Google Cloud 외부에서 등록된 클러스터에 문제가 있고, 이를 직접 해결할 수 없으면 해당 클러스터의 스냅샷을 만들고 이를 팀에 공유해야 할 수 있습니다. 이 페이지에서는 Google Cloud 지원팀에 이 정보를 공유하는 방법을 설명합니다.
Google Cloud 지원팀의 업데이트된 클러스터 스냅샷 보기 허용
일부 지원 케이스의 경우 Google Cloud 지원팀을 위해 해당 클러스터의 스냅샷을 작성해야 할 수 있습니다. 스냅샷을 이메일로 보내는 대신 파일을 Cloud Storage 버킷에 업로드하고 버킷 액세스 권한을 팀에 공유할 수 있습니다. 스토리지 버킷에 대한 액세스 권한을 부여하려면 gcloud storage 명령어에 대한 Identity and Access Management 권한에 지정된 필수 권한을 검토하세요.
VMware용 Google Distributed Cloud 배포: 클러스터 스냅샷을 만들고 클러스터 스냅샷을 Cloud Storage 버킷에 업로드하려면 Cloud Storage 버킷에 스냅샷 업로드 안내를 따르세요. 출력에서 스냅샷 위치를 확인합니다.
베어메탈용 Google Distributed Cloud 배포: 클러스터 스냅샷을 만들고 클러스터 스냅샷을 Cloud Storage 버킷에 업로드하려면 기본 스냅샷을 만드는 방법 안내를 따르세요. 이 안내는 Google Cloud 지원팀에 버킷에 대한 액세스 권한을 부여하는 방법도 보여줍니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2024-12-23(UTC)"],[],[],null,["Share GKE snapshots with Google Support\n\nIf you have a problem with registered clusters outside Google Cloud that you can't resolve yourself, you may be asked to create a snapshot of your cluster and share it with the team. This page tells you how to share this information with Google Cloud Support.\n\nAllow Google Cloud Support to view your uploaded cluster snapshot\n\nFor some support cases, you might need to take a snapshot of the affected cluster for the Google Cloud Support team. Instead of emailing the snapshot, you can upload the file to a Cloud Storage bucket and share access to the bucket with the team. To grant access to a storage bucket, review the required permissions specified in [Identity and Access Management permissions for `gcloud storage` commands](/storage/docs/access-control/iam-gcloud).\n\nCreate cluster snapshot\n\nThe process for creating a snapshot depends on your cluster type:\n\n- **GKE on AWS (previous generation)** : Follow the instructions in [Create a snapshot](/anthos/clusters/docs/multi-cloud/aws/previous-generation/troubleshooting#snapshots)\n- **Google Distributed Cloud deployments on VMware** : Follow the instructions in [Upload snapshots to a Cloud Storage bucket](/anthos/clusters/docs/on-prem/diagnose#upload_snapshots_to_a_bucket) to create a cluster snapshot and upload the cluster snapshot to a Cloud Storage bucket. Note the location of the snapshot in the output.\n- **Google Distributed Cloud deployments on bare metal** : Follow the instructions in [How to create a default snapshot](/anthos/clusters/docs/bare-metal/latest/troubleshooting/bmctl-snapshot) to create a cluster snapshot and upload the cluster snapshot to a Cloud Storage bucket. These instructions also show you how to grant Google Cloud Support access to the bucket.\n- **Attached clusters** : Use [this script](https://github.com/GoogleCloudPlatform/anthos-samples/blob/master/troubleshooting/create_snapshot.py) as a reference to create a snapshot.\n\nCreate a Google Cloud service account\n\nCreate a dedicated Google Cloud service account to be used by the support team. You do this by running the following command:\n**Note:** With release 1.15.0 and higher of Google Distributed Cloud, the following command isn't needed. The command to create and upload a snapshot automatically provisions the service account for sharing access to your uploaded snapshot. \n\n```bash\ngcloud services enable connectgateway.googleapis.com --project=PROJECT_ID\ngcloud beta services identity create --service=connectgateway.googleapis.com --project=PROJECT_ID\n```\n\n...where:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e is the Project ID of the cluster snapshot's storage bucket.\n\nShare access with Google Cloud Support\n\nGrant read-only access of the bucket's storage object to the dedicated\nGoogle Cloud service account used by the support team for your case. You do this\nby running the following command:\n\nGoogle Distributed Cloud on bare metal release 1.15.0 and higher\n\nTo share access with Google Support, use the following command: \n\n gcloud storage buckets add-iam-policy-binding gs://\u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e \\\n --member=serviceAccount:service-\u003cvar label=\"project number\" translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.objectViewer\n\nReplace \u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e\nwith the name of the bucket into which your snapshot was uploaded. By default,\nthe bucket name starts with `anthos-snapshot-`.\n\nTo revoke access to your bucket: \n\n gcloud storage buckets remove-iam-policy-binding gs://\u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e \\\n --member=serviceAccount:service-\u003cvar label=\"project number\" translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.objectViewer\n\nGoogle Distributed Cloud on VMware release 1.15.0 and higher\n\nAs described in [Upload snapshots to a Cloud Storage bucket](/anthos/clusters/docs/on-prem/latest/diagnose#upload_snapshots_to_a_bucket),\nwhen you create a snapshot with the `--share-with` flag, it is automatically\nshared with Google Support. No additional command is needed.\n\nManually share access to an uploaded snapshot \n\n```bash\ngcloud storage buckets add-iam-policy-binding gs://BUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME \\\n --member=serviceAccount:service-PROJECT_NUMBER@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.legacyObjectReader\n```\n\n...where:\n\n- \u003cvar translate=\"no\"\u003eBUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME\u003c/var\u003e is the snapshot location you noted when you created the cluster snapshot.\n- \u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e is your project's ID number, used to create an identifier for the support case service account. You can get this value in the Google Cloud console by visiting the [IAM and Admin settings page](https://console.cloud.google.com/iam-admin/settings).\n\nAfter the support case is closed, Google will disable the service account. If you want to revoke Google's permission to access your Cloud Storage bucket, run the following command: \n\n```bash\ngcloud storage buckets remove-iam-policy-binding gs://BUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME \\\n --member=serviceAccount:service-PROJECT_NUMBER@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.legacyObjectReader\n```"]]
