Google Cloud Platform

This topic describes how to connect your Google Cloud Platform (GCP) account to SoftwareOne's FinOps for Cloud. When connecting your account, you will need to provide the billing data details, such as the dataset name and table name.

Google Cloud data source

Enabling billing export

To enable billing data export, see Set up Cloud Billing data export to BigQuery in the Google documentation.

After you have enabled billing data export, a new table is displayed in your BigQuery project.

Note the names of the dataset and the table. You'll need these details when connecting your cloud account to FinOps for Cloud.

Billing export

Creating a role for FinOps for Cloud

You can create a role using Google Cloud CLI or Google Cloud Console:

Google Cloud CLI

To assign the role via gcloud CLI, run the following command:

gcloud iam roles create
optscale_connection_role \--project=hystaxcom
\--permissions=bigquery.jobs.create, bigquery.tables.getData, compute.addresses.list, 
compute.addresses.setLabels, compute.disks.list, compute.disks.setLabels, compute.firewalls.list, 
compute.instances.list, compute.instances.setLabels, compute.images.list, compute.images.setLabels,
compute.machineTypes.get, compute.machineTypes.list, compute.networks.list, compute.regions.list, 
compute.snapshots.list, compute.snapshots.setLabels, compute.zones.list, iam.serviceAccounts.list,
monitoring.timeSeries.list, storage.buckets.get, storage.buckets.getIamPolicy, storage.buckets.list, 
storage.buckets.update

Google Cloud Console

1. Sign in to the Google Cloud console.
2. In the Search bar, enter Roles, and then on the Roles page, click Create Role.
3. Provide the role title and description.

4. Click Add permissions and add the following permissions to the created role:

   • bigquery.jobs.create

   • bigquery.tables.getData

   • compute.addresses.list

   • compute.addresses.setLabels

   • compute.disks.list

   • compute.disks.setLabels

   • compute.firewalls.list

   • compute.instances.list

   • compute.instances.setLabels

   • compute.images.list

   • compute.images.setLabels

   • compute.machineTypes.get

   • compute.machineTypes.list

   • compute.networks.list

   • compute.regions.list

   • compute.snapshots.list

   • compute.snapshots.setLabels

   • compute.zones.list

   • iam.serviceAccounts.list

   • monitoring.timeSeries.list

   • storage.buckets.get

   • storage.buckets.getIamPolicy

   • storage.buckets.list

   • storage.buckets.update

5. Click Add.

6. Click Create.

Creating a service account

Learn about service accounts in the Google documentation - Service accounts | IAM Documentation | Google Cloud.

To create a service account:

1. From your GCP console, select Service Accounts in the left-hand menu and click Create Service Account.
2. Enter a service account name and optionally, enter a description of the service account.

3. Select Create and continue.

4. Select the role you created and click Continue.
5. Select Done.

Generating an API key for your service account

To generate an API key for your service account:

1. Find your service account in the service accounts list and click its name to go to the service account details page.

2. Go to the Keys tab.

3. Select Add key > Create new key.

The service account API key will be downloaded as a JSON file. Use this file when connecting your cloud account to FinOps.

Connecting the data source in FinOps for Cloud

Use the newly downloaded service account credentials JSON file with the billing dataset details to connect your GCP cloud account. Next, click Connect to complete the setup.

Google Cloud data source