Cloudability Setup IBM Cloud Credentials using Cloudability Method

Edit online

Summary

Connect or credential your IBM Cloud accounts to Cloudability to enable the ingestion of cost and usage data. This document focuses on the Cloudability method and provides a step-by-step guide for setting up an IBM Cloud workspace using Terraform. The workspace will be used to deploy infrastructure using Terraform configurations hosted on a GitHub repository.

Prerequisite

Enabling your IBM account to export usage data

Before you can enable your IBM account to export usage data, you need to have administrator or editor role on the Billing account management service. For more information, see IAM access .

To enable your account to export usage data, use the following steps:
  1. From the IBM Cloud console, go to Manage > Billing and usage , and select Settings .
  2. Click Connect .
  3. Select a Cloud Object Storage instance and Bucket . By selecting these, you are choosing which bucket will store your usage reports.

    • Optional: If you don't want to select an existing instance, click Select an instance > Create new .

    • Optional: Select a bucket or create a new bucket by clicking Create new bucket from the dropdown. For more information, see Getting started with IBM Cloud Object Storage .

  4. For service to service authorizations, click Authorize . For the required access, select Object Writer and Content Reader . Click Review and then Assign .
  5. Click Connect after you review your folder details.

Reference: Exporting your usage data for continual insights

Copy Account Details

For account where enterprise is configured

Copy Enterprise ID:
  1. Navigate to Manage .
  2. Select Enterprise from the dropdown.

  3. Access Dashboard and locate the ID field.

Copy Account ID
  1. Navigate to Manage .
  2. Click Enterprise from the dropdown and then select Accounts .
  3. Identify the account labeled as 'This account is the enterprise account' and copy its ID.

For Account where Enterprise is not configured

Copy Account ID:
  1. Navigate to Manage .
  2. Click Account from the dropdown and then select Account Settings .
  3. Copy its ID.

Copy Storage Instance Name
  1. Access the IBM Cloud navigation menu.
  2. Go to Resource List and select Storage .
  3. Choose the Cloud Object Storage instance that contains the Bucket where the Usage Report is exported.

Copy Bucket Name and Bucket Region
  1. Access the IBM Cloud Navigation Menu.
  2. Go to Resource List , select Storage and then choose Storage Instance .
  3. Find the Buckets section and select the Bucket where the Usage Report is exported.
  4. Navigate to Configuration and copy the Bucket Name and Location (Region).

Copy Cost Prefix
  1. Access the IBM Cloud Navigation Menu.
  2. Go to Resource List , select Storage and then choose Storage Instance .
  3. Find the Buckets section and select the Bucket where the Usage Report is exported.
  4. Access the IBM Cloud Navigation menu and select the Bucket where the Usage Report is exported.

Copy the prefix located between the Bucket Name and the folder name (containing year and month; e.g., 2023-10), excluding both the Bucket Name and the Year-Month folder name.

Copy Cost Report Name
  1. Access the IBM Cloud Navigation Menu.
  2. Go to Resource List , select Storage and then choose Storage Instance .
  3. Find the Buckets section and select the Bucket where the Usage Report is exported.
  4. Access the IBM Cloud Navigation menu and select the Bucket where the Usage Report is exported.
  5. Navigate to any Year-Month folder and copy the file name named 'manifest' (the default file name is manifest).

    Note:

    Do not copy the file name extension. It should be just ‘manifest’ and not manifest.json.

Generate Terraform Template from Cloudability
  1. Ensure all details are copied and readily accessible.
  2. Login to Cloudability UI and navigate to Settings: Vendor Credentials: Click ‘Add Datasource’ and select 'IBM'.

  3. Under Add IBM Account side panel, click Next .
  4. Enter all the details copied earlier and click Generate Template .
    Note:

    Cost Report Name should not have the filename extension (.json).

Executing the Terraform

Prerequisites for Terraform
  1. Ensure that Terraform has been downloaded and is hosted on a repository such as GitHub.
    Note:

    If your GitHub repository is private, you will need to generate a Personal Access Token (PAT) as described here.

  2. Also, make sure that you have Account Owner or Manager Service access and Administrator Platform access for Schematics Service in your IAM Access.

Steps for Execution

Step 1: Login to IBM Cloud
  1. Navigate to the IBM Cloud login page.
  2. Enter your IBM Cloud credentials and log in to your IBM Cloud account.
Step 2: Access Schematics and Create a Workspace
  1. After logging in, access the Navigation menu within IBM Cloud.
  2. From the Navigation menu, select Schematics .
  3. Click Workspaces to access the workspace management interface.

Step 3: Configure the Workspace
  1. Click Create Workspace to initiate the workspace creation process.

  2. Provide the GitHub repository URL where your Terraform configuration files are hosted.
  3. If your GitHub repository is private, provide the Personal Access Token (PAT) that you generated during the prerequisites.

    Reference: Managing your personal access tokens

  4. Select the latest Terraform Version, in this case, terraform_v1.5 .
    Note:

    Terraform version should be v1.5 and above.

  5. Click Next to proceed.


Step 4: Define Variables
  1. Provide a name for your workspace, e.g., 'CldyWorkspace'.
  2. Under Tags , add a tag named "createdFor" with the value 'Cldy'.
  3. Leave the Resource Group as 'Default'.
  4. Choose a location for your workspace, as it determines where workspace actions will be executed.
  5. Description is optional.
  6. Click Next to continue.

Step 5: Apply the Terraform Plan

  1. Click Create to confirm and create the workspace.
  2. Your CldyWorkspace will be created.

Step 6: Access Created Resources
  1. Select 'CldyWorkspace' from the list of workspaces.
  2. Navigate to Settings for 'CldyWorkspace'.
  3. From the Variables section, expand three dots (ellipsis), and select Edit .

  4. Your CldyWorkspace will be created. Provide your ibmcloud_api_key, which must have the necessary access to create IAM resources.

    Reference: Managing user API Keys

  5. Select Sensitive checkbox if you want to treat this variable value as sensitive or secret information. This prevents it from being exposed in workspace details, CLI output, or log output.

  6. After configuring the variables, return to 'CldyWorkspace' and go to the Jobs section.
  7. Click Apply plan to initiate the deployment of Terraform configuration.

  8. Once Apply plan is successful, you can access the resources that were created in the Manage section.

  9. Custom Roles can be found under Access (IAM) > Roles .

  10. This concludes you have successfully deployed resources and can manage access and roles as needed .
Step 7: Verify Credentials in Cloudability
  1. Once terraform plan is applied successfully, come back to the Cloudability UI and click Verify Credentials . The green check mark indicates that the credentialing process has been successful.

    Note:

    To learn more, visit Vendor Credentials .

    Sample Terraform Script

    (Expandable Header)