Installing a cluster on GCP into an existing VPC

In {product-title} version {product-version}, you can install a cluster into an existing Virtual Private Cloud (VPC) on Google Cloud Platform (GCP). The installation program provisions the rest of the required infrastructure, which you can further customize. To customize the installation, you modify parameters in the install-config.yaml file before you install the cluster.

Prerequisites

You reviewed details about the {product-title} installation and update processes.
You read the documentation on selecting a cluster installation method and preparing it for users.
You configured a GCP project to host the cluster.
If you use a firewall, you configured it to allow the sites that your cluster requires access to.

modules/installation-custom-gcp-vpc.adoc

modules/cluster-entitlements.adoc

modules/ssh-agent-using.adoc

modules/installation-obtaining-installer.adoc

modules/installation-initializing.adoc

Additional resources

Installation configuration parameters for GCP

modules/installation-minimum-resource-requirements.adoc

Additional resources

Optimizing storage

modules/installation-gcp-tested-machine-types.adoc

modules/installation-gcp-tested-machine-types-arm.adoc

modules/installation-using-gcp-custom-machine-types.adoc

modules/installation-gcp-enabling-shielded-vms.adoc

modules/installation-gcp-enabling-confidential-vms.adoc

modules/installation-gcp-config-yaml.adoc

Additional resources

Enabling customer-managed encryption keys for a compute machine set

modules/nw-gcp-installing-global-access-configuration.adoc

modules/installation-configure-proxy.adoc

modules/cli-installing-cli.adoc

Alternatives to storing administrator-level secrets in the kube-system project

By default, administrator secrets are stored in the kube-system project. If you configured the credentialsMode parameter in the install-config.yaml file to Manual, you must use one of the following alternatives:

To manage long-term cloud credentials manually, follow the procedure in Manually creating long-term credentials.
To implement short-term credentials that are managed outside the cluster for individual components, follow the procedures in Configuring a GCP cluster to use short-term credentials.

modules/manually-create-identity-access-management.adoc

Configuring a GCP cluster to use short-term credentials

To install a cluster that is configured to use GCP Workload Identity, you must configure the CCO utility and create the required GCP resources for your cluster.