GCP

Registry

The registry has an GCP Helm chart that provides a pre-configured Scraper with some common defaults

The GCP scrapers scrapes your GCP account to fetch all the resources & save them as configs.

gcp-scraper.yaml
apiVersion: configs.flanksource.com/v1
kind: ScrapeConfig
metadata:
  name: gcp-flanksource
  namespace: mc
spec:
  gcp:
    - project: workload-prod-eu-02
      exclude:
        - SecurityCenter
      #connection: connection://mc/gcloud-flanksource
      #include:
        #- storage.googleapis.com/Bucket
        #- container.googleapis.com/Cluster
      #auditLogs:
        #dataset: default._AllLogs
        #since: 30d
        #excludeMethods:
          #- io.k8s.*

Scraper

Field	Description	Scheme	Required
logLevel	Specify the level of logging.	string
schedule	Specify the interval to scrape in cron format. Defaults to every 60 minutes.	string
retention	Settings for retaining changes, analysis and scraped items	Retention
gcp	GCP scrape config	[]GCP

GCP

note

Either the connection name or the credentials are required (if Workload Identity is not being used)

Field	Description	Scheme
project*	GCP Project ID	string
connection	The connection url to use, mutually exclusive with credentials	Connection
credentials	The credentials to use for authentication	EnvVar
endpoint	Custom GCP Endpoint to use	string
exclude	GCP resources to exclude from scraping	[]string
include	GCP resources to include for scraping	[]string
skipTLSVerify	Skip TLS verification when connecting to GCP	boolean
labels	Labels for each config item.	map[string]string
properties	Custom templatable properties for the scraped config items.	[]ConfigProperty
tags	Tags for each config item. Max allowed: 5	[]ConfigTag
transform	Transform configs after they've been scraped	Transform