ops0ops0

GCP Integration

ops0 connects to Google Cloud using project-level access and a service account. You can use the integration for discovery, infrastructure changes, and inventory across the target project.


Adding the Integration

Go to Settings > Integrations > Add Integration.

Select Google Cloud

Choose Google Cloud from the provider list.

Enter Project Details

Provide the target project ID and upload the service account key.

Connect

Click Connect to verify access.


Integration Fields

FieldRequiredDescription
NameYesIntegration name
Project IDYesGCP project ID
Service Account KeyYesJSON key file for the service account

Creating the Service Account

Open IAM & Admin

Go to GCP Console and open IAM & Admin.

Create a Service Account

Create a dedicated service account for ops0.

Grant Required Roles

Assign the roles needed for discovery or deployment based on your use case.

Download the JSON Key

Generate the key file and upload it in the integration form.


Required GCP Roles

For IaC Deployments

  • roles/editor or a custom least-privilege set covering the resources you manage

For Discovery

  • roles/viewer
  • roles/compute.viewer
  • roles/storage.objectViewer
Least Privilege

If you don’t want to use roles/editor, create a custom role that covers only the services ops0 should read or manage.


Troubleshooting

Permission Denied

Confirm the service account has the required roles on the project.

Invalid JSON Key

Re-download the key and make sure the uploaded file is a valid service account credential.

Wrong Project

Double-check the project ID in the integration matches the project where resources live.