[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-01 (世界標準時間)。"],[],[],null,["Share GKE snapshots with Google Support\n\nIf you have a problem with registered clusters outside Google Cloud that you can't resolve yourself, you may be asked to create a snapshot of your cluster and share it with the team. This page tells you how to share this information with Google Cloud Support.\n\nAllow Google Cloud Support to view your uploaded cluster snapshot\n\nFor some support cases, you might need to take a snapshot of the affected cluster for the Google Cloud Support team. Instead of emailing the snapshot, you can upload the file to a Cloud Storage bucket and share access to the bucket with the team. To grant access to a storage bucket, review the required permissions specified in [Identity and Access Management permissions for `gcloud storage` commands](/storage/docs/access-control/iam-gcloud).\n\nCreate cluster snapshot\n\nThe process for creating a snapshot depends on your cluster type:\n\n- **GKE on AWS (previous generation)** : Follow the instructions in [Create a snapshot](/anthos/clusters/docs/multi-cloud/aws/previous-generation/troubleshooting#snapshots)\n- **Google Distributed Cloud deployments on VMware** : Follow the instructions in [Upload snapshots to a Cloud Storage bucket](/anthos/clusters/docs/on-prem/diagnose#upload_snapshots_to_a_bucket) to create a cluster snapshot and upload the cluster snapshot to a Cloud Storage bucket. Note the location of the snapshot in the output.\n- **Google Distributed Cloud deployments on bare metal** : Follow the instructions in [How to create a default snapshot](/anthos/clusters/docs/bare-metal/latest/troubleshooting/bmctl-snapshot) to create a cluster snapshot and upload the cluster snapshot to a Cloud Storage bucket. These instructions also show you how to grant Google Cloud Support access to the bucket.\n- **Attached clusters** : Use [this script](https://github.com/GoogleCloudPlatform/anthos-samples/blob/master/troubleshooting/create_snapshot.py) as a reference to create a snapshot.\n\nCreate a Google Cloud service account\n\nCreate a dedicated Google Cloud service account to be used by the support team. You do this by running the following command:\n**Note:** With release 1.15.0 and higher of Google Distributed Cloud, the following command isn't needed. The command to create and upload a snapshot automatically provisions the service account for sharing access to your uploaded snapshot. \n\n```bash\ngcloud services enable connectgateway.googleapis.com --project=PROJECT_ID\ngcloud beta services identity create --service=connectgateway.googleapis.com --project=PROJECT_ID\n```\n\n...where:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e is the Project ID of the cluster snapshot's storage bucket.\n\nShare access with Google Cloud Support\n\nGrant read-only access of the bucket's storage object to the dedicated\nGoogle Cloud service account used by the support team for your case. You do this\nby running the following command:\n\nGoogle Distributed Cloud on bare metal release 1.15.0 and higher\n\nTo share access with Google Support, use the following command: \n\n gcloud storage buckets add-iam-policy-binding gs://\u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e \\\n --member=serviceAccount:service-\u003cvar label=\"project number\" translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.objectViewer\n\nReplace \u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e\nwith the name of the bucket into which your snapshot was uploaded. By default,\nthe bucket name starts with `anthos-snapshot-`.\n\nTo revoke access to your bucket: \n\n gcloud storage buckets remove-iam-policy-binding gs://\u003cvar label=\"name of the storage bucket\" translate=\"no\"\u003eBUCKET_NAME\u003c/var\u003e \\\n --member=serviceAccount:service-\u003cvar label=\"project number\" translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.objectViewer\n\nGoogle Distributed Cloud on VMware release 1.15.0 and higher\n\nAs described in [Upload snapshots to a Cloud Storage bucket](/anthos/clusters/docs/on-prem/latest/diagnose#upload_snapshots_to_a_bucket),\nwhen you create a snapshot with the `--share-with` flag, it is automatically\nshared with Google Support. No additional command is needed.\n\nManually share access to an uploaded snapshot \n\n```bash\ngcloud storage buckets add-iam-policy-binding gs://BUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME \\\n --member=serviceAccount:service-PROJECT_NUMBER@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.legacyObjectReader\n```\n\n...where:\n\n- \u003cvar translate=\"no\"\u003eBUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME\u003c/var\u003e is the snapshot location you noted when you created the cluster snapshot.\n- \u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e is your project's ID number, used to create an identifier for the support case service account. You can get this value in the Google Cloud console by visiting the [IAM and Admin settings page](https://console.cloud.google.com/iam-admin/settings).\n\nAfter the support case is closed, Google will disable the service account. If you want to revoke Google's permission to access your Cloud Storage bucket, run the following command: \n\n```bash\ngcloud storage buckets remove-iam-policy-binding gs://BUCKET_NAME/CLUSTER_NAME/SNAPSHOT_FILE_NAME \\\n --member=serviceAccount:service-PROJECT_NUMBER@gcp-sa-anthossupport.iam.gserviceaccount.com \\\n --role=roles/storage.legacyObjectReader\n```"]]
