Google Cloud: Create and delete service account keys

The var.credentials_file_path is a Terraform variable that holds the file path to your Google Cloud Platform (GCP) service account credentials JSON file. This file is used by Terraform to authenticate with GCP and perform actions such as creating and managing resources.

How to Get the credentials_file_path

To get the credentials_file_path, you need to follow these steps:

1. Create a Service Account

• Go to the Google Cloud Console.
• Navigate to IAM & Admin > Service Accounts.
• Click on Create Service Account.
• Provide a name for the service account and an optional description, then click Create.
• In the next step, assign the appropriate roles to the service account, such as Compute Admin for managing compute instances.
• Click Done to create the service account.

2. Create and Download the JSON Key File

• After creating the service account, you will see it listed under IAM & Admin > Service Accounts.
• Click on the service account you just created.
• Navigate to the Keys tab.
• Click on Add Key > Create New Key.
• Select JSON as the key type, and click Create.
• A JSON file containing your credentials will be downloaded to your computer. This is your credentials file.

3. Specify the File Path

• The credentials_file_path is the path to the JSON file you just downloaded. For example, if the file is in your Downloads directory, the path might look like this:

Replace /home/your-username/Downloads/your-service-account-key.json with the actual path to your file in the Terraform code.

1. In the Google Cloud console, go to the Service accounts page.Go to Service accountsThe remaining steps appear in the Google Cloud console.
2. Select a project.
3. Click the email address of the service account that you want to create a key for.
4. Click the Keys tab.
5. Click the Add key drop-down menu, then select Create new key.
6. Select JSON as the Key type and click Create.

Clicking Create downloads a service account key file. After you download the key file, you cannot download it again.

The downloaded key has the following format, where PRIVATE_KEY is the private portion of the public/private key pair:

Rajesh Kumar

I’m a DevOps/SRE/DevSecOps/Cloud Expert passionate about sharing knowledge and experiences. I have worked at Cotocus. I share tech blog at DevOps School, travel stories at Holiday Landmark, stock market tips at Stocks Mantra, health and fitness guidance at My Medic Plus, product reviews at TrueReviewNow , and SEO strategies at Wizbrand.

Do you want to learn Quantum Computing?

Please find my social handles as below;

Rajesh Kumar Personal Website
Rajesh Kumar at YOUTUBE
Rajesh Kumar at INSTAGRAM
Rajesh Kumar at X
Rajesh Kumar at FACEBOOK
Rajesh Kumar at LINKEDIN
Rajesh Kumar at WIZBRAND

Rajesh Kumar DailyLogs