Create and manage project

Project in KakaoCloud is for owning services and using their resources. The project creation and management described in this document are only available to users assigned the following IAM roles.

Project Management by IAM role

Function	Org Owner	Org Admin	Org Reader	Project Admin	Project Member	Project Reader
View all projects		✓	✓
Create project		✓
Edit project details		✓
Set default project		✓
Request project deletion		✓

Create project

To use resources in KakaoCloud, you must first create a project within the organization. Only Org Admin can create projects.

info

Before creating a project, a Payment method must be registered. For information on how to register a Payment method, refer to Manage Payment method.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Project menu, click the [Create project] button.

3. Enter the necessary information and click the [Create] button.

   Create project

   Category	Description
   Organization name	Automatically filled with the organization name registered by the Org Owner at the time of initial sign-up
   Project nickname	Name of the project to be created
   Project name	A unique identifier for the project in the API - Cannot be changed later
   Description (optional)	Description of the project

Manage project

View all projects

Org Admin can view all projects within the organization. Project Admin and Project Member can only view projects they are part of.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Project menu, view all projects of the organization.

Modify project information

Org Admin can edit project information, such as the project name and description.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Project menu, click the [More] icon > Modify project.

   • Project information can only be modified within the organization to which the project belongs. Therefore, you must select the organization to which the project belongs before modifying its information.

3. In the popup, modify the Project nickname or Description, then click the [Save] button.

   Modify project

Set default project

When logging into the KakaoCloud Console, if there's no recent project information, you are redirected to the dashboard of the default project. Only one default project can be set, and it can be freely changed.
Org Admin can set a user's default project.

info

Org Admin or Org Owner can set a default project, but users can change it themselves. For instructions on how to set your own default project, refer to Set default project.

1. Go to KakaoCloud Console > Management > IAM.
2. In the User menu, select a user.
3. Click the IAM roles tab and click Set default project.
4. In the pop-up window, select a project and click the [Apply] button.

Delete project

Users with the Org Admin role can request the deletion of a project by leaving an inquiry at the Helpdesk.
The feature to directly delete projects from the console is planned for future support.

caution

When a project is deleted, all resources created within that project are also deleted and cannot be recovered.

1. Click the [Ask a Question] button located at the top right of the Helpdesk.

2. Click the [Technical Inquiry] button, enter the required information, and click the [Register] button.

   Category	Description
   Question Type	Choose between General or Technical Inquiry - For project deletion, select Technical Inquiry
   Type Detail	The detailed type of question - For project deletion, select Service > Delete Project
   Project Name	The name of the project to delete
   Title	The title of your question
   Question	The detailed content of your question - Enable secret post if necessary
   Attach File	Attach a file if necessary

Manage service account

Service account is not actual IAM user accounts but an account used to access or control resources within a project. It can be used instead of IAM user accounts to issue API tokens for project-level use. The management of service account described in this document is only available to users assigned the following IAM roles.

Service Account Management by IAM role

Function	Org Owner	Org Admin	Org Reader	Project Admin	Project Member	Project Reader
View service account				✓	✓	✓
Create service account				✓	✓
Change service account Status				✓	✓
Delete service account				✓	✓
Add and delete service access key				✓	✓
View service account				✓	✓	✓

View service account

Service account is used by project members to call APIs with API authentication tokens of the service account to access or control resources in KakaoCloud services. The method to view service accounts is as follows.

info

You can issue an API authentication token using the access key of service account. At this time, you cannot add an access key with the service account's API authentication token, nor can you delete the corresponding service account and its access keys.
- You also cannot create new service accounts or delete other service accounts and access keys.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Service account menu, view the service accounts created for the project.

   • For service accounts, the [Add access key] button is displayed next to the ID.

