Skip to main content

Manage data credentials for GCP

A data credential for GCP in CelerData references a Google Cloud Storage bucket, and a service account that declares read and write permissions on the bucket. Through the service account, the VMs within the VPC can gain read and write permissions on the specific bucket. After you create a CelerData cluster by using a specific data credential, all profiles generated by CelerData for SQL queries within the cluster will be stored in the Google Cloud bucket referenced in the data credential. In addition, if you create an Elastic cluster, the data will be stored in this bucket by default.

CelerData automatically generates a data credential upon each successful cluster deployment on GCP. You can manage these data credentials for GCP, including creating, viewing, and deleting a data credential.

To ensure a successful cluster deployment in your own VPC, you must have a data credential to select, or create one, during the deployment process.

Create a data credential​

The instructions below show you how to create a data credential from the Cloud settings page in the CelerData Cloud BYOC console before you create a deployment. You can also create a data credential in a similar way as part of the workflow of creating a deployment. See Deployment on GCP.

NOTE

  • Before proceeding to create a new data credential, you must create a Google Cloud Project and enable necessary APIs.
  • If you create a deployment without selecting an existing data credential, CelerData automatically creates a data credential based on your input during deployment and saves it for future use.

To create a data credential before deployment, follow these steps:

  1. Sign in to the CelerData Cloud BYOC console.

  2. In the left-side navigation pane, choose Cloud settings > GCP.

  3. On the Data credentials tab of the GCP cloud settings page, click Create data credential.

  4. In the Create data credential dialog box, configure the following parameters and click Submit.

    ParameterRequiredDescription
    Data credential nameYesEnter the name of the data credential.
    NOTE
    The name must be unique within your CelerData Cloud account.
    Bucket nameYesEnter the name of your bucket.
    NOTE
    When you create a cluster, you can only use a data credential that references a bucket located in the same region as the cluster.
    Instance service accountYesEnter the instance service account that you have created to grant CelerData permission to access your bucket.

    For Instance service account, you need to follow the instructions provided in Create a Service Account for your Compute Engine to create a service account in the Google Cloud console and copy the service account name from the Name field on the IAM > Service accounts page, and the bucket name from the Name field on the Cloud Storage > Buckets page.

On the Data credentials tab of the GCP Cloud settings page, the data credential that you just created is shown.

When you create a cluster, you can select and reuse a data credential that you have already created.

View a data credential​

Before you start a deployment, you can view all of the data credentials created within your CelerData Cloud account and find the one that best suits your deployment requirements. Then, you can select that data credential during the deployment process.

To view a data credential, follow these steps:

  1. Sign in to the CelerData Cloud BYOC console.

  2. In the left-side navigation pane, choose Cloud settings > GCP.

  3. On the Data credentials tab of the GCP Cloud settings page, click the data credential whose details you want to view.

  4. On the right-side pane that appears, view the details about the data credential.

Delete a data credential​

Data credentials cannot be edited after they are created. If a data credential has incorrect data or if you no longer need a data credential, you can follow these steps to delete it:

  1. Sign in to the CelerData Cloud BYOC console.

  2. In the left-side navigation pane, choose Cloud Settings > GCP.

  3. On the Data credentials tab of the GCP Cloud settings page, click the data credential that you want to delete.

  4. On the right-side pane that appears, click Delete.

  5. In the dialog box that appears, enter Delete and click Delete.

NOTE

A data credential cannot be deleted if there are still CelerData clusters created based on it. Therefore, before you delete a data credential, make sure all CelerData clusters that are created by using the data credential are released.

Usage notes​

When you are creating a deployment, you cannot edit an existing data credential that you select. If no existing data credentials can meet your deployment requirements, we recommend that you create a new data credential.