IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

CloudMonitoring: Update docs with instructions for multiple projects (#73862)

Browse Source 
* CloudMonitoring: Update docs with instructions for multiple projects

* change title case for service account

Co-authored-by: lwandz13 <126723338+lwandz13@users.noreply.github.com>

* change title case for default service account

Co-authored-by: lwandz13 <126723338+lwandz13@users.noreply.github.com>

---------

Co-authored-by: lwandz13 <126723338+lwandz13@users.noreply.github.com>
This commit is contained in:
Adam Simpson
2023-08-28 10:59:22 -04:00
committed by GitHub
parent a80fd02f95
commit b69c858b07
1 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docs/sources/datasources/google-cloud-monitoring/google-authentication/index.md
View File

@@ -46,7 +46,20 @@ To visualize data from multiple GCP Projects, create one data source per GCP Pro
The file's contents are encrypted and saved in the Grafana database.
Remember to save the file after uploading.
## Configure a GCE Default Service Account
#### Create a GCP service account for multiple projects
You can create a service account and key file that can be used to access multiple projects. Follow steps 1-5 above, then:
1. Note the email address of the service account, it will look a little strange like `foobar-478@main-boardwalk-90210.iam.gserviceaccount.com`.
1. Navigtate to the other project(s) you want to access.
1. Add the service account email address to the IAM page of each project, and grant it the required roles.
1. Navigate back to the original project's service account and create a [service account key](https://cloud.google.com/iam/docs/creating-managing-service-account-keys#iam-service-account-keys-create-console). A JSON key file is created and downloaded to your computer
1. Store the key file in a secure place, because it grants access to your Google data.
1. In the Grafana data source configuration page, upload the key file.
The file's contents are encrypted and saved in the Grafana database.
Remember to save the file after uploading.
## Configure a GCE default service account
When Grafana is running on a Google Compute Engine (GCE) virtual machine, Grafana can automatically retrieve default credentials from the metadata server. As a result, there is no need to generate a private key file for the service account. You also do not need to upload the file to Grafana. The following preconditions must be met before Grafana can retrieve default credentials.