/tags/wif/ Recent content in Wif on Confidential Containers Hugo en-us © The Linux Foundation. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage/">Trademark Usage</a> page. /docs/examples/gcp-simple/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/examples/gcp-simple/ <p>This documentation will walk you through setting up Cloud API Adaptor (CAA) (a.k.a. Peer Pods) on Google Kubernetes Engine (GKE).</p> <p>It explains how to deploy:</p> <ul> <li>A single worker node Kubernetes cluster using Google Kubernetes Engine (GKE),</li> <li>CAA on that Kubernetes cluster,</li> <li>A sample application deployed using CAA to verify that everything is working as expected.</li> </ul> <h2 id="pre-requisites">Pre-requisites<a class="td-heading-self-link" href="#pre-requisites" aria-label="Heading self-link"></a></h2><p>Install Required Tools:</p> <ul> <li>Install <a href="https://kubernetes.io/docs/tasks/tools/">kubectl</a>,</li> <li>Install <a href="https://helm.sh/docs/intro/install">Helm</a>,</li> <li>Install <code>gcloud</code> CLI <a href="https://cloud.google.com/sdk/docs/install">tool</a>.</li> </ul> <p>Google Cloud Project:</p> <ul> <li>Ensure you have a Google Cloud project created,</li> <li>Note the Project ID (export it as <code>GCP_PROJECT_ID</code>).</li> </ul> <h2 id="gcp-preparation">GCP Preparation<a class="td-heading-self-link" href="#gcp-preparation" aria-label="Heading self-link"></a></h2><ol> <li> <p>Set the environment variable <code>GCP_PROJECT_ID</code> to your Google Cloud project ID:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">GCP_PROJECT_ID</span><span class="o">=</span><span class="s2">&#34;YOUR_PROJECT_ID&#34;</span> </span></span></code></pre></div></li> <li> <p>Authenticate with Google Cloud and set the project:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">gcloud auth login </span></span><span class="line"><span class="cl">gcloud config <span class="nb">set</span> project <span class="s2">&#34;</span><span class="si">${</span><span class="nv">GCP_PROJECT_ID</span><span class="si">}</span><span class="s2">&#34;</span> </span></span></code></pre></div></li> <li> <p>Enable the GKE API:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">gcloud services <span class="nb">enable</span> container.googleapis.com <span class="se">\ </span></span></span><span class="line"><span class="cl"> --project<span class="o">=</span><span class="s2">&#34;</span><span class="si">${</span><span class="nv">GCP_PROJECT_ID</span><span class="si">}</span><span class="s2">&#34;</span> </span></span></code></pre></div><p>This API is required to create and manage the GKE cluster.</p> </li> <li> <p>Set the region and cluster name:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">GCP_REGION</span><span class="o">=</span><span class="s2">&#34;us-central1&#34;</span> </span></span><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">CLUSTER_NAME</span><span class="o">=</span><span class="s2">&#34;caa-gke&#34;</span> </span></span></code></pre></div> <div class="alert alert-primary" role="alert"><div class="h4 alert-heading" role="heading">Note</div> <p>&ldquo;us-central1&rdquo; was chosen because supports Confidential VMs.<br> For a complete list of supported regions visit <a href="https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#supported-zones">supported-configurations</a>.</p> </div> </li> </ol>