Generate a new SSH key pair. Give the private key to each member of your team. Configure the public
key in the metadata of each instance.

Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a
configuration management tool to deploy those keys on each instance.

Ask each member of the team to generate a new SSH key pair and to add the public key to their Google
account. Grant the “compute.osAdminLogin” role to the Google group corresponding to this team.

Generate a new SSH key pair. Give the private key to each member of your team. Configure the public
key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH
keys on each instance.

Download and deploy the Jenkins Java WAR to App Engine Standard.

Create a new Compute Engine instance and install Jenkins through the command line interface.

Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker
image.

Use GCP Marketplace to launch the Jenkins solution.

Download and deploy the Jenkins Java WAR to App Engine Standard.

Create a new Compute Engine instance and install Jenkins through the command line interface.

Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker
image.

Use GCP Marketplace to launch the Jenkins solution

Add the user to roles/iam.roleAdmin role.

Add the user to roles/iam.securityAdmin role.

Add the user to roles/iam.serviceAccountUser role.

Add the user to roles/iam.serviceAccountAdmin role.

Add the support team group to the roles/monitoring.viewer role

Add the support team group to the roles/spanner.databaseUser role.

Add the support team group to the roles/spanner.databaseReader role.

Add the support team group to the roles/stackdriver.accounts.viewer role.

Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.

Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for
that instance. Direct them to use the Cloud Shell to ssh to that instance.

Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect.

Enable block project wide keys for the instance. Generate an SSH key and associate the key with that
instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to
the existing billing account.

Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link
the new billing account to the existing project.

Verify that you are Billing Administrator for the billing account. Create a new project and link the new
project to the existing billing account.

Verify that you are Billing Administrator for the billing account. Update the existing project to link it to
the existing billing account.

When creating the VM via the web console, specify the service account under the ‘Identity and API
Access’ section.

Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the
value for the key compute-engine-service-account.

Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that
JSON as the value for the key compute-engine-service-account.

Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save
the JSON under ~/.gcloud/compute-engine-service-account.json.