Chapter 2. Creating and downloading the GCS credentials file

Click the Credentials tab, click Create credentials, and select Service account key from the Create credentials drop-down list.

On the Create service account key page, select the service account that you want the Block Storage service to use from the Service account drop-down list:

On the Create service account key page, select the JSON radio button from the Key type section and click Create.

The browser downloads the key to the default download location:

Open the file and note the value of the project_id parameter:

{
  "type": "service_account",
  "project_id": "cloud-backup-1370",
...

{
  "type": "service_account",
  "project_id": "cloud-backup-1370",
...

You use the /etc/cinder/Cloud-Backup.json key in Chapter 3, Create the Block Storage environment file in particular, the value of project_id, and the absolute path to the file.

Copy the key file to /etc/cinder/ on any Controller node and change the user, group, and permissions of the key file to match that of /etc/cinder/cinder.conf. This ensures that the Block Storage service can use the key file:

cp Cloud-Backup.json /etc/cinder/
chown cinder:cinder /etc/cinder/Cloud-Backup.json
chmod 0600 /etc/cinder/Cloud-Backup.json

# cp Cloud-Backup.json /etc/cinder/
# chown cinder:cinder /etc/cinder/Cloud-Backup.json
# chmod 0600 /etc/cinder/Cloud-Backup.json

Copy the key file to /etc/cinder/Cloud-Backup.json_ on each Controller node. Use rsync -a to preserve the permissions and ownership settings:

rsync -a /etc/cinder/Cloud-Backup.json root@CONTROLLERHOST:/etc/cinder/

# rsync -a /etc/cinder/Cloud-Backup.json root@CONTROLLERHOST:/etc/cinder/

Replace CONTROLLERHOST with the hostname of a target Controller.