Connect your Google Cloud project to monitor Compute Engine, Cloud Run, GKE, and the metrics in Cloud Monitoring. Nova authenticates with a read-only service account key, so it can observe your project without making changes.
In the GCP console, create a service account and grant it Monitoring Viewer and Compute Viewer. These are read-only roles.
Add a key to the service account and download the JSON key file. Keep it safe; it is a credential.
In Nova, go to Settings > Integrations, find the GCP tile, and click Connect.
Upload the JSON key file and enter your project ID. Nova uses these to read your project.
Click Validate. Your GCP resources appear in Nova within a few minutes.
Use a dedicated service account just for Nova with viewer roles only. That keeps the blast radius of the key tiny and makes it easy to rotate.