Adding GCP Integration with a Backend on Another Cloud Provider

If your groundcover backend is installed on a cloud provider other than GCP, you can still add GCP integration by setting up a dedicated GCP cluster and configuring the sensor to run the GCP integration.

This setup allows you to monitor GCP resources and services even though your main groundcover backend is hosted elsewhere.

Prerequisite

The below steps assume you have a GCP GKE cluster with groundcover sensor installed on it.

Step 1: Create a Service Account

• Go to IAM & Admin in GCP Console

• Navigate to IAM & Admin → Service Accounts.

• Create a New Service Account

  • Click on Create Service Account.

  • Provide a name and description for the service account.

  • Click Create & Continue.

  • In the Grant this service account access to the project step, search for and select Monitoring Viewer (roles/monitoring.viewer).

  • Click Continue → Done.

• Grant the roles/iam.workloadIdentityUser role on the Google Cloud service account to the Kubernetes service account's identity.

  • Click on the newly created service account → Permissions → View by Principals → Grant Access

  • In the Add principals → New principal section enter "[PROJECT_ID].svc.id.goog[<groundcover sensor namespace>/integrations-agent]"

  • In the Assign roles → Role section choose Workload Identity User

  • Click Save

Step 2: Configure GCP Integration

After installing the sensor, you'll need to manually configure it to enable GCP integration. This configuration tells the sensor to:

• Collect GCP-specific metrics and metadata

• Use GCP APIs to gather resource information

• Properly tag and label data with GCP-specific attributes

global:
  integrations:
    agent:
      enabled: true
integrationsAgent:
  serviceAccount:
    annotations:
      "iam.gke.io/gcp-service-account": "service account email created in step1"
targets:
  - Type: gcpmetrics
      name: <provide a meaningful name for your integration>
      targetServiceAccount: <provide the service account created in step 1>
      interval: 5m
      projectIds: <list of project ID's>
      metricPrefixes: <list of metric prefixes, e.g. compute.googleapis.com>
      extraLabels:
        environment: "prod" # optional

Verification

After 5 minutes, data collection should happen at least once and you could monitor your integration:

1. Navigate to the Data Explorer page, search for the following metric groundcover_data_sources_collected_entries_total. The number of returned results should match the expected number of results.

2. Navigate to the Traces page and apply the following filter source:groundcover-platform integration.name:<your integration name>. The page will show the latest results of running the integration. In case of errors, open the trace to see more details.