVICE-ACCOUNT
  "client_id": YOUR-CLIENT-ID,
  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
  "token_uri": "https://oauth2.googleapis.com/token",
  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
  "client_x509_cert_url": YOUR-CLIENT-CERT-URL
}