GCP - gs

GS storage setup on Konduktor - Google Cloud Provider permissions

'serviceusage.services.list',
'serviceusage.services.use',
'storage.buckets.create',
'storage.buckets.get',
'storage.buckets.delete',
'storage.objects.create',
'storage.objects.delete',
'storage.objects.update',
'storage.objects.get',
'storage.objects.list',
'resourcemanager.projects.get'

Above are the easiest permissions to grant a GCP service account without the Owner role. Access can be granted via GCP’s IAM & Admin console.

The Cloud Resource Manager and Cloud Storage APIs must be enabled in the project. konduktor check gs enables them if they are off, which needs serviceusage.services.enable; if users don’t have it, have a project admin enable the APIs once:

gcloud services enable cloudresourcemanager.googleapis.com storage.googleapis.com --project <PROJECT_ID>