   Category	Description
   State	Service account status - 🟢 Active: State of service account being available - ⚪️ Inactive: State of service account being not available
   Name	Name of the service account - Name entered by the user
   ID	Service account ID - Format: {user input}-project unique ID@kc.serviceaccount.com
   [Add access key] button	Only clickable for service accounts

Create service account

Service account is not actual IAM user accounts but are used by project members to call APIs with API authentication tokens of the service account to access or control resources in KakaoCloud services. The method to create a service account is as follows.

info

You can create up to 100 service accounts per project, including inactive accounts.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Service account menu, click the [Create service account] button.

3. In the popup window, enter the required information and click the [Create] button.

   Create service account

   Category	Description
   Project	Automatically filled with the name of the project to which the service account belongs
   Service account	- Name: Name of the service account - Email format ({user input}-project unique ID@kc.serviceaccount.com) is automatically generated
   Project role	Automatically filled with the project member role

Change service account state

You can change a service account to an active or inactive status. Be careful when deactivating a service account as the issued access key and API authentication token are immediately expired, and some resources may not be usable temporarily.

1. Go to KakaoCloud Console > Management > IAM.
2. In the Service account menu, select the [More] icon > Service account info.
3. In the popup window, change the state and click the [Save] button.

Delete service account

You can delete service accounts that are no longer in use.

caution

Please note that when you delete a service account, the access keys and API authentication tokens issued by that account will expire immediately.

1. Go to KakaoCloud Console > Management > IAM.
2. In the Service account menu, select a service account and click the [Delete service account] button.
3. In the popup, enter Delete service account and click the [Delete] button.

Get access key for service account

To use KakaoCloud API, you must issue API authentication token, Access key (Access key ID and Secret access key).

caution

• Once issued, the secret access key generated during the creation of an access key cannot be viewed again.
  
• You cannot temporarily suspend the use of an access key or specify an expiration date.
  

1. Go to KakaoCloud Console > Management > IAM.

2. In the Service account menu, click the [Add access key] button.

3. In the popup window, enter the required information and click the [Add] button.

   Add access key for service account

   Category	Description
   Service account	The ID format {user input}-project unique ID@kc.serviceaccount.com, automatically filled
   Project-level info	- Project nickname (Project Name): Automatically filled with the name of the belonging project - Project role: Automatically filled with the project member role
   Access key name	Name for the service account access key - Cannot use duplicate names within the project
   Description (Optional)	Cannot be modified after the access key is created

4. Confirm the issued access key ID and secret access key, and click the [Copy] button to copy the secret access key.

   • Since the secret access key cannot be viewed again after creation, be sure to copy it to your clipboard and keep it safely stored.

5. Click the [Ok] button to complete the creation of the access key.

Delete access key for service account

You can delete Access key (Access key ID and secret access key) that is no longer in use.

caution

Please note that the API authentication token issued with that access key is immediately expired when an access key is deleted.

1. Go to KakaoCloud Console > Management > IAM.
2. In the Service account menu, select the service account to delete an access key.
3. Select the access key to delete and click the [Delete access key] button.
4. In the popup window, confirm the access key and click the [Delete] button.

View service account

Service account is used by KakaoCloud services in the background to access resources directly or perform user requests. These accounts are automatically created when using certain KakaoCloud services and cannot be deleted or modified by users. The method to view service accounts is as follows.

1. Go to KakaoCloud Console > Management > IAM.

2. In the Service account menu, view the service accounts and service agents created for the project.

   Category	Description
   State	Service account status - 🟢 Active: State of service account being available - ⚪️ Inactive: State of service account being not available
   Name	Name of the service agent - Automatically generated with the name of the KakaoCloud service being used
   ID	Service agent ID - Format: project unique ID@service name.kic.serviceaccount.com

Appendix. Check Project ID

When a project is created in the KakaoCloud, a unique Project ID is generated for that project.
The project ID can be found in the URI displayed in the console's address bar (value of project_id).

For example, in https://console.kakaocloud.com/transit-gateway/transit-gateways?project_id=073fc84cbd86412ef9f6d269780ef89bb&region=kr-central-2, the Project ID value is 073fc84cbd86412ef9f6d269780ef89bb, located just before the & symbol.