This document describes how to deploy Firetiger to a GCP project in your GCP organization.

During this process, you will:

1. Create a new GCP Project configured with a Billing Account
2. Enable required service APIs within the project
3. Grant Firetiger permission to deploy the Firetiger stack in your new project

Prerequisites

1. You, the Firetiger customer, have access to the Google Cloud Console with permission to:
   • Create and Manage Projects (ie roles/resourcemanager.projectCreator)
   • Associate a project with a GCP Billing Account (ie roles/billing.user)
   • Enable APIs within the new project
   • Manage IAM permissions within the new project
2. Google Cloud CLI installed (gcloud)

Setup

First, we’ll ensure we have a GCP Project and that it is associated with a billing account:

1. Create a new project (if not using an existing one):

# Create new project (optional - can use existing)
export GCP_PROJECT_ID="firetiger-$company"
gcloud projects create $GCP_PROJECT_ID --name="Firetiger"

# Set the working project
gcloud config set project $GCP_PROJECT_ID

1. Associate the project with a Billing Account

First, choose the relevant Billing Account for your GCP Organization. You can see your billing accounts by running:

gcloud billing accounts list

Then, configure your billing account ID and link it to the new project

export BILLING_ACCOUNT_ID="your-billing-account-id"
gcloud billing projects link $GCP_PROJECT_ID --billing-account $BILLING_ACCOUNT_ID

1. Enable Required Services in Your Project:

# Enable services required by Firetiger
gcloud --project $GCP_PROJECT_ID services enable \
	cloudresourcemanager.googleapis.com \
  iam.googleapis.com \
  artifactregistry.googleapis.com \
  cloudbuild.googleapis.com \
  cloudfunctions.googleapis.com \
  eventarc.googleapis.com \
  run.googleapis.com \
  cloudscheduler.googleapis.com \
	sqladmin.googleapis.com \
  secretmanager.googleapis.com \
  storage.googleapis.com \
  pubsub.googleapis.com \
  logging.googleapis.com \
  bigquery.googleapis.com

1. Grant Firetiger Permission to Deploy the Firetiger Stack to your project (via Service Account)