GCP Account Integration¶
By configuring Google Cloud account authorization, Guance can collect and synchronize cloud resource monitoring data and asset information from your Google Cloud account, enabling unified observability and management of your Google Cloud services.
Prerequisites¶
- Have Owner or Manager permissions for the Guance Workspace;
- Have activated DataFlux Func (Automata);
- Have a Google Cloud account and the permission to create service accounts and download JSON keys.
Steps¶
Step 1: Enter Cloud Account Management¶
- Log in to the Guance console and go to Integrations > Cloud Account Management;
- Click Create Cloud Account in the top-right corner and select GCP.
Step 2: Configure Authentication Method¶
In the Create Cloud Account dialog that appears, configure the parameters as follows:
| Parameter | Required | Description |
|---|---|---|
| Authentication method | Yes | Supports Service Account or Service Account Impersonation. Defaults to Service Account. |
| Service account key (JSON) | Yes | Click Select JSON key file to upload the service account key file (.json format) downloaded from the Google Cloud console. |
| Account alias | Yes | Custom alias used to identify this account in Guance, up to 256 characters. |
| Account tags | No | Add tag names and values as needed. For the rules, see Account Tags. |
Authentication Method Description¶
- Service Account: Authenticates by uploading the service account's JSON key file, suitable for regular data collection scenarios.
- Service Account Impersonation: (If needed) Allows a service account to impersonate another identity to perform operations, suitable for more complex permission delegation scenarios.
Step 3: Test and Save¶
- After configuration, click Test; the system will validate the key file and verify that permissions meet collection requirements;
- Once testing passes, click Save to complete GCP account integration.
Note
-
Ensure that the service account has the permissions required to read cloud resource monitoring data (such as
Monitoring Viewer,Compute Viewer, etc.); otherwise, the integration may install successfully but data collection may fail. -
Safeguard the JSON key file to avoid leakage.
Configure Integration¶
Once the cloud account is created, authorization to Guance is complete. You can install integrations under this account as needed to start data collection.
- Click into the cloud account details page > Integrations to view all related integrations under the current account;
-
Click Install on the right to enter the automatic installation page:
- The cloud account is automatically filled in;
- Select applicable region types as needed;
- The system automatically identifies the metrics included in the current integration script; you can add or remove metrics as needed;
- Filters currently support
=andinoperations;
-
After installation succeeds, continue with the script installation.