Cloudaware Documentation
Cloudaware Documentation
Breadcrumbs

Google GKE Cluster Access for Cloudaware

This guide explains how to grant Cloudaware read-only access to an Google Kubernetes Engine (GKE) cluster so Cloudaware can automatically discover Kubernetes resources.

Prerequisites

Google Cloud

  • You have Service Account Admin/Project IAM Admin permissions in Google Cloud.

  • The service account for Cloudaware is configured as described in this guide.

  • You have Cluster Viewer permissions to to view/access the cluster.

GKE Cluster

Your GKE cluster must be able to download the container image. Before deployment, the Kubernetes cluster needs credentials or identity-based access to pull the app image from your container registry. Two supported ways to do that:

  • Workload Identity
    A GCP-native way to let workloads authenticate without storing long-lived secrets in Kubernetes.

  • Image pull secrets
    A Kubernetes secret containing registry credentials, used when pulling private images.

Assign GKE IAM roles to Cloudaware

Kubernetes Engine Cluster Viewer role

Grant the Cloudaware service account the Kubernetes Engine Viewer for read-only access to clusters.

Custom role

Create a custom IAM role with container.clusters.get and assign it to the Cloudaware service account.

Read more about roles

Allow up to 24 hours for GKE resources to appear in the Cloudaware CMDB.

If the GKE cluster is not reachable from Cloudaware due to private networking, use the Cloudaware Breeze agent for a secure connection. Read more

GKE objects discovered by Cloudaware

Cloudaware supports discovery of the following GKE cluster objects:

  • Google GKE Cluster

  • Google GKE Cluster Config Map

  • Google GKE Cluster CRD

  • Google GKE Cluster Custom Resource

  • Google GKE Cluster Daemon Set

  • Google GKE Cluster Deployment

  • Google GKE Cluster Endpoint

  • Google GKE Cluster Fact

  • Google GKE Cluster HPA

  • Google GKE Cluster Ingress

  • Google GKE Cluster Limit Range

  • Google GKE Cluster Namespace

  • Google GKE Cluster Network Policy

  • Google GKE Cluster Network Policy Rule

  • Google GKE Cluster Node

  • Google GKE Cluster Node Address

  • Google GKE Cluster Node Condition

  • Google GKE Cluster Node Pool

  • Google GKE Cluster Pod

  • Google GKE Cluster Pod Container

  • Google GKE Cluster Pod Disruption Budget

  • Google GKE Cluster Replica Set

  • Google GKE Cluster Resource Quota

  • Google GKE Cluster Role

  • Google GKE Cluster Role Binding

  • Google GKE Cluster Secret

  • Google GKE Cluster Service

  • Google GKE Cluster Service Account Secret

  • Google GKE Cluster Service Account

  • Google GKE Cluster Stateful Set

  • Google GKE Cluster Storage Class