Skip to main content
Connect GCP to NOFire AI so NOFire can query Cloud Logging, Cloud Monitoring, and Cloud Trace during root-cause analysis. NOFire queries GCP data alongside your Kubernetes graph from Edge, so NOFire correlates signals from GCP-managed infrastructure with your cluster state. To connect, you will create a GCP Service Account with read-only access to the logging, monitoring, and trace APIs.

Prerequisites

  • A Google Cloud project, and permission to create service accounts and keys in it.
  • The project ID, and the regions you want discovered.

Step 1: Create a service account

Create a service account in GCP

  1. Open the GCP IAM console for the project you want to connect.
  2. Click Create service account.
  3. Name it nofire and click Create and continue.
  4. Assign the following roles:
    • Logs Viewer (roles/logging.viewer): read access to Cloud Logging
    • Monitoring Viewer (roles/monitoring.viewer): read access to Cloud Monitoring metrics
    • Cloud Trace User (roles/cloudtrace.user): read access to Cloud Trace
  5. Click Done to create the account.
These are read-only roles. NOFire does not write to or modify any GCP resources.

Download credentials JSON

  1. Open the service account you just created.
  2. Go to the Keys tab and click Add key → Create new key.
  3. Select JSON and click Create. A credentials file downloads automatically.
  4. Keep this file secure. You will upload it to NOFire in Step 2.

Step 2: Add GCP connection to NOFire AI

What NOFire queries

During root-cause analysis, NOFire queries GCP for: NOFire evaluates GCP signals alongside Kubernetes graph data from Edge and other connected observability backends.

Multiple projects

To connect additional GCP projects, add a separate connection for each one. Each connection requires its own service account and credentials JSON.

Test the connection

  1. Open the Connections dashboard and make sure that the GCP connection status is READY. A connection that stays in an error state did not authenticate.
  2. Ask NOFire a question that needs GCP context, for example “which GCP resources back the checkout service?”. An answer that names your resources confirms the connection works end to end.

Troubleshooting

The JSON key is incomplete or belongs to a deleted service account. Paste the full contents of the file.
The project ID names a different project than the one the service account belongs to, or a role is missing.