Connect Google Cloud Platform services to New Relic

To start receiving Google Cloud Platform (GCP) data with New Relic GCP integrations, connect your Google project to New Relic's infrastructure monitoring. If you don't have one already, create a New Relic account. It's free, forever.

팁

You can use Terraform to automate the process of enabling cloud integrations. Read how in the Terraform official documentation site.

Requirements

These are the requirements for the authorization:

GCP integration requirements	Comments
Monitoring	In the GCP project API & Services Library settings, you must enable Google Stackdriver Monitoring API.
Authorization	For service account authorization (recommended): You need a user with Project IAM Admin role to add the service account ID as a member in your GCP project. In the GCP project IAM & admin, the service account must have the Viewer role and the Service Usage Consumer role or, alternatively, a custom role.
Authorization	For user account authorization: The New Relic user that will integrate the GCP project must have a Google account and must be able to view the GCP project that New Relic will monitor. In the GCP project IAM & admin, the user must have the Project Viewer and Monitoring viewer roles. Please note that this authorization method will not allow New Relic to collect tags and other attributes that can be useful for narrowing down your NRQL queries, dashboards, and alerts. You can migrate the authorization method from user account to service account from the Manage services link in New Relic's user interface.
Project name	As part of the online setup process, you must identify `Project name` of the projects you want to monitor with New Relic. The UI workflow automatically lists active projects you can select.
Permissions (only for user account authorization)	New Relic doesn't inherit your Google account's permissions and therefore is not authorized to perform any changes in the project. Also, New Relic requires a specific set of read-only permissions exclusively for certain types of data. For more information about the API permissions that New Relic uses, see the Google documentation about scopes.

Authorization options

Integrating your GCP project with New Relic requires you to authorize New Relic to fetch monitoring data from your GCP project. You can choose between two authorization methods: Service accounts or User accounts.

The service account authorization is recommended.

If you authorize New Relic to fetch data through a service account, we will call your GCP project APIs using a service account ID and its associated public/private key pair.

New Relic manages a specific Google service account for your New Relic account; you do not need to create it or manage the associated private key. Just add the service account ID as a member with viewing permissions in your project.

If your organization uses a domain restriction constraint, you will have to update the policy to allow the New Relic domain, C02x1gp26.

This authorization method is recommended, especially if your GCP project is managed by a team. It also guarantees that New Relic will collect tags and other attributes whenever possible.

If you authorize New Relic to fetch data through a user account, New Relic will access your GCP project monitoring data on behalf of a particular Google user.

The authorization process is achieved through an OAuth workflow, which redirects you from the New Relic UI to a Google authorization interface. However, since the authorization is linked to a particular Google user, this method is not recommended for GCP projects that are managed by large teams.

Connect GCP to New Relic infrastructure monitoring

중요

If this is your first time setting up GCP with New Relic, you need to make sure that you've enabled Cloud Monitoring API for your project. You can do this in the Google Cloud console.

To connect your Google account to New Relic with user account authorization:

Go to one.newrelic.com > All capabilities > Infrastructure > GCP. On the Google Cloud Services integrations page, select Add a GCP account.
Choose Authorization Method: Select either Authorize a Service Account or Authorize a User Account, and follow the instructions in the UI to authorize New Relic.
Add projects: Select the projects that you want New Relic to receive data from.
Select services: From the list of available services for your GCP account, select the individual services you want New Relic to receive data from, or select all of the services.
팁
These services will be enabled for all of the projects that you selected in the previous step. Once the setup process is finished, you can fine-tune the services that you want monitored for each project individually.
To complete the setup process, select Finish.

If you see API authentication errors, follow the troubleshooting procedures.

It may take few minutes until new resources are detected and synthesized as entities. See Cloud integrations system limits for more information.

Explore app data in New Relic

After you authorize New Relic to integrate one or more of your Google project's services, New Relic starts monitoring your GCP data at regular polling intervals. After a few minutes, data will appear in the New Relic UI. To find and use your data, including links to and alert settings, go to one.newrelic.com > All capabilities > Infrastructure > GCP.

