This quickstart explains how to use the Forseti setup wizard, which helps to automate some of the Forseti installation and setup on GCP.
If you are trying to install Forseti in a developer environment, please refer to the Development Environment Setup.
Setup wizard is not available prior to version 1.1.0.
Prior to running the setup wizard, you will need:
The setup wizard automatically determines setup information, generates a deployment template, and creates a Forseti deployment.
It’s recommended to use Cloud Shell to run the Forseti setup wizard. This ensures you’re using the latest version of Cloud SDK since it’s included in Cloud Shell. To prepare to run the Forseti setup wizard, follow the steps below:
Once you’ve started Cloud Shell, download Forseti. The setup wizard is included.
master branch will install the latest version of Forseti.
git clone -b master --single-branch https://github.com/GoogleCloudPlatform/forseti-security
To get a particular release, e.g. 1.1.7, use the following command (note the “v”):
git clone -b v1.1.7 --single-branch https://github.com/GoogleCloudPlatform/forseti-security
Navigate to the setup wizard directory:
Invoke the setup:
To see additional configurations for the setup:
python setup_forseti.py -h
Setup will infer the necessary information to install Forseti.
If you ran the
setup_forseti.py without extra flags, you will be
prompted to enter the following:
If you previously used Cloud Shell to SSH to a Compute Engine instance and you set an SSH passphrase, setup prompts you to enter the passphrase. The Forseti setup uses secure copy (SCP) to copy the auto-generated G Suite service account key as well as the Forseti configuration files to the Forseti Compute Engine instance .
After the setup wizard successfully completes Forseti setup and deployment, complete the steps to enable G Suite Google Groups collection. This is a required step if you also plan to deploy IAM Explain.