Google Cloud Monitoring Authentication

There are two ways to authenticate the Google Cloud Monitoring plugin - either by uploading a Service Account key file or by automatically retrieving credentials from the Google metadata server. The latter option is only available when running Grafana on a GCE virtual machine.

Uploading a Service Account Key File

There are two ways to authenticate the Google Cloud Monitoring plugin. You can upload a Service Account key file or automatically retrieve credentials from the Google metadata server. The latter option is only available when running Grafana on a GCE virtual machine.

The Monitoring Viewer role provides all the permissions that Grafana needs. The following API needs to be enabled on GCP for the data source to work: Monitoring API

GCE Default Service Account

If Grafana is running on a Google Compute Engine (GCE) virtual machine, it is possible for Grafana to automatically retrieve the default project id and authentication token from the metadata server. In order for this to work, you need to make sure that you have a service account that is setup as the default account for the virtual machine and that the service account has been given read access to the Google Cloud Monitoring Monitoring API.

Detailed instructions on how to create a Service Account can be found in the documentation.

Authentication

Upload your Service Account key file or paste in the contents of the file. The file contents will be encrypted and saved in the Grafana database.
Authentication Type
Or paste Service Account key JSON
{{valError}}
Uploaded Key Details
Project
Client Email
Token URI
Private Key
Reset Service Account Key Reset to clear the uploaded key and upload a new file.

Do not forget to save your changes after uploading a file.

{{ctrl.gceError}}

Verify GCE default service account by clicking Save & Test