Creating a Google Service Account

In order to create a Google service account for use with Thanos:

Navigate to the Google console menu and select IAM & Admin -> Service accounts.

From here, select the option + Create Service Account

Provide a Service Account Name and Description

Press Create.

You should now be at the Service account permissions (optional) screen. Click inside the Role box, and set the first entry to Storage Object Creator. Click the + Add Another Role and set the second entry to Storage Object Viewer.

Hit Continue

You should now be prompted to allow specific accounts access to this service account. This should be based on specific internal needs and is not a requirement. You can leave empty and press Done

Create a Key

Once back to the service accounts menu, select the ... at the end of the entry you just created and press Create Key

Confirm JSON

Confirm a JSON key and hit Create. This will download a JSON service account key entry for use with the Thanos object-store.yaml mentioned in the initial setup step.

Edit this doc on Github