Google Cloud Platform
Last updated
Last updated
To use GCP as your storage environment to backup your metadata and data objects, you need to configure it in the Vault application first.
Head to the Backup Environment tab under the Settings module.
Select GCP as the Storage Type.
Enter the Label Name of your choice
Enter your Cloud Storage Bucket Name. To create a new storage bucket, follow the below steps:
In the Google Cloud Console, go to the Cloud Storage Browser page.
Click Create bucket.
On the Create a bucket page, enter your bucket information. To go to the next step, click Continue.
For Name your bucket, enter a name that meets the bucket naming requirements.
For Choose where to store your data, select a Location type and Location option where the bucket data will be permanently stored.
For Choose a default storage class for your data, select a storage class for the bucket. The default storage class is assigned by default to all objects uploaded to the bucket.
For Choose how to control access to objects, select an Access control option. The access control model determines how you control access to the bucket's objects.
For Advanced settings (optional), add bucket labels, set a retention policy, and choose an encryption method.
Click Create.
In the Project ID field, enter the project ID for which you would like to add them in Vault. You can find the details in the Settings tab in your Google Cloud Console.Steps to create a new Project
Go to the Manage resources page in the Cloud Console.
On the Select organization drop-down list at the top of the page, select the organization in which you want to create a project. If you are a free trial user, skip this step, as this list does not appear.
Click Create Project.
In the New Project window that appears, enter a project name and select a billing account as applicable. A project name can contain only letters, numbers, single quotes, hyphens, spaces, or exclamation points, and must be between 4 and 30 characters.
Enter the parent organization or folder in the Location box. That resource will be the hierarchical parent of the new project.
When you're finished entering new project details, click Create.
Now, upload the GC Storage Credential File for your GCP service account from your local system. The file is in JSON format. If you haven't created a service account yet, you can create a new one by following the below steps:
In the Cloud Console, go to the Service Accounts page.
Select a project.
Click Create Service Account.
Enter a service account name to display in the Cloud Console.
The Cloud Console generates a service account ID based on this name. Edit the ID if necessary. You cannot change the ID later.
Optional: Enter a description of the service account.
If you do not want to set access controls now, click Done to finish creating the service account. To set access controls now, click Create and continue to the next step.
Optional: Choose one or more IAM roles to grant to the service account on the project.
When you are done adding roles, click Continue.
Optional: In the Service account users role field, add members that can impersonate the service account.
Optional: In the Service account admins role field, add members that can manage the service account.
Click Done to finish creating the service account.
Go to the Actions tab and select the option: Manage Keys
In the Keys tab, go to Add Key > Create new key.
Select the Key type as JSON and click on Create. The file gets downloaded to your local system.
Upload the downloaded JSON file in the GC Storage Credential File field.
In Region, choose the GCP Region where your bucket resides.
Click Save Settings.
To select the default Vault hosted environment to work on the Vault functionalities:
Select the checkbox: AR Vault Hosted Backup Environment.
Choose the Region where you want the bucket to reside.
Click Save Settings.
