Zynnode logoZynnode

Connecting GCP

Link your Google Cloud Platform account to Zynnode with a service account key.

Zynnode connects to Google Cloud Platform using a service account JSON key. This key gives Zynnode the permissions to deploy to services like Cloud Run, App Engine, and Compute Engine in your GCP project.

Prerequisites

  • A Google Cloud Platform account with billing enabled
  • A GCP project to deploy into
  • Permission to create service accounts in that project

Step-by-Step Setup

Start the Connection in Zynnode

During the new project wizard, select GCP as your cloud provider. You'll see a form asking for:

  • Connection Name — A friendly label (e.g., "My GCP Project")
  • Service Account JSON — A JSON key file from Google Cloud
  • Project ID — Your GCP project identifier (auto-fills from the JSON)

The next steps show you how to create the service account and download the key.

Create a Service Account in Google Cloud Console

  1. Open the Google Cloud Console.
  2. Make sure you've selected the correct project from the project dropdown at the top of the page.
  3. In the left sidebar, navigate to IAM & Admin → Service Accounts. Or go directly to: console.cloud.google.com/iam-admin/serviceaccounts
  4. Click + Create Service Account at the top.

Configure the Service Account

  1. Service account name — Enter a descriptive name like zynnode-deploy.
  2. Service account ID — This auto-fills based on the name. Leave it as-is.
  3. Description — Optional. You can write "Used by Zynnode for deployments."
  4. Click Create and continue.

Assign Roles

On the Grant this service account access to project step, you need to add four roles. Click the Role dropdown and add each one:

RoleWhy It's Needed
Cloud Run AdminDeploy and manage Cloud Run services
Storage AdminUpload build artifacts and static files
Service Account UserAllow the service account to act on behalf of other service accounts (needed for Cloud Run)
Artifact Registry WriterPush container images for Cloud Run deployments

To add multiple roles:

  1. Select the first role from the dropdown.
  2. Click + Add another role.
  3. Repeat until all four roles are added.

Click Continue, then click Done.

Make sure all four roles are assigned. Missing roles will cause deployment failures with "permission denied" errors.

Download the JSON Key

  1. You'll be back on the Service Accounts list. Find the service account you just created.
  2. Click the three dots (⋮) menu on the right side of the row.
  3. Click Manage keys.
  4. Click Add key → Create new key.
  5. Select JSON as the key type.
  6. Click Create.

The JSON key file will download to your computer automatically. It contains your project ID, client email, and a private key.

Keep this file safe. It provides access to your GCP project. Don't share it publicly or commit it to a repository.

Upload the Key to Zynnode

Back in the Zynnode dashboard:

  1. Click the upload area or drag and drop the JSON key file you just downloaded.
  2. Zynnode will parse the file and auto-fill the Project ID and show the service account email with a green checkmark.
  3. Verify the project ID matches the GCP project you want to deploy to. You can override it if needed.
  4. Give the connection a name (e.g., "My GCP Project").
  5. Click Connect.

Zynnode will verify the credentials and show a success message. You can now proceed with your deployment.

If you've already connected a GCP project in a previous deployment, Zynnode will detect the existing connection and skip this step.

Alternatively: Paste the JSON Manually

If you prefer, you can paste the contents of the JSON key file directly instead of uploading:

  1. Open the downloaded .json file in any text editor.
  2. Copy the entire contents.
  3. In Zynnode, paste it into the Service Account JSON text area.
  4. Zynnode will parse and validate the JSON automatically.

Troubleshooting

"Invalid service account key" error

  • Make sure you downloaded the key in JSON format, not P12.
  • Verify the JSON file contains these fields: type, project_id, client_email, and private_key.
  • Don't modify the JSON file — paste or upload it exactly as downloaded.

"Permission denied" during deployment

  • Go back to IAM & Admin → Service Accounts in the Google Cloud Console.
  • Click on your service account, then go to the Permissions tab.
  • Verify all four required roles are assigned: Cloud Run Admin, Storage Admin, Service Account User, Artifact Registry Writer.

"Project not found" error

  • Verify the Project ID shown in Zynnode matches an actual GCP project.
  • Make sure the GCP project has billing enabled. Go to Billing in the Google Cloud Console and confirm the project is linked to a billing account.

I want to disconnect GCP

To revoke Zynnode's access to your GCP project:

  1. Open the Google Cloud Console.
  2. Navigate to IAM & Admin → Service Accounts.
  3. Find the service account you created for Zynnode (e.g., zynnode-deploy).
  4. Click the three dots (⋮) menu and select Delete.
  5. In the Zynnode dashboard, remove the GCP connection card.
Was this page helpful?

Connecting Azure

Link your Microsoft Azure account to Zynnode using an ARM template.

How Deployments Work

Understand what happens when you deploy an app on Zynnode.

On this page

PrerequisitesStep-by-Step SetupStart the Connection in ZynnodeCreate a Service Account in Google Cloud ConsoleConfigure the Service AccountAssign RolesDownload the JSON KeyUpload the Key to ZynnodeAlternatively: Paste the JSON ManuallyTroubleshooting"Invalid service account key" error"Permission denied" during deployment"Project not found" errorI want to disconnect GCP