Updating GCP Private Service Connect Consumer Accept List for BYOC Clusters

Last updated: August 10, 2026

Issue

When attempting to update the accepted consumer list for a GCP Private Service Connect on a BYOC cluster through the Cloud UI, you may encounter errors that prevent successful updates.

Error Messages

In GCP you will see a Pending status for you project.

Resolution

Currently you are unable to make this change through the Redpanda UI, you can use the Cloud Public API instead:

Step 1: Obtain an Authentication Token

curl -s --request POST \
     --url https://auth.prd.cloud.redpanda.com/oauth/token \
     --header 'content-type: application/x-www-form-urlencoded' \
     --data grant_type=client_credentials \
     --data client_id=$CLOUD_CLIENT_ID \
     --data client_secret=$CLOUD_CLIENT_SECRET \
     --data audience=cloudv2-production.redpanda.cloud | jq .access_token | sed 's/"//g'

To get your client credentials:

  1. Navigate to the Organization IAM page in the Cloud UI
  2. Go to the Service Account tab
  3. Click the options icon (3rd icon from the right) on your service account row
  4. Note your Client ID and Client Secret

Step 2: Create the PATCH Request Body

CLUSTER_PATCH_BODY=`cat  EOF
{
    "gcp_private_service_connect": {
        "enabled": true,
         "consumer_accept_list": [{"source": "your-project-id"}]
    }
}
EOF`

Replace your-project-id with the GCP project ID you want to accept.

Step 3: Execute the API Call

curl -v -k -X PATCH \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $AUTH_TOKEN" \
-d "$CLUSTER_PATCH_BODY" https://api.redpanda.com/v1/clusters/your-cluster-id

Replace your-cluster-id with your Redpanda cluster ID.

Step 4: Verify the Operation

A successful API call will return an operation ID in the response:

{"operation":{"id":"operation-id", "metadata":{"@type":"type.googleapis.com/redpanda.api.controlplane.v1beta2.UpdateClusterMetadata"}, "state":"STATE_IN_PROGRESS", "started_at":"2025-03-27T23:38:27.611Z", "type":"TYPE_UPDATE_CLUSTER", "resource_id":"your-cluster-id"}}

The update operation typically takes 5-10 minutes to complete.

Additional Information

  • The -k flag in the curl command bypasses SSL certificate verification, which may be necessary in some environments
  • For multiple projects, add additional entries to the consumer_accept_list array

For more information on Private Service Connect configuration, see the Redpanda documentation on configuring Private Service Connect.



If you have further questions or concerns please reach out to Redpanda Support.