| # Starting the VM that hosts the Docker container |
| |
| ```bash |
| gcloud compute instances delete \ |
| --project bazel-public \ |
| --zone us-central1-a \ |
| --quiet \ |
| buildkite-agent-metrics |
| |
| gcloud compute instances create \ |
| --project bazel-public \ |
| --boot-disk-size 20GB \ |
| --machine-type n1-standard-1 \ |
| --zone us-central1-a \ |
| --image-project=ubuntu-os-cloud \ |
| --image-family=ubuntu-1804-lts \ |
| --scopes cloud-platform \ |
| --service-account buildkite-agent-metrics@bazel-public.iam.gserviceaccount.com \ |
| --metadata-from-file=startup-script=start.sh \ |
| buildkite-agent-metrics |
| ``` |
| |
| # About the service account |
| |
| The service account used for the VM must have at least the following permissions: |
| |
| - `Cloud KMS Decryption` for the Buildkite agent tokens. |
| - `Logging > Logs Writer` to write logs to Stackdriver Logging. |
| - `Monitoring > Monitoring Metric Writer` to write to the Stackdriver Metrics. |