How-to guides

Installing GKE on AWS

• Prerequisites

  Complete these steps before setting up GKE on AWS.

• Installing the management service

  Create a management service inside a dedicated AWS VPC. A management service creates, updates, and deletes user clusters.

• Integrating with existing infrastructure

  Install GKE on AWS resources into an existing AWS VPC by editing the configuration and running anthos-gke.

• Using a proxy with GKE on AWS

  Route traffic from the GKE on AWS management service and Connect through an HTTP/HTTPS proxy.

• Creating a user cluster

  Create user clusters to run your workloads.

• Creating a custom user cluster

  Create a user cluster that spans multiple AWS availability zones or enables additional GKE on AWS features.

• Creating a user cluster with workload identity

  Bind Kubernetes service accounts to AWS IAM accounts with specific permissions using workload identity.

• Connecting to your cluster with Google Cloud console

  Use the Google Cloud console to manage your user clusters.

• Scaling user clusters

  Automatically scale out your AWSNodePools, or manually create and delete AWSNodePools to scale up or down.

• Connecting to your cluster with kubectl

  Follow these steps to connect to your user clusters using kubectl.

• Authenticating with OpenID Connect (OIDC)

  Configure GKE on AWS to use OIDC for authentication to user clusters.

• Uninstalling GKE on AWS

  Follow these steps to uninstall GKE on AWS.

Administering GKE on AWS

• Backing up user clusters

  Back up the configuration information for the user clusters in a GKE on AWS environment.

Using GKE on AWS

• Creating a load balancer

  Set up an AWS Elastic Load Balancer (ELB) with GKE on AWS.

• Creating an application load balancer (ALB)

  Set up an AWS Application Load Balancer (ALB) with GKE on AWS.

• Preparing AWS networking

  Tag your VPC and public subnet with your cluster ID.

• Enabling ingress

  Enable ingress by installing Cloud Service Mesh and optionally set up a Kubernetes Ingress resource.

• Using HashiCorp Vault on GKE on AWS

  Try HashiCorp Vault, a third-party secrets management solution that integrates with Kubernetes and GKE on AWS.

• Using a private image registry

  Use a private container image repository, such as Container Registry, with GKE on AWS.

Configuring storage

• Installing storage drivers

  Install a Container Storage Interface (CSI) storage driver on GKE on AWS.

• Using StorageClasses with your workloads

  Use built-in and custom StorageClasses with your GKE on AWS workloads.

• Importing a preexisting EBS volume

  Mount a pre-existing AWS EBS volume in your workloads.

• Using EFS file systems

  Mount a pre-existing AWS Elastic File System (EFS) file system in your workloads.

Installing add-ons

• Installing Config Management

  Enable Config Management to sync Kubernetes configuration files from a repository or enforce admission control policies.