Avant de commencer

Cette page explique comment configurer un projet Google Cloud et configurer des comptes de service pour y accéder.

Configurer un projet Google Cloud

Suivez ces étapes pour configurer un projet Google Cloud.

1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

2. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

3. Make sure that billing is enabled for your Google Cloud project.

4. Enable the Video Stitcher and Live Stream APIs.

   Enable the APIs

5. Create a service account:

   1. In the Google Cloud console, go to the Create service account page.

      Go to Create service account
   2. Select your project.

   3. In the Service account name field, enter a name. The Google Cloud console fills in the Service account ID field based on this name.

      In the Service account description field, enter a description. For example, Service account for quickstart.

   4. Click Create and continue.

   5. Grant the following roles to the service account: Video Stitcher Admin, Live Stream Editor, Storage Admin.

      To grant a role, find the Select a role list, then select the role.

      To grant additional roles, click Add another role and add each additional role.

      Note: The Role field affects which resources the service account can access in your project. You can revoke these roles or grant additional roles later.
   6. Click Continue.

   7. Click Done to finish creating the service account.

      Do not close your browser window. You will use it in the next step.

6. Create a service account key:

   1. In the Google Cloud console, click the email address for the service account that you created.
   2. Click Keys.
   3. Click Add key, and then click Create new key.
   4. Click Create. A JSON key file is downloaded to your computer.
   5. Click Close.

7. Set the environment variable GOOGLE_APPLICATION_CREDENTIALS to the path of the JSON file that contains your credentials. This variable applies only to your current shell session, so if you open a new session, set the variable again.

   Example: Linux or macOS

   export GOOGLE_APPLICATION_CREDENTIALS="KEY_PATH"

   Replace KEY_PATH with the path of the JSON file that contains your credentials.

   For example:

   export GOOGLE_APPLICATION_CREDENTIALS="/home/user/Downloads/service-account-file.json"

   Example: Windows

   For PowerShell:

   $env:GOOGLE_APPLICATION_CREDENTIALS="KEY_PATH"

   Replace KEY_PATH with the path of the JSON file that contains your credentials.

   For example:

   $env:GOOGLE_APPLICATION_CREDENTIALS="C:\Users\username\Downloads\service-account-file.json"

   For command prompt:

   set GOOGLE_APPLICATION_CREDENTIALS=KEY_PATH

   Replace KEY_PATH with the path of the JSON file that contains your credentials.

8. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

9. Make sure that billing is enabled for your Google Cloud project.

10. Enable the Video Stitcher and Live Stream APIs.

    Enable the APIs

11. Create a service account:

    1. In the Google Cloud console, go to the Create service account page.

       Go to Create service account
    2. Select your project.

    3. In the Service account name field, enter a name. The Google Cloud console fills in the Service account ID field based on this name.

       In the Service account description field, enter a description. For example, Service account for quickstart.

    4. Click Create and continue.

    5. Grant the following roles to the service account: Video Stitcher Admin, Live Stream Editor, Storage Admin.

       To grant a role, find the Select a role list, then select the role.

       To grant additional roles, click Add another role and add each additional role.

       Note: The Role field affects which resources the service account can access in your project. You can revoke these roles or grant additional roles later.
    6. Click Continue.

    7. Click Done to finish creating the service account.

       Do not close your browser window. You will use it in the next step.

12. Create a service account key:

    1. In the Google Cloud console, click the email address for the service account that you created.
    2. Click Keys.
    3. Click Add key, and then click Create new key.
    4. Click Create. A JSON key file is downloaded to your computer.
    5. Click Close.

13. Set the environment variable GOOGLE_APPLICATION_CREDENTIALS to the path of the JSON file that contains your credentials. This variable applies only to your current shell session, so if you open a new session, set the variable again.

    Example: Linux or macOS

    export GOOGLE_APPLICATION_CREDENTIALS="KEY_PATH"

    Replace KEY_PATH with the path of the JSON file that contains your credentials.

    For example:

    export GOOGLE_APPLICATION_CREDENTIALS="/home/user/Downloads/service-account-file.json"

    Example: Windows

    For PowerShell:

    $env:GOOGLE_APPLICATION_CREDENTIALS="KEY_PATH"

    Replace KEY_PATH with the path of the JSON file that contains your credentials.

