Installing and Configuring GCP Stackdriver Nozzle for PCF
This topic describes how to install and configure GCP Stackdriver Nozzle for Pivotal Cloud Foundry (PCF).
The GCP Stackdriver Nozzle for PCF requires that you have a GCP project with a specific configuration. Follow the steps below the prepare a GCP project.
Follow these steps to create a GCP project for Stackdriver Nozzle.
In a browser, navigate to the GCP Console. If you do not have an account, create one.
From the GCP console, click the project drop-down menu between the GCP logo and the search bar and select Create Project.
Enter a project name and click Create.
Follow these steps to enable the APIs required by Stackdriver Nozzle.
Navigate to the Stackdriver Logging API page and click Enable API.
Navigate to the Stackdriver Monitoring API page and click Enable API.
Follow these steps to create a GCP Service Account for Stackdriver Nozzle.
In the GCP console, open the Products and services menu above the home icon and select IAM & Admin > Service accounts.
Click Create Service Account.
Enter a Service account name.
From the Role drop-down menu, select Logging > Logs Configuration Writer, Logging > Logs Writer, and Project > Editor.
Select the checkbox to Furnish a new Private Key, and click Create.
Save the automatically downloaded key file to a secure location for use later in this topic.
If you are using Elastic Runtime v1.9.29+, v1.10.16+, v1.11.2+, or v1.12+, then skip this procedure. If you are using an earlier version of Pivotal Elastic Runtime, you must perform the following steps.
Create a UAA user with access to the Firehose and Cloud Controller:
Target your system with the UAA CLI (UAAC):
$ uaac target https://uaa.YOUR-SYSTEM-DOMAIN
Run the following command to authenticate and obtain an access token for the admin client from the UAA server.
$ uaac token client get admin -s ADMIN-CLIENT-CREDENTIALS-SECRET
Create a Stackdriver Nozzle user with the password of your choosing.
$ uaac -t user add stackdriver-nozzle --password PASSWORD --emails na
Add the user to the Cloud Controller Admin Read-Only group.
$ uaac -t member add cloud_controller.admin_read_only stackdriver-nozzle
Add the user to the Doppler Firehose group.
$ uaac -t member add doppler.firehose stackdriver-nozzle
For information about creating a UAA user, see Creating and Managing Users with the UAA CLI.
Follow these steps to download the product file and add it to your Ops Manager Installation Dashboard.
Download the product file from Pivotal Network.
Navigate to the Ops Manager Installation Dashboard and click Import a Product to upload the product file.
Click Add next to the uploaded GCP Stackdriver Nozzle for PCF tile in the Ops Manager Available Products view to add it to your staging area.
Click the newly added GCP Stackdriver Nozzle for PCF tile.
Follow the instructions in the next section to complete the tile configuration pane.
Complete the following fields to configure GCP Stackdriver Nozzle for PCF.
Cloud Foundry API Endpoint: Enter the URL of the API endpoint for your PCF deployment. This value is
https://api.YOUR-SYSYTEM-DOMAIN. To determine your system domain, see the Domains pane in the Elastic Runtime tile. For an example, see Step 5: Configure Domains in Deploying Elastic Runtime on AWS.
Whitelist for Stackdriver Logging: Enter a comma separated list, without spaces, of the Loggregator events you want to ingest into Stackdriver Logging.
Whitelist for Stackdriver Monitoring: Enter a comma separated list, without spaces, of the Loggregator events you want to ingest into Stackdriver Monitoring.
UAA Username/UAA Password: If you created a username and password in Create a UAA User Account then enter it here. Otherwise leave this field blank to use the default credentials provided by Elastic Runtime.
Skip SSL validation on Cloud Foundry API Endpoint: For a production environment, set to
false. For a development environment, you can set to
Service Account Credentials: Paste in the contents of your service account private key from the Set up a Service Account step, above.
Google Project ID: Enter the Project ID for the GCP project you created in the Create a GCP Project step, above. To view your Project ID, click the project drop-down menu between the GCP logo and the search bar and select your project.