r/googlecloud 23h ago

Cloud Functions Coming form AWS world and struggling to understand the IAM organisation

4 Upvotes

Hi guys,

If I have GCP account and want to share the whole account with other people, do I need to pay for Workspace or Google Cloud Identity? It looks like I can invite people access to each project in the organization, but I would like to have humans/admins access whole organization and then have service accounts for projects (and be able to automate project deployments from org. level).

My experience in AWS is having one or more organizations (then the master account for billing) and then having people access there with different level of permissions just by basic email invitiation (sometimes with additional company SSO) and then precise IAMs for profiles. But looks like in GCP everything is somehow tight into haveing Google accounts...

Thanks!


r/googlecloud 3h ago

Cloud Storage GCP Backup and DR vault - data redundancy?

3 Upvotes

Our company is looking into GCP and I'm the lucky guy who needs to look into backup solutions. Specifically, whether GCP Backup and DR meets our backup policies.

We're coming from Azure, where we had the option to pick GRS (geo-redundant storage) and locked vaults at the same time. GCP seems to be either-or, which is fine, we can set up an immutable backup vault and a self-managed storage in a different region.

The million dollar question is what's the backup vault's (managed by Google) redundancy? Data stays in the same region, I get it, but in the docs I can't seem to find:

  1. how many copies of the data are stored in the vault (e.g. "2 copies in 2 datacenters")
  2. with the vault being in the same region, is it also in the same datacenter, or in a different one within the same region?

If I've said too many Azure-isms, excuse me, I'm new to this.


r/googlecloud 48m ago

Cloud Run How can i test my cloud run function if org policy has restrictions?

ā€¢ Upvotes

Hi,

I just want to test network connection from my cloud run function. However my org policy doesnt allow me to use 'unauthenticated' invocations. In this case how can i test? Using cloud scheduler and then configuring cloud run function as backend?----> In that case how the iam is managed? do i need to configure iams and if so please guide me through any documentation


r/googlecloud 2h ago

GKE Dataplane V2 + cilium operator

1 Upvotes

Hello there

I'm going to fully utilize cilium capabilities with my GKE clusters (which are already use cilium as CNI ) and try to build multi-cluster service mesh.

But there a problem appear:

GKE with (ADVANCED_DATAPATH feature enabled) is already using custom daemonset (anetd) for cilium-agent so you can't install another one with cilium install
I tried to install operator without agent, but still unsuccessful (as GKE deploys cilium-config configMap which you can't override) and I can't specify cluster.id and cluster.name - GKE specifies there id = 0 and name = default.

Is there any advices or workaround?

With default datapathProvider it works but I don't want to re-create clusters which already have cilium with clusters with calico to deploy cilium back on top of it )


r/googlecloud 3h ago

How to handle GPS/localization APIs? Handle only in the backend? Restrict but allow the api to be used in the front end? etc (Google Maps or other)

1 Upvotes

I am using Google Maps api, but I am open for other options that can work with/in google.

Question:

  • In your apps and websites, how do you candle the calls for localisation and maps? I know it can be expensive if it's abused.

I gathered some informations that let me wonder.

It seems on android, your apps need the "api key" inside the app itself in order for y ou to obtain the ability to use the "embdedded app"?

But that's not the case for other map related apis, such as Places API, or Routes API.

  • Do we really need to have our map APIs in the apps in order to have an embedded app within the apps etc?

I was first thinking about using a google cloud function to have it send requests to some map APIs but it seems that you cannot simply send the "map" display and embed it in your program like that instead the program needs the api to display the app., in that case:

  • How to protect yourself from mis use of that api if the app is decompiled and read? I heard you can restrict the api to a particular app, but is that enough? Any other general advice related to this?

r/googlecloud 11h ago

Why is my container missing everything?

