Creating a GCP Kubernetes cluster

Creating the actual cluster

1. Access the Kubernetes Engine menu in the GCP console and select Clusters on the left-side menu.

2. Click CREATE.

For more information on creating a cluster, visit the Google Cloud documentation platform.

Retrieving the Cluster URL and the Cloud region

3. The Cluster URL and Cloud region can be fetched from the DETAILS screen when creating he actual cluster. You will need these two credentials later, when establishing the connection.

• The Cloud region corresponds to the Region field in the DETAILS screen.

• The Cluster URL corresponds to the Endpoint field.

Retrieving the Certificate

4. Now we need to retrieve the Certificate. Click the CONNECT button.

5. Click RUN IN CLOUD SHELL.

6. Approve any request.

7. Press Enter. Then type the following command:

cat ~/.kube/config

8. The Certificate corresponds to the certificate-authority-data property. Copy it and save it for later use.

Retrieving the Project ID

9. The Project ID can be fetched by clicking on the Project Name in the top bar.

Granting Bunnyshell access to the cluster

Bunnyshell will gain access to the cluster through a Service Account.

Prerequisites

You need to install the Google Cloud CLI and authenticate before moving to the next step.

Please see https://cloud.google.com/sdk/gcloud/reference/auth/login for more details.

Alternatively, you can perform these steps in Google Cloud Shell.

Retrieving the Service Account

Type the following command in the Google Cloud CLI to create the Service Account:

gcloud iam service-accounts create [USER]

Example

gcloud iam service-accounts create bunnyshell-access

Granting the Service Account access to your cluster

Then type the following command to grant the Service Account access to your cluster:

gcloud projects add-iam-policy-binding PROJECT_ID \
    --member=serviceAccount:USER@PROJECT_ID.iam.gserviceaccount.com \
    --role=roles/container.admin

Example

gcloud projects add-iam-policy-binding bunnyshell-347109 \
   --member=serviceAccount:[e-mail] \
   --role=roles/container.admin

Retrieving the Google Service Account Key

Finally, type this command to create a key for your Google Service Account

gcloud iam service-accounts keys create gsa-key.json \
    --iam-account=USER@PROJECT_ID.iam.gserviceaccount.com

Example

gcloud iam service-accounts keys create gsa-key.json \
    --iam-account=[e-mail]