Configure the MART service account

This topic explains how to configure the MART service account.

Adding the MART service account

MART and Apigee Connect require a Google Cloud service account for authentication.

  1. Locate the key file for the apigee-mart service account. The file should have a .json extension. It should reside in the apigee-org directory or a subdirectory.
    • PROD installations: apigee-mart.json
    • NON-PROD installations: apigee-non-prod.json
  2. If you do not see the MART service account file, create and download it with the create-service-account utility:
    1. Make sure your PROJECT_ID environment variable is set: 
      echo $PROJECT_ID

      Define it if needed:

      export PROJECT_ID=my-project-id
    2. Create the MART service account. You can find the create-service-account tool in: 
      APIGEE_HELM_CHARTS_HOME/
└── apigee-operator/
    └── etc/
        └── tools/
            └── create-service-account

      PROD

      create-service-account \
  --env prod \
  --profile apigee-mart \
  --dir PATH_TO_apigee-org_CHART_DIR

      NON-PROD

      $HYBRID_FILES/tools/create-service-account \
  --env non-prod \
  --profile apigee-mart \
  --dir PATH_TO_apigee-org_CHART_DIR/
  3. Edit your overrides.yaml file and add the key file path to the connectAgent and mart.serviceAccountPath properties:

    PROD

    connectAgent:
  serviceAccountPath: path_to_apigee-mart.json

mart:
  serviceAccountPath: path_to_apigee-mart.json

    NON-PROD

    connectAgent:
  serviceAccountPath: path_to_apigee-non-prod.json

mart:
  serviceAccountPath: path_to_apigee-non-prod.json

    For example: 

    ...
      connectAgent:
        serviceAccountPath: /apigee/hybrid/helm-charts/apigee-org/apigee-mart.json

      mart:
        serviceAccountPath: /apigee/hybrid/helm-charts/apigee-org/apigee-mart.json
      ...
  4. Apply your changes: 
    helm upgrade ORG_NAME apigee-org/ \
  --namespace apigee \
  --atomic \
  -f OVERRIDES_FILE.yaml