    For example:

    $env:GOOGLE_APPLICATION_CREDENTIALS="C:\Users\username\Downloads\service-account-file.json"

    For command prompt:

    set GOOGLE_APPLICATION_CREDENTIALS=KEY_PATH

    Replace KEY_PATH with the path of the JSON file that contains your credentials.

14. Install the Google Cloud CLI.

15. To initialize the gcloud CLI, run the following command:

    gcloud init

    Note: You can run the gcloud CLI in the Google Cloud console without installing the Google Cloud CLI. To run the gcloud CLI in the Google Cloud console, use Cloud Shell.
16. Utilisez l'outil gcloud pour tester votre environnement d'authentification. Vérifiez que la commande suivante génère une chaîne de texte sans erreur :

    gcloud auth application-default print-access-token

Activer le compte de service

1. Dans votre terminal, définissez le projet actif pour les commandes gcloud. Remplacez YOUR_PROJECT_ID par votre ID de projet :

   gcloud config set project YOUR_PROJECT_ID

2. Activez le compte de service. Remplacez PATH_TO_YOUR_SERVICE_KEY par le chemin d'accès au fichier JSON que vous avez téléchargé sur votre ordinateur local.

   gcloud auth activate-service-account --key-file PATH_TO_YOUR_SERVICE_KEY

Vous utiliserez ce compte de service pour autoriser l'accès à l'API Video Stitcher et l'appeler.

Associer le compte de service au compte Ad Manager

Une fois le compte de service créé, vous devez l'associer à votre compte Ad Manager. Cela permet à l'API Video Stitcher de créer des événements de diffusion en direct en votre nom. Pour ce faire, procédez comme suit pour accorder l'accès à votre compte de service:

1. Connectez-vous à Google Ad Manager (GAM).
2. Cliquez sur Admin > Paramètres généraux.
3. Assurez-vous que l'accès à l'API est activé.
4. Cliquez sur Ajouter un utilisateur au compte de service.
5. Remplissez le formulaire, y compris l'adresse e-mail du compte de service créé précédemment.
6. Sélectionnez un rôle qui doit inclure l'autorisation Gérer du contenu vidéo avec l'insertion dynamique d'annonces depuis l'assembleur vidéo Google Cloud. Vous devez créer un rôle personnalisé nommé Gestionnaire de diffusion en direct spécialement pour la gestion de ce compte de service. Le rôle personnalisé doit disposer au moins des autorisations suivantes :
   • Gérer le contenu vidéo avec l'insertion dynamique d'annonces depuis Google Cloud Video Stitcher
   • Afficher les créations (requis par l'autorisation précédente)
   • Afficher le contenu, les groupes et les métadonnées des vidéos
   • Afficher les sources de contenu
7. Cliquez sur Enregistrer et confirmez l'ajout du compte de service.

Créer un compte de service avec uniquement les autorisations nécessaires pour créer des sessions

Étant donné qu'un jeton OAuth sera transmis à une application cliente, créez un compte de service distinct doté uniquement des autorisations nécessaires pour créer une session. La fuite d'un jeton OAuth ne peut donc pas compromettre vos ressources, telles que les clés CDN et les événements de diffusion en direct.

Create a service account:

1. In the Google Cloud console, go to the Create service account page.

   Go to Create service account
2. Select your project.

3. In the Service account name field, enter a name. The Google Cloud console fills in the Service account ID field based on this name.

   In the Service account description field, enter a description. For example, Service account for quickstart.

4. Click Create and continue.

5. Grant the following roles to the service account: Video Stitcher User.

   To grant a role, find the Select a role list, then select the role.

   To grant additional roles, click Add another role and add each additional role.

   Note: The Role field affects which resources the service account can access in your project. You can revoke these roles or grant additional roles later.
6. Click Continue.

7. Click Done to finish creating the service account.

   Do not close your browser window. You will use it in the next step.

Create a service account key:

1. In the Google Cloud console, click the email address for the service account that you created.
2. Click Keys.
3. Click Add key, and then click Create new key.
4. Click Create. A JSON key file is downloaded to your computer.
5. Click Close.