Introduction to Discovery & Visibility GCP - Adaptive Applications - BlueCat Gateway - 21.2

Discovery & Visibility GCP Administration Guide

Locale
English (United States)
Product name
BlueCat Gateway
Version
21.2

BlueCat Adaptive Applications are licensed, out-of-the-box applications that provide you with advanced DDI functionality with minimal configuration. Adaptive Applications extend the functionality of the BlueCat core Adaptive DNS platform, DNS Integrity, in specific areas to drive increased customer value and competitive differentiation.

The BlueCat Discovery & Visibility GCP Adaptive Application introduces a method to retrieve data from Google Cloud Platform (GCP) and import the discovered objects into Address Manager. This provides continuous, real-time visibility into the changes to your GCP infrastructure.
Note: The BlueCat Discovery & Visibility GCP Adaptive Application only provides visibility into your GCP infrastructure. You cannot use the BlueCat Discovery & Visibility GCP Adaptive Application to import Address Manager data into your GCP infrastructure.
The application imports the following information:
  • GCP VPC/Subnet
  • GCP Public VPC/Subnet
  • GCP Virtual Machines
  • GCP Load Balancers
  • GCP Cloud DNS (Private Zones)
  • GCP Cloud DNS (Public Zones)

Requirements

Before you install the Discovery & Visibility GCP Adaptive Application, ensure that the following requirements are met:
  • You must be running Address Manager v9.1.0 or greater
  • You must have a GCP account to retrieve the GCP data with the following permissions set:
    • GCP Private VPC/Subnets permissions:
      • compute.networks.get
      • compute.networks.list
      • compute.subnetworks.get
      • compute.subnetworks.list
    • GCP VM Instance permissions:
      • compute.instances.delete
      • compute.instances.get
      • compute.disks.create
      • compute.instances.create
      • compute.instances.resume
      • compute.instances.reset
      • compute.instances.list
      • compute.instances.start
      • compute.instances.stop
      • compute.instances.suspend
    • GCP DNS Zones (Private) permissions:
      • compute.zones.get
      • compute.zones.list
      • compute.regions.get
      • compute.regions.list
      • dns.managedZones.list
      • dns.resourceRecordSets.list
      • dns.resourceRecordSets.get
    • GCP DNS Zones (Public) permissions:
      • compute.zones.get
      • compute.zones.list
      • compute.regions.get
      • compute.regions.list
      • dns.managedZones.list
      • dns.resourceRecordSets.list
      • dns.resourceRecordSets.get
    • GCP Load Balancer permissions:
      • compute.instanceTemplates.get
      • compute.instanceTemplates.list
      • compute.instanceGroups.list
      • compute.instanceGroups.get
      • compute.instances.get
      • compute.instances.list
      • compute.backendServices.get
      • compute.backendServices.list
      • compute.regionBackendServices.get
      • compute.regionBackendServices.list
      • compute.globalForwardingRules.get
      • compute.globalForwardingRules.list
      • compute.forwardingRules.get
      • compute.forwardingRules.list
      • compute.targetPools.get
      • compute.targetPools.list
      • compute.targetHttpProxies.get
      • compute.targetHttpProxies.list
      • compute.targetHttpsProxies.get
      • compute.targetHttpsProxies.list
      • compute.regionTargetHttpProxies.get
      • compute.regionTargetHttpProxies.list
      • compute.regionTargetHttpsProxies.get
      • compute.regionTargetHttpsProxies.list
      • compute.targetSslProxies.get
      • compute.targetSslProxies.list
      • compute.targetTcpProxies.get
      • compute.targetTcpProxies.list
      • compute.urlMaps.get
      • compute.urlMaps.list
      • compute.regionUrlMaps.get
      • compute.regionUrlMaps.list
Note: The GCP account is configured in the Adaptive Application setup and used to continuously monitor and retrieve changes from your GCP infrastructure (Visibility). You do not need to be logged into the GCP workflow for visibility to occur.