Google Cloud Storage

Google Cloud Storage resources represent bucket-based object storage hosted on Google Cloud.

Inventory Management

Managed inventories can discover GCS buckets automatically for Google Cloud. For buckets not covered by managed discovery, you can instead set up a self-managed inventory and add the resource manually.

Adding Google Cloud Storage as a resource

When using a self-managed inventory, register the resource with Object Storage as the class and GCS as the subclass. For the endpoint, use the bucket name. See resources documentation for more information on how to set up resources on a self-managed inventory.

Backup flow

flowchart TD
  subgraph GCS["GCS Bucket (source)"]
    Objects["Objects"]
  end

  subgraph Plakar["Plakar Control Plane"]
    Source["GCS Source app"]
    Backup["Backup process
Encrypt & deduplicate"]
  end

  Store["Kloset Store"]

  Source -->|"read objects"| Objects
  Objects --> Backup
  Backup --> Store

Restore flow

flowchart TD
  Store["Kloset Store"]

  subgraph Plakar["Plakar Control Plane"]
    Destination["GCS Destination app"]
    Restore["Restore process"]
  end

  subgraph GCS["GCS Bucket (destination)"]
    Objects["Objects"]
  end

  Store --> Restore
  Destination --> Restore
  Restore -->|"write objects"| Objects

Shared Configuration

The following settings are available when configuring source, store, or destination apps.

• Credentials JSON: Upload a Google Cloud service account JSON key file or paste its contents directly.
• Endpoint: Overrides the default Google Cloud Storage API endpoint. Only needed when connecting to a non-standard endpoint such as a local GCS emulator for development and testing.
• No Auth: Disables authentication entirely. Only useful when connecting to a local emulator that does not require credentials. Should never be enabled in production.

Store configuration

The following extra settings are available when configuring a store app.

• Kloset Passphrase: The passphrase Plakar Control Plane uses to encrypt the store. This passphrase is required to access the store and must be kept safe.

Permissions

Plakar Control Plane requires a set of IAM permissions to access your GCS bucket. These permissions should be granted to the service account that Plakar Control Plane will use to authenticate. See the documentation on Managing IAM Roles and Service Accounts on Google Cloud for instructions on how to create a custom role with these permissions and generate a service account key.