# GCP storage

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fgcp%2Fgcp-storage.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fgcp%2Fgcp-storage.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

Coralogix provides a predefined function to forward your logs from Google Cloud Platform (GCP) Storage straight to Coralogix.

## Setup[​](#setup "Direct link to Setup")

There are two methods to deploy this integration. The first is using gcloud cli, and the second is to use our Terraform module.

For the gcloud cli method, you will need to select the coralogix domain endpoint that corresponds to your Coralogix AWS region from the table below. You will also need a service account with the necessary permissions to invoke the function, access storage buckets and objects, and receive Eventarc events. Check the Service Account Setup section below for example steps to create the service account and custom role.

### Coralogix Logs API endpoint[​](#coralogix-logs-api-endpoint "Direct link to Coralogix Logs API endpoint")

Choose the <!-- -->https\://ingress./logs/v1/singles<!-- --> endpoint that corresponds to your Coralogix [domain](https://docs-docusaurus.kinsta.page/user-guides/account-management/account-settings/coralogix-domain/.md) using the domain selector at the top of the page. For example, if your top level domain is us1.coralogix.com, use the following as your endpoints:

```
CORALOGIX_LOG_URL=https://ingress.eu2.coralogix.com/logs/v1/singles

CORALOGIX_TIME_DELTA_URL=https://ingress.eu2.coralogix.com/sdk/v1/time
```

### gcloud CLI[​](#gcloud-cli "Direct link to gcloud CLI")

When using the gcloud CLI, you'll first need to download the code files from our repository. An example using curl is provided below:

```
mkdir -p gcsToCoralogix

cd gcsToCoralogix

curl -sSL -O https://raw.githubusercontent.com/coralogix/terraform-coralogix-google/master/modules/storage/src/{main.py,requirements.txt}
```

After you have the code files in gcsToCoralogix folder, deploy a cloud function with the below command. Make sure you update `YOUR_GCP_PROJECT_ID` with your project ID, your GCP region, the `YOUR_BUCKET_NAME` trigger resource, and the values in `set-env-vars` accordingly. None of the values require quotation marks.

```
gcloud functions deploy gcsToCoralogix \

--project=YOUR_GCP_PROJECT_ID \

--region=us-central1 \

--runtime=python38 \

--memory=1024MB \

--timeout=60s \

--entry-point=to_coralogix \

--source=gcsToCoralogix \

--trigger-resource=YOUR_BUCKET_NAME \

--trigger-event=google.storage.object.finalize \

--service-account=YOUR_SERVICE_ACCOUNT_EMAIL \

--set-env-vars="private_key=YOUR_PRIVATE_KEY,app_name=APP_NAME,sub_name=SUB_NAME,CORALOGIX_LOG_URL=https://ingress.eu2.coralogix.com/logs/v1/singles,CORALOGIX_TIME_DELTA_URL=https://ingress.eu2.coralogix.com/sdk/v1/time"
```

After deploying, double check your Google Cloud console to validate the Cloud Function was deployed as expected.

### Terraform[​](#terraform "Direct link to Terraform")

[Here](https://github.com/coralogix/terraform-coralogix-google/tree/master/examples/storage) is the Terraform module to deploy the Cloud Function.

**NOTE** - The Terraform module has not yet been updated to support Gen2 Cloud Functions or the use of a custom service account. Presently the TF deployment cloud function is "public".

Add these modules to your manifest and change its options:

```
provider "google" {

project = "YOUR_GCP_PROJECT_ID"

region = "us-central1"

}



module "storage" {

  source = "coralogix/google/coralogix//modules/storage"



  coralogix_region = "Europe"

  private_key      = "YOUR_API_KEY"

  application_name = "GCP"

  subsystem_name   = "GCS"

  bucket           = "YOUR_BUCKET_NAME"

}
```

Initialize the module and apply these changes:

```
terraform init

terraform apply
```

### Service Account Setup[​](#service-account-setup "Direct link to Service Account Setup")

We need a service account with the necessary permissions to invoke the function, access storage buckets, and receive Eventarc events. Below are two options for creating the service account and custom role. This Service Account can be shared by multiple deployments within your project, so it is managed outside of the integration deployment itself.

#### Option 1: Using gcloud CLI[​](#option-1-using-gcloud-cli "Direct link to Option 1: Using gcloud CLI")

```
# Create the service account

gcloud iam service-accounts create gcs-to-coralogix \

    --description="Service account for GCS to Coralogix integration" \

    --display-name="GCS to Coralogix SA"



# Get your project ID

PROJECT_ID=$(gcloud config get-value project)



# Create custom role with all needed permissions

gcloud iam roles create gcsToCoralogixRole \

    --project=$PROJECT_ID \

    --title="GCS to Coralogix Role" \

    --description="Custom role for GCS to Coralogix integration" \

    --permissions=storage.buckets.get,storage.objects.get,run.routes.invoke,eventarc.events.receiveEvent



# Grant the custom role to the service account

gcloud projects add-iam-policy-binding $PROJECT_ID \

    --member="serviceAccount:gcs-to-coralogix@$PROJECT_ID.iam.gserviceaccount.com" \

    --role="projects/$PROJECT_ID/roles/gcsToCoralogixRole"
```

#### Option 2: Using Terraform[​](#option-2-using-terraform "Direct link to Option 2: Using Terraform")

```
# Variables

variable "project_id" {

  description = "The GCP project ID"

  type        = string

}



# Service Account

resource "google_service_account" "gcs_to_coralogix" {

  account_id   = "gcs-to-coralogix"

  display_name = "GCS to Coralogix SA"

  description  = "Service account for GCS to Coralogix integration"

  project      = var.project_id

}



# Custom IAM Role

resource "google_project_iam_custom_role" "gcs_to_coralogix_role" {

  role_id     = "gcsToCoralogixRole"

  title       = "GCS to Coralogix Role"

  description = "Custom role for GCS to Coralogix integration"

  permissions = [

    "storage.buckets.get",

    "storage.objects.get",

    "run.routes.invoke",

    "eventarc.events.receiveEvent"

  ]

  project = var.project_id

}



# IAM binding

resource "google_project_iam_binding" "gcs_to_coralogix_binding" {

  project = var.project_id

  role    = google_project_iam_custom_role.gcs_to_coralogix_role.id

  members = [

    "serviceAccount:${google_service_account.gcs_to_coralogix.email}"

  ]

}



# Outputs

output "service_account_email" {

  description = "The email address of the service account"

  value       = google_service_account.gcs_to_coralogix.email

}



output "custom_role_id" {

  description = "The ID of the custom role"

  value       = google_project_iam_custom_role.gcs_to_coralogix_role.id

}
```

Initialize the module and apply these changes:

```
terraform init

terraform apply
```

Capture the Service Account email and Custom Role ID from the outputs for use in the deployment.

## Additional resources[​](#additional-resources "Direct link to Additional resources")

|                     |                                                                                                 |
| ------------------- | ----------------------------------------------------------------------------------------------- |
| Coralogix Endpoints | [Coralogix Endpoints](https://docs-docusaurus.kinsta.page/integrations/coralogix-endpoints/.md) |