Access GKE Fleet Clusters
1. Access GKE Fleet Clusters
One of the key features of GKE is providing multi-cluster management capabilities that allow you to manage Kubernetes clusters running in various environments. Connect Agent is a Kubernetes deployment that runs in your GKE cluster, handles Kubernetes API requests, and establishes a secure connection to Google Cloud. This connection is authenticated and encrypted using Transport Layer Security, or TLS. The connection can pass through any network devices like NATs and firewalls, and it doesn't require you to have a public IP address in your cluster. After the cluster is connected, it can communicate with the control plane in Google Cloud. User interactions are recorded in Kubernetes Audit Logs for security and auditing purposes. Connect Agent is only required if your GKE clusters are running in cloud providers outside of Google Cloud. If you want to manage an existing Kubernetes cluster with GKE, you must register it with a GKE fleet. This allows you to access and control all your clusters from a central location in the Google Cloud Console. To register a cluster, you can use the gcloud container fleet memberships register command, which installs and configures the Connect Agent in your cluster. Then you can use the Google Cloud Console and the gcloud command line tool to control and manage your registered clusters. To log in and access clusters, you can use several different types of credentials, including Google Identity, third-party identity providers like GKE Identity Service with OIDC, Microsoft Entra AD or Azure AD, and Okta and bearer tokens. Connect Gateway provides a secure entry point for accessing your registered clusters from anywhere, regardless of your network location. To access your registered clusters running in AWS or Azure, you can use the gcloud container aws or azure clusters get-credentials command. The Connect Agent securely forwards your requests to the Google Cloud API server. With GKE's multi-cluster management, you have a centralized location for managing a multi-cluster environment. This enables you to create a unified CI/CD process across clusters in different environments and networks.2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.