GCP Storage Bucket

A storage bucket is required to store
  • iControlJar: Container name is icontroljar and the jar has to be placed here.
  • MongoDB backup: Container name should be mongo-backup.
  • Vault backup: Container name should be vault-backup.
  • Axisjar, javax.xml.soap-api: Jars needs to be added here - axisjar.

A summary of steps for creating the storage bucket is as follows:

Note: After the script is executed, capture the output Annotation which is required in the global utility config.
  1. Create a storage account with a valid name to indicate the storage account for a specific GKE cluster.
  2. Configure Storage buckets and Image Registry access for GKE nodes.
  3. The first workload identity should be enabled cluster wide. This operation may be performed from the portal after the cluster creation or at the time of cluster creation. Refer google document Using Workload Identity
  4. The above steps can also be performed using a helper script provided by AppViewX. To use this script follow the steps below.
    1. Download the artifact Managed-Kubernetes_helper_scripts.tar.gz to the bastion host and extract using the command:
      tar -xf Managed-Kubernetes_helper_scripts.tar.gz
    2. Navigate to the extracted directory mk8s_helper_scripts.
      cd mk8s_helper_scripts
    3. Edit the file gcp_sc_config.sh and replace <PROJECT_ID>, <CLUSTER_NAME>, <NODE_POOL_1,NODE_POOL_2>, <REGION_NAME> with the actual values.
    4. Execute the gcp_sc_config.sh file.
      bash gcp_sc_config.sh
  5. Store output of the script in step 4d and pass the annotation in the global utility config serviceAccountAnnotation (refer the second table in Installation Step 7)