Installing a cluster on GCP with customizations

In {product-title} version {product-version}, you can install a customized cluster on infrastructure that the installation program provisions on Google Cloud Platform (GCP). To customize the installation, you modify parameters in the install-config.yaml file before you install the cluster.

Prerequisites

You reviewed details about the {product-title} installation and update processes.
You read the documentation on selecting a cluster installation method and preparing it for users.
You configured a GCP project to host the cluster.
If you use a firewall, you configured it to allow the sites that your cluster requires access to.

modules/cluster-entitlements.adoc

modules/ssh-agent-using.adoc

modules/installation-obtaining-installer.adoc

modules/installation-initializing.adoc

Additional resources

Installation configuration parameters for GCP

modules/installation-minimum-resource-requirements.adoc

Additional resources

Optimizing storage

modules/installation-gcp-tested-machine-types.adoc

modules/installation-gcp-tested-machine-types-arm.adoc

modules/installation-using-gcp-custom-machine-types.adoc

modules/installation-gcp-enabling-shielded-vms.adoc

modules/installation-gcp-enabling-confidential-vms.adoc

modules/installation-gcp-config-yaml.adoc

Additional resources

Enabling customer-managed encryption keys for a compute machine set

modules/installation-configure-proxy.adoc

modules/installing-gcp-user-defined-labels-and-tags.adoc

modules/installing-gcp-cluster-creation.adoc

modules/installing-gcp-querying-labels-tags-gcp.adoc

modules/cli-installing-cli.adoc

Alternatives to storing administrator-level secrets in the kube-system project

By default, administrator secrets are stored in the kube-system project. If you configured the credentialsMode parameter in the install-config.yaml file to Manual, you must use one of the following alternatives:

To manage long-term cloud credentials manually, follow the procedure in Manually creating long-term credentials.
To implement short-term credentials that are managed outside the cluster for individual components, follow the procedures in Configuring a GCP cluster to use short-term credentials.

modules/manually-create-identity-access-management.adoc

Configuring a GCP cluster to use short-term credentials

To install a cluster that is configured to use GCP Workload Identity, you must configure the CCO utility and create the required GCP resources for your cluster.