Google Cloud

Create a service account scoped to the required buckets, objects, versions, and encryption keys. Encode its JSON key and configure the API process:

TOWBAR_GCS_ENABLED=true
TOWBAR_GCS_PROJECT_ID=example-project
TOWBAR_GCS_BUCKET=example-backups
TOWBAR_GCS_PREFIX=towbar
TOWBAR_GCS_SERVICE_ACCOUNT_JSON_BASE64=<base64-encoded-json>

Restart the API. Towbar validates the enabled configuration before listening, shows Google Cloud Storage only when it is valid, and never stores or returns the service-account JSON. Confirm the effective IAM policy with a real resource backup and restore. Rotate by updating the environment, recreating the API container, verifying an operation, and then revoking the old key.

Last modified on September 9, 2026

Get started

Deploy

Operate

Integrations

Workspace