terraform/website/source/docs/providers/google/index.html.markdown

layout	page_title	sidebar_current	description
google	Provider: Google Cloud	docs-google-index	The Google Cloud provider is used to interact with Google Cloud services. The provider needs to be configured with the proper credentials before it can be used.

Google Cloud Provider

The Google Cloud provider is used to interact with Google Cloud services. The provider needs to be configured with the proper credentials before it can be used.

Use the navigation to the left to read about the available resources.

Example Usage

# Configure the Google Cloud provider
provider "google" {
    account_file = "account.json"
    client_secrets_file = "client_secrets.json"
    project = "my-gce-project"
    region = "us-central1"
}

# Create a new instance
resource "google_compute_instance" "default" {
    ...
}

Configuration Reference

The following keys can be used to configure the provider.

• account_file - (Required) Path to the JSON file used to describe your account credentials, downloaded from Google Cloud Console. More details on retrieving this file are below.

• client_secrets_file - (Required) Path to the JSON file containing the secrets for your account, downloaded from Google Cloud Console. More details on retrieving this file are below.

• project - (Required) The name of the project to apply any resources to.

• region - (Required) The region to operate under.

Authentication JSON Files

Authenticating with Google Cloud services requires two separate JSON files: one which we call the account file and the client secrets file.

Both of these files are downloaded directly from the Google Developers Console. To make the process more straightforwarded, it is documented here.

1. Log into the Google Developers Console and select a project.

2. Under the "APIs & Auth" section, click "Credentials."

3. Create a new OAuth client ID and select "Installed application" as the type of account. Once created, click the "Download JSON" button underneath the account. The file should start with "client_secret". This is your client secrets file.

4. Create a new OAuth client ID and select "Service account" as the type of account. Once created, a JSON file should be downloaded. This is your account file.