Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

GCP flow logs

 

Information

 

Summary:

Requirements for proper receiving of Google Cloud Platform flow logs.

Environment:

Product: Flowmon OS

Version: 12.x and higher

Platform: All

Question/Problem Description:

How should I configure permissions to properly receive Google Cloud Platform (GCP) flow logs?

Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  
Cause:  
Resolution:

The service account in GCP, created for reading flow logs, needs only "pubsub.subscriptions.consume" permission, alternatively pre-defined GCP role "Pub/Sub Subscriber" can be used.

 

The service account and Pub/Sub subscription have to have the same Project ID.

 

GCP CLI configuration example:

gcloud pubsub subscriptions add-iam-policy-binding SUBSCRIPTION --member=PRINCIPAL --role="roles/pubsub.subscriber"
Workaround:  
Notes: https://cloud.google.com/sdk/gcloud/reference/pubsub/subscriptions

Comments