Google Cloud Storage configuration

Create Google Cloud Storage Bucket

This section describes how to create and configure a new Google Cloud Storage Bucket. Please follow the steps below:

1. Open a web browser and navigate to https://console.cloud.google.com to logon to the Google Cloud Console.

2. From the left side menu, under the Storage section, click Storage > Browser.

3. On the Browser page, click Create Bucket.

   

4. Create your bucket by entering the required fields in the Create Bucket step-by-step process.

   

Create API Credentials

1. From the Menu on the left, click APIs and Services > Credentials

2. Click the Create Credentials button on the Credentials page and select API key from the dropdown menu.

   

3. The API key will be used within the configuration of the Google Cloud Storage ECP.  After the API key is created and displayed, click Restrict Key.

   

4. Set the API key’s Application restrictions and API restrictions.

   

If an application restriction is configured, HTTP referrers is required for RPI to connect to Google Cloud Storage. For API restriction, make sure Cloud Storage, Cloud Storage API, and Google Cloud Storage JSON API restrictions are checked.

5. Create your OAuth client ID. Click the Create Credentials button on the Credentials page. Select OAuth client ID from the drop-down menu.

6. On the Create OAuth client ID page, select Web application as the application type. Provide a name to your ID and set an authorized redirect URI. Make sure that the redirect URI has been added to the Authorized Domains list. This can be configured in the OAuth consent settings page.

   

7. Click the Create button to finish the step. The Client ID, Client Secret, and Redirect URI will be used within the configuration of the Google Cloud Storage ECP.

Set the IAM Permissions

1. Set the IAM permissions for Cloud Storage. From the main menu, navigate to IAM & Admin > Roles. Click Create Role.

   

2. Set the Title and ID of the role.

3. Click the Add Permissions button. 

4. In the Permissions dialog, filter for ‘storage.buckets’. Check off of the following permissions:

   • storage.buckets.create

   • storage.buckets.delete

   • storage.buckets.get

   • storage.buckets.list

5. Click the Add button.

   

6. Filter for ‘storage.objects’. Check off the following permissions:

   • storage.objects.create

   • storage.objects.get

   • storage.objects.list

   • storage.objects.delete

7. Click the Add button.

   

   

8. The role should now list the selected permissions from above. If incomplete, click the Add Permissions button again to reselect the missing permissions.   

   

9. From the menu on the left, click IAM. Assign the created role to the user that will be using Google Cloud Storage.