Prerequisites
- A Google Cloud project, and permission to create service accounts and keys in it.
- The project ID, and the regions you want discovered.
Step 1: Create a service account
Create a service account in GCP
Create a service account in GCP
- Open the GCP IAM console for the project you want to connect.
- Click Create service account.
-
Name it
nofireand click Create and continue. -
Assign the following roles:
- Logs Viewer (
roles/logging.viewer): read access to Cloud Logging - Monitoring Viewer (
roles/monitoring.viewer): read access to Cloud Monitoring metrics - Cloud Trace User (
roles/cloudtrace.user): read access to Cloud Trace
- Logs Viewer (
- Click Done to create the account.
These are read-only roles. NOFire does not write to or modify any GCP resources.
Download credentials JSON
Download credentials JSON
- Open the service account you just created.
- Go to the Keys tab and click Add key → Create new key.
- Select JSON and click Create. A credentials file downloads automatically.
- Keep this file secure. You will upload it to NOFire in Step 2.
Step 2: Add GCP connection to NOFire AI
What NOFire queries
During root-cause analysis, NOFire queries GCP for:
NOFire evaluates GCP signals alongside Kubernetes graph data from Edge and other connected observability backends.
Multiple projects
To connect additional GCP projects, add a separate connection for each one. Each connection requires its own service account and credentials JSON.Test the connection
- Open the Connections dashboard and make sure that the GCP connection status is READY. A connection that stays in an error state did not authenticate.
- Ask NOFire a question that needs GCP context, for example “which GCP resources back the checkout service?”. An answer that names your resources confirms the connection works end to end.
Troubleshooting
The connection fails to save
The connection fails to save
The JSON key is incomplete or belongs to a deleted service account. Paste the full contents of the file.
The connection saves but returns no data
The connection saves but returns no data
The project ID names a different project than the one the service account belongs to, or a role is missing.

