Version 1.7. This version is no longer supported. For information about how to upgrade to version 1.8, see Upgrading Anthos on bare metal in the 1.8 documentation. For more information about supported and unsupported versions, see the Version history page in the latest documentation.

Understanding preflight checks

In Google Distributed Cloud you can run preflight checks for different situations:

Google Distributed Cloud runs preflight checks when you create or update admin, hybrid, standalone, or user clusters and node pool resources with bmctl. If the checks fail, no changes are made. You can also bypass these checks.
Google Distributed Cloud also runs internal preflight checks when you apply Kubernetes resources to user clusters from an admin or hybrid cluster. The checks are run before changes are applied to affected user clusters. If the checks fail, no changes are made. You can also bypass these checks, or run them explicitly.

Preflight checks when creating clusters using `bmctl`

When you create admin, hybrid, standalone, or user clusters with the bmctl command, Google Distributed Cloud automatically runs preflight checks before any changes are made.

When the checks pass, Google Distributed Cloud creates the clusters.

Ignoring the results of automated preflight checks

If you want to bypass these automated preflight checks, you can use the optional --force flag in the command.

Running preflight checks independently

You can also run preflight checks by themselves, before creating a cluster, to ensure your machine and node resources pass checks.

The following command validates the specified cluster config file, but doesn't try to create the cluster itself:
```
bmctl check config --cluster CLUSTER_NAME
```
This command checks whether the machines and network are ready for cluster creation:
```
bmctl check preflight --cluster CLUSTER_NAME
```

Only Google Distributed Cloud 1.7.0 and later versions support creating user clusters with bmctl.

Preflight checks for user cluster creation

User clusters are created from an existing admin or hybrid cluster. Google Distributed Cloud automatically runs preflight checks before making any changes. You can also run preflight checks with kubectl before you create a cluster.

Create a user cluster config file following the steps in Creating user clusters in a Multi-Cluster Setup
Create a namespace for the new user cluster. For example, to create a new user cluster named user1, you can create a namespace named cluster-user1. Here is the kubectl command to create the namespace, where ADMIN_KUBECONFIG specifies the path to the admin cluster kubeconfig file:
```
kubectl --kubeconfig ADMIN_KUBECONFIG create namespace cluster-user1
```
Upload your SSH private key file into the new namespace as a secret to establish your credentials. Here's the sample command, where ADMIN_KUBECONFIG specifies the path to the admin cluster kubeconfig file, and SSH_PRIVATE_KEY_FILE_PATH specifies the path to the SSH private key file:
```
kubectl --kubeconfig ADMIN_KUBECONFIG create secret generic ssh-key -n cluster-user1 --from-file=id_rsa=SSH_PRIVATE_KEY_FILE_PATH
```

Create a new preflight check YAML file, with the following structure. In the configYAML field, enter the text content of the user cluster config file you created in step 1:

apiVersion: baremetal.cluster.gke.io/v1
kind: PreflightCheck
metadata:
generateName: preflightcheck-
namespace: cluster-user1
spec:
configYAML: |
# insert user cluster config file content here.

Use the kubectl command to run the preflight check for the user cluster:
```
kubectl --kubeconfig ADMIN_KUBECONFIG create -f USER_CLUSTER_PREFLIGHT_CHECK_CONFIG
```
Replace the following:
- ADMIN_KUBECONFIG: a path to the admin cluster kubeconfig file
- USER_CLUSTER_PREFLIGHT_CHECK_CONFIG: a path to the preflight check YAML file you created in the previous step
For example, for an admin cluster named cluster1, and a user cluster preflight check config named user1-preflight.yaml, the command is:
```
kubectl --kubeconfig bmctl-workspace/cluster1/cluster1-kubeconfig create -f user1-preflight.yaml
```
The system returns the following message, with the job ID of the preflight check:
```
preflightcheck.baremetal.cluster.gke.io/preflightcheck-g7hfo4 created
```

Query the preflight check job status using kubectl command:

kubectl --kubeconfig bmctl-workspace/cluster1/cluster1-kubeconfig -n cluster-user1 get preflightchecks preflightcheck-g7hfo4

If the preflight check job fails, check its status, and then check the detailed job logs to see which check failed. Fix the issues mentioned in the jobs accordingly, and run the checks again.

Internal preflight checks on existing clusters

Google Distributed Cloud also performs internal preflight checks when you apply Kubernetes resources to an existing admin or hybrid cluster. If any checks fail, Google Distributed Cloud dies not change the related nodes unless you've specifically bypassed the checks.

Bypassing preflight checks when applying Kubernetes resources

To ignore the internal preflight checks when applying resources to existing clusters, you need to set the BypassPreflightCheck field to true in the cluster YAML file.

Here is a fragment of a cluster config YAML file, showing the bypassPreflightCheck field set to true.

# Sample cluster config to bypass preflight check errors:

apiVersion: v1
kind: Namespace
metadata:
  name: cluster-user1
---
apiVersion: baremetal.cluster.gke.io/v1
kind: Cluster
metadata:
  name: user1
  namespace: cluster-user1
spec:
  type: user
  bypassPreflightCheck: true
  # Anthos cluster version.
  anthosBareMetalVersion: 1.7.7
....

Re-enabling preflight checks

You can explicitly trigger a new round of preflight checks so Google Distributed Cloud can update or create new clusters after the preflight check is successful.

Create a new preflight check YAML file with the following content. Fill in the namespace and clusterName fields with the cluster name you are creating:

apiVersion: baremetal.cluster.gke.io/v1
kind: PreflightCheck
metadata:
generateName: preflightcheck-
namespace: CLUSTER_NAMESPACE
spec:
clusterName: CLUSTER_NAME

Use the kubectl command to run the preflight check for the cluster:
```
kubectl --kubeconfig ADMIN_KUBECONFIG create -f CLUSTER_PREFLIGHT_CHECK_CONFIG
```
Replace the following:
- ADMIN_KUBECONFIG: a path to the admin cluster kubeconfig file
- CLUSTER_PREFLIGHT_CHECK_CONFIG: path to the preflight check YAML file you created previously
For example, for an admin cluster named cluster1, and a user cluster preflight check config named user1-preflight.yaml, the command is:
```
kubectl --kubeconfig bmctl-workspace/cluster1/cluster1-kubeconfig create -f user1-preflight.yaml
```
The system responds with the job ID of the preflight check:
```
preflightcheck.baremetal.cluster.gke.io/preflightcheck-g7hfo4 created
```

Query the preflight check job status ID using kubectl command:

kubectl --kubeconfig bmctl-workspace/cluster1/cluster1-kubeconfig -n cluster-cluster1 get preflightchecks preflightcheck-g7hfo4

Once the preflight check job finished successfully, Google Distributed Cloud creates the cluster and its resources.

Installation preflight check details

Google Distributed Cloud checks various operating system, software, and machine prerequisite conditions when running preflight checks.

For more detailed information, see Installation prerequisites overview.