Link multiple Google projects

For your convenience, the setup process allows you to select more than one project at a time.

After the first setup, if you need to monitor additional GCP projects with New Relic, you can repeat the procedure to connect your GCP services as many times as you need.

Unlink your GCP integrations

You can disable any of your GCP integrations any time and still keep your Google project connected to New Relic.

If you want to...	Do this
Disable one or more GCP service integrations	To disable services while keeping your GCP account linked to New Relic: From one.newrelic.com > All capabilities > Infrastructure > GCP > Manage services. From your Edit GCP account page, clear the checkbox for each active service you want to disable. Save your changes.
Disable all GCP integrations and unlink your project monitoring	To disconnect your GCP account completely from New Relic, you need to unlink your GCP account. This disables all New Relic integrations associated with that GCP account. If you registered the GCP project using a user account, follow these steps: Go to one.newrelic.com > All capabilities > Infrastructure > GCP > Manage services. From your Edit GCP account page, select Unlink this account. Save your changes. If you registered the GCP project using a service account, follow the steps below. If you are deleting a custom role, be aware that this role may be used for other purposes besides New Relic access. For a custom user role: Sign in to New Relic and go to Infrastructure > Integrations > Google Cloud Platform. Go to IAM > admin > Roles, search for the role, select it, and select DELETE. For a standard (non-custom) user role: Sign in to New Relic and go to Infrastructure > Integrations > Google Cloud Platform. Select Manage Services for the account you want to remove. Copy the value of User and save it. Sign in to Google Cloud and select the correct project in the Select a project box. From the navigation menu, select IAM & admin > IAM. Search for and select the user value you saved, then select REMOVE.
Clean your GCP Projects after unlinking New Relic	To clean your GCP project after unlinking, follow the steps below: If you were using a user account: Open your Google user account settings. Open the Apps with access to your account section. Choose New Relic application. Choose Remove Access. If you were using a service account: Open the GCP IAM Console. Select the project you want to unlink from New Relic and click Open. Select the service account that is used by New Relic. Click the Remove icon.

If you want to...

Do this

Disable one or more GCP service integrations

To disable services while keeping your GCP account linked to New Relic:

From one.newrelic.com > All capabilities > Infrastructure > GCP > Manage services.
From your Edit GCP account page, clear the checkbox for each active service you want to disable.
Save your changes.

Disable all GCP integrations and unlink your project monitoring

To disconnect your GCP account completely from New Relic, you need to unlink your GCP account. This disables all New Relic integrations associated with that GCP account.

If you registered the GCP project using a user account, follow these steps:

Go to one.newrelic.com > All capabilities > Infrastructure > GCP > Manage services.
From your Edit GCP account page, select Unlink this account.
Save your changes.
If you registered the GCP project using a service account, follow the steps below. If you are deleting a custom role, be aware that this role may be used for other purposes besides New Relic access.
For a custom user role:
Sign in to New Relic and go to Infrastructure > Integrations > Google Cloud Platform.
Go to IAM > admin > Roles, search for the role, select it, and select DELETE.
For a standard (non-custom) user role:
Sign in to New Relic and go to Infrastructure > Integrations > Google Cloud Platform.
Select Manage Services for the account you want to remove. Copy the value of User and save it.
Sign in to Google Cloud and select the correct project in the Select a project box.
From the navigation menu, select IAM & admin > IAM.
Search for and select the user value you saved, then select REMOVE.

Clean your GCP Projects after unlinking New Relic

To clean your GCP project after unlinking, follow the steps below:

If you were using a user account:

Open your Google user account settings.
Open the Apps with access to your account section.
Choose New Relic application.
Choose Remove Access.
If you were using a service account:
Open the GCP IAM Console.
Select the project you want to unlink from New Relic and click Open.
Select the service account that is used by New Relic.
Click the Remove icon.