How it works
You grant Miru’s dedicated service account write access to your bucket.
When a device needs to upload data to your bucket:
- Miru impersonates your workspace’s dedicated service account
- Miru creates a short-lived token scoped to the exact object key the device is uploading to
- Miru distributes the token to the device
- The device uploads the data to the bucket using the token
Miru provides you
service_account_email
The dedicated uploader service account Miru provisions for your workspace when you
register the bucket. You grant this account object-create access on your bucket. Shown
in the Miru dashboard at registration.Example:
wsp_1234567890@miru-uploads.iam.gserviceaccount.comYou provide Miru
bucket_name
The name of your GCS bucket to connect to Miru.Example:
my-upload-bucketConnect a bucket
Follow the steps below to connect a bucket to Miru using the Google Cloud CLI. To connect a bucket to Miru, you must hold the role.1
Get the service account email
In the Miru dashboard, navigate to the Buckets page and click the + Bucket button in the top right corner.Switch to the GCS tab, copy your workspace’s service account email, and set it as a
variable — this email is used to grant the service account write access to your bucket.
2
Define the bucket
Set your Google Cloud project and bucket name.Create the bucket if it doesn’t yet exist.
3
Grant the service account write access
Grant Miru’s uploader service account permission to create objects on your bucket.
Verification writes a zero-byte
probe object under
.miru/probe/ as this service account to confirm the grant.4
Register the bucket in Miru
From the Buckets page in the Miru dashboard, select New bucket, choose
GCS, and supply your bucket name. Select Create.