AgentSkillsCN

gcp-gke

部署并管理Google Kubernetes Engine集群，配置节点池、网络连接与工作负载身份认证。在GCP上运行Kubernetes时加以运用。

SKILL.md
--- frontmatter
name: gcp-gke
description: Deploy and manage Google Kubernetes Engine clusters. Configure node pools, networking, and workload identity. Use when running Kubernetes on GCP.
license: MIT
metadata:
  author: devops-skills
  version: "1.0"

Google Kubernetes Engine

Deploy managed Kubernetes clusters on GCP.

Create Cluster

bash
gcloud container clusters create my-cluster \
  --num-nodes=3 \
  --machine-type=e2-medium \
  --zone=us-central1-a \
  --enable-autoscaling \
  --min-nodes=1 \
  --max-nodes=5 \
  --workload-pool=${PROJECT_ID}.svc.id.goog

# Get credentials
gcloud container clusters get-credentials my-cluster --zone=us-central1-a

Node Pools

bash
gcloud container node-pools create gpu-pool \
  --cluster=my-cluster \
  --zone=us-central1-a \
  --machine-type=n1-standard-4 \
  --accelerator=type=nvidia-tesla-k80,count=1 \
  --num-nodes=1

Workload Identity

bash
gcloud iam service-accounts add-iam-policy-binding \
  --role=roles/iam.workloadIdentityUser \
  --member="serviceAccount:${PROJECT_ID}.svc.id.goog[NAMESPACE/KSA_NAME]" \
  GSA_NAME@${PROJECT_ID}.iam.gserviceaccount.com

Best Practices

  • •Use Workload Identity
  • •Enable VPC-native clusters
  • •Implement node auto-provisioning
  • •Use regional clusters for HA