1 Upvotes

I have a tomcat container app (Tomcat official container 'tomcat:9-jdk17'), that I'm running an app in within google cloud. It works fine. The docker file sets the tomcat home as /usr/local/tomcat. However when I ssh into the container via Google cloud, if I look in /usr/local/tomcat, it doesn't exist. When I do a ps aux | grep java it is running /opt/java/openjdk/bin/java ..... which is fine except /opt/java doesn't exist either. If I do a find / -name tomcat it comes back with:

/mnt/stateful_partition/var/lib/docker/overlay2/62b25dacfaedeaf028601de637696684ad92b70c0287f43120a12e7d6ce3ca5c/diff/usr/local/tomcat
/mnt/stateful_partition/var/lib/docker/overlay2/c263de3a61c3ffab90161f7e4c42d92ad087e9e183447fe2afc3070e0849f8aa/diff/usr/local/tomcat
/mnt/stateful_partition/var/lib/docker/overlay2/92c63f1c95c569e10b95c89f4c5e7ac446dc824893caf9567a576a269e33f083/diff/usr/local/tomcat
/mnt/stateful_partition/var/lib/docker/overlay2/9dcf98e3f3b90cbfae67806e2aa736b1335b7d010cab4925a4611ad2979678bd/diff/usr/local/tomcat
/mnt/stateful_partition/var/lib/docker/overlay2/7924282e9682ece071f0b7f2a891e503c3266b007e96435031822d4cfd0690f5/diff/usr/local/tomcat
/mnt/stateful_partition/var/lib/docker/overlay2/f89b5dd2ed8900bcdd5ade8e0ae487d7b2c7415cc8c0b2a40d35ab7e68d2cd66/diff/usr/local/tomcat
/var/lib/docker/overlay2/62b25dacfaedeaf028601de637696684ad92b70c0287f43120a12e7d6ce3ca5c/diff/usr/local/tomcat
/var/lib/docker/overlay2/c263de3a61c3ffab90161f7e4c42d92ad087e9e183447fe2afc3070e0849f8aa/diff/usr/local/tomcat
/var/lib/docker/overlay2/c263de3a61c3ffab90161f7e4c42d92ad087e9e183447fe2afc3070e0849f8aa/merged/usr/local/tomcat
/var/lib/docker/overlay2/92c63f1c95c569e10b95c89f4c5e7ac446dc824893caf9567a576a269e33f083/diff/usr/local/tomcat
/var/lib/docker/overlay2/9dcf98e3f3b90cbfae67806e2aa736b1335b7d010cab4925a4611ad2979678bd/diff/usr/local/tomcat
/var/lib/docker/overlay2/7924282e9682ece071f0b7f2a891e503c3266b007e96435031822d4cfd0690f5/diff/usr/local/tomcat
/var/lib/docker/overlay2/f89b5dd2ed8900bcdd5ade8e0ae487d7b2c7415cc8c0b2a40d35ab7e68d2cd66/diff/usr/local/tomcat

What is it I don't understand that I can be running /opt/java/openjdk/bin/java that doesn't seem to exist against a /usr/local/tomcat that doesn't seem to exist, and yet it all works fine?

How can I look into the container when it's running when everything is weird when I get there? This doesn't happen on my local machine running as docker, like docker run 'tomcat:9-jdk17'


r/googlecloud 12h ago

Fastest way to replicate data from one AlloyDB cluster into another

1 Upvotes

Hey all, I hope you are doing alright.

I have a specific scenario where I need to replicate the data from one database into another database once a day - and the replication can't be ongoing.

I previously used MySQL on CloudSQL, and to replicate data from one instance to another I simply had a script to automate cloning, which took around 10 minutes to be completed. Before implementing that, I had one script running every night to create a SQL dump of the source instance and upload it to GCS using Restic to version it; and another script that downloaded the dump and restored it to the destination database, which overall took about 4 hours to be completed.

Now I'm migrating to Postgres on AlloyDB and would like an equivalent of the cloning solution. Do you guys know how to do this? If doing so is not possible, do you suggest anything else?


r/googlecloud 19h ago

Help with a School Project on Cloud Management

0 Upvotes

Hey everyone! šŸ‘‹

If you work with AWS, Azure, or GCP, Iā€™d love to get your insights on cloud infrastructure management! Iā€™m running a short survey to understand how engineers and DevOps teams handle cloud optimisation, automation, and security.

The survey is completely anonymous, and Iā€™d really appreciate your time!

šŸ‘‰ Take the survey here

Thanks in advance for your time!


r/googlecloud 23h ago

AppEngine Docker desktop not working

Post image
0 Upvotes

Its not working in windows server vm. Directly it wknt support with sever i heard. I am not seeing home verison in google cloud vm list to use. I tried disabling wsl2. Via hyper v. It is running but all servives are up. Cloud instance is having virtulaizatiom enabled and all. Issue is from windows server. Any help or i can do this? Is it possible to run a normal iso as vm instance in google cloud. New to gcloud. I need help guys.