3.4.5.1.2.3. Google Cloud Storage (GCS)

Prerequisites

• To connect to a cloud endpoint, you must have licensed the Archive Connector Module add-on. The module is included in all Skies deployments.
• This feature has been available since Strawberry 6.6.3.

Service User Account Creation

1. In the Google Cloud console, navigate to IAM and Admin.
2. In the menu on the left, click on Service accounts
3. Select the project under which the new service account should be created.
4. Create a new service account and give it a sufficient role for managing objects within a bucket. The role must be able to read, write, delete objects, and modify object metadata. The default Google Cloud role Storage Object Admin includes all these capabilities and can be scoped to a specific bucket.
5. Once the service account has been created, click on the three-dotted action menu next to it and select Manage Keys.
6. Click on ADD KEY and then on Create New Key. A modal named Create private key for ‘service-user-name’ will appear.
7. Under Key type select JSON and click on the Create button.
8. Once the key has been created, it will be downloaded to your Computer. Make sure to store it in a secure location!

Bucket Creation and Configuration

1. In the Google Cloud console, navigate to Cloud Storage
2. In the menu on the left, click on Buckets
3. Click the Create button to create and configure a new bucket.

• All available Google Cloud storage classes are supported.
• Public access prevention must be enabled
• The bucket must have Access control set to Fine-grained.
  

4. Finish the creation of the bucket.
5. Once the bucket has been created, click on its name and then on the PERMISSIONS tab.
6. Make sure that the service user account created in the above section has access to this bucket.

Strawberry Configuration

1. Log in to the Strawberry admin panel.
2. Click on the Archive tab.
3. Click on the Archive Strategies bar to expand it.
4. Click on the Add button located below the list of strategies.
5. Now provide the following information:

Name

The name of the archive strategy as users will see it when they archive projects. This can be something generic, such as Cloud Archive, or something more specific, such as Google Cloud Archive. The strategy name can be changed later.

Type

Select Cloud Endpoint as the type. From here, the following information needs to be provided:

• Cloud Storage: Select Google Cloud Storage. This cannot be changed later.
• Bucket: The name of the archive bucket as shown in the Google Cloud Console. When copying the bucket name from Cloud Console, check for and remove any trailing spaces. The bucket name cannot be changed later!
• Service Account Key: The content of the service user’s JSON-formatted key file. You must open the JSON file in a text editor, copy its complete content, and paste it here. This value can be changed at a later point.
• Prefix: This one is optional. Define the folder within the bucket into which Strawberry should archive projects. The default prefix is pam_archive, but it can be changed to a custom value. You can also keep it empty if projects should be archived to the top level of the bucket. The prefix cannot be changed later.