GKE on VMware downloads

This document shows how to download the gkeadm command-line tool and other components that are part of GKE on VMware.

Typically, gkeadm is the only component that you have to download manually. For example, you don't need to manually download gkectl, or the GKE on VMware bundle file, because they are automatically copied to the admin workstation. Also, you don't have to manually download the Admin workstation Open Virtual Appliance (OVA), because gkeadm automatically copies the OVA to your vSphere environment.

Before you begin

You must be logged in with a Google Account.

To see whether you are logged in, view your SDK account property:

gcloud config get-value account

To sign in:

gcloud auth login

Download gkeadm

You use the gkeadm command-line tool to create an admin workstation. Then you get an SSH connection to your admin workstation, and from there, you create clusters.

The gkeadm command-line tool is available for 64-bit Linux.

gkeadm is also available for macOS 10.15 and higher, Windows 10, and Windows Server 2019. However, support for macOS and Windows is deprecated and will be removed in a future release.

Linux

gsutil cp gs://gke-on-prem-release/gkeadm/VERSION/linux/gkeadm ./
chmod +x gkeadm

Windows

gsutil cp gs://gke-on-prem-release/gkeadm/VERSION/windows/gkeadm.exe ./

macOS Catalina

gsutil cp gs://gke-on-prem-release/gkeadm/VERSION/darwin/gkeadm ./
chmod +x gkeadm

Replace VERSION with the version of GKE on VMware you want to install or upgrade your clusters to. The latest available patch version is 1.28.300-gke.123. For a list of available versions, see Version history.

Verify gkeadm using openssl

You can use openssl to verify the gkeadm binary against the public key.

gsutil cp gs://gke-on-prem-release/gkeadm/VERSION/linux/gkeadm.1.sig /tmp/gkeadm.1.sig
echo "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw==
-----END PUBLIC KEY-----" > key.pem
openssl dgst -verify key.pem -signature /tmp/gkeadm.1.sig ./gkeadm

The expected output of this command is Verified OK.

Download the GKE on VMware bundle

In certain cases, you might want to download a GKE on VMware bundle to your admin workstation.

On your admin workstation, run this command:

gsutil cp gs://gke-on-prem-release/gke-onprem-bundle/VERSION/gke-onprem-vsphere-VERSION.tgz /var/lib/gke/bundles/gke-onprem-vsphere-VERSION.tgz

Replace VERSION with the version of GKE on VMware you want to install or upgrade your clusters to. The latest available patch version is 1.28.300-gke.123. For a list of available versions, see Version history.

Verify the bundle

gsutil cp gs://gke-on-prem-release/gke-onprem-bundle/VERSION/gke-onprem-vsphere-VERSION.tgz.1.sig /tmp/gke-onprem-vsphere-VERSION.tgz.1.sig
echo "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw==
-----END PUBLIC KEY-----" > key.pem
openssl dgst -verify key.pem -signature /tmp/gke-onprem-vsphere-VERSION.tgz.1.sig /var/lib/gke/bundles/gke-onprem-vsphere-VERSION.tgz

Download gkectl

Normally there is no reason for your to download the gkectl command-line tool. In the rare case that you want to download gkectl, you can find it here:

gsutil cp gs://gke-on-prem-release/gkectl/VERSION/gkectl ./

Replace VERSION with the version of GKE on VMware you want to install or upgrade your clusters to. The latest available patch version is 1.28.300-gke.123. For a list of available versions, see Version history.

Verify gkectl using openssl

You can use openssl to verify the gkectl binary against the public key.

gsutil cp gs://gke-on-prem-release/gkectl/VERSION/gkectl.1.sig /tmp/gkectl.1.sig
echo "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw==
-----END PUBLIC KEY-----" > key.pem
openssl dgst -verify key.pem -signature /tmp/gkectl.1.sig ./gkectl

The expected output of this command is Verified OK.

Download the OVA

In certain cases, you might want to download the admin workstation Open Virtual Appliance (OVA).

To download the admin workstation OVA:

gsutil cp gs://gke-on-prem-release/admin-appliance/VERSION/gke-on-prem-admin-appliance-vsphere-VERSION.ova ./

Replace VERSION with the version of GKE on VMware you want to install or upgrade your clusters to. The latest available patch version is 1.28.300-gke.123. For a list of available versions, see Version history.

Verify the OVA using openssl

You can use openssl to verify the OVA file you downloaded against a signature file (SIG).

gsutil cp gs://gke-on-prem-release/admin-appliance/VERSION/gke-on-prem-admin-appliance-vsphere-VERSION.ova.1.sig /tmp/gke-on-prem-admin-appliance-vsphere-VERSION.ova.1.sig
echo "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw==
-----END PUBLIC KEY-----" > key.pem
openssl dgst -verify key.pem -signature /tmp/gke-on-prem-admin-appliance-vsphere-VERSION.ova.1.sig ./gke-on-prem-admin-appliance-vsphere-VERSION.ova

The expected output of this command is Verified OK.