[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-26 UTC."],[[["\u003cp\u003eThis documentation pertains to version 1.9 of the Apigee hybrid documentation and focuses on configuring the MART service account.\u003c/p\u003e\n"],["\u003cp\u003eMART requires a Google Cloud service account for authentication, except for GKE installations utilizing workload identity.\u003c/p\u003e\n"],["\u003cp\u003eThe MART service account key file, named \u003ccode\u003eapigee-mart.json\u003c/code\u003e for production or \u003ccode\u003eapigee-non-prod.json\u003c/code\u003e for non-production, needs to be located within the \u003ccode\u003e$HYBRID_FILES/service-accounts\u003c/code\u003e directory.\u003c/p\u003e\n"],["\u003cp\u003eIf the service account file is missing, you can create it using the \u003ccode\u003ecreate-service-account\u003c/code\u003e utility, ensuring the \u003ccode\u003ePROJECT_ID\u003c/code\u003e environment variable is set.\u003c/p\u003e\n"],["\u003cp\u003eAfter acquiring or creating the service account file, its path must be added to the \u003ccode\u003emart.serviceAccountPath\u003c/code\u003e property in the \u003ccode\u003eoverrides.yaml\u003c/code\u003e file, followed by applying changes with \u003ccode\u003eapigeectl apply\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Configure the MART service account\n\n| You are currently viewing version 1.9 of the Apigee hybrid documentation. **This version is end of life.** You should upgrade to a newer version. For more information, see [Supported versions](/apigee/docs/hybrid/supported-platforms#supported-versions).\n\n\nThis topic explains how to configure the MART service account.\n\nAdding the MART service account\n-------------------------------\n\n\nMART requires a Google Cloud service account for authentication.\n| **Note:** Installations on GKE using workload identity do not require a Google Cloud service account. See [Enabling Workload Identity\n| with Apigee hybrid](/apigee/docs/hybrid/v1.9/enable-workload-identity).\n\n1. Locate the key file for the `apigee-mart` service account. The file should have a `.json` extension. \n\n ```\n ls $HYBRID_FILES/service-accounts\n ```\n - **PROD** installations: `apigee-mart.json`\n - **NON-PROD** installations: `apigee-non-prod.json`\n2. If you do not see the MART service account file, create and download it with the `create-service-account` utility:\n 1. Make sure your `PROJECT_ID` environment variable is set: \n\n ```\n echo $PROJECT_ID\n ```\n\n Define it if needed: \n\n ```\n export PROJECT_ID=my-project-id\n ```\n 2. Create the MART service account:\n\n ### PROD\n\n ```\n $HYBRID_FILES/tools/create-service-account \\\n --env prod \\\n --profile apigee-mart \\\n --dir $HYBRID_FILES/service-accounts\n ```\n\n ### NON-PROD\n\n ```\n $HYBRID_FILES/tools/create-service-account \\\n --env non-prod \\\n --profile apigee-mart \\\n --dir $HYBRID_FILES/service-accounts\n ```\n3. Edit your `overrides.yaml` file and add the key file path to the `mart.serviceAccountPath` property:\n\n ### PROD\n\n ```scdoc\n ...\n mart:\n serviceAccountPath: \u003cvar translate=\"no\"\u003epath_to_apigee-mart.json\u003c/var\u003e\n ...\n ```\n\n ### NON-PROD\n\n ```scdoc\n ...\n mart:\n serviceAccountPath: \u003cvar translate=\"no\"\u003epath_to_apigee-non-prod.json\u003c/var\u003e\n ...\n ```\n\n\n For example: \n\n ```\n ...\n mart:\n serviceAccountPath: /apigee/hybrid/hyprid-files/service-accounts/apigee-mart.json\n ...\n ```\n4. Apply your changes with `apigeectl apply`: \n\n ```\n $APIGEECTL_HOME/apigeectl apply -f overrides/overrides.yaml\n ```"]]
