GCP remote provisioning

Introduction

Altinity.Cloud Anywhere operates inside a user’s Kubernetes environment.

Altinity technical support can remotely provision GCP GKE clusters with an Altinity.Cloud Anywhere environment on your GCP account. Instructions on this page describe how to configure your GCP GKE clusters to provide permission to Altinity to provision ClickHouse to your GCP Kubernetes environment.

Overview - Google GKE Installation

This section covers how to authorize Altinity.Cloud Anywhere to create Kubernetes and ClickHouse resources inside your cloud account. There are two simple steps:

• Create a project.
• Grant the appropriate permissions to anywhere-admin@altinity.com.

Create a project

Use the gcloud projects create command to create a new project.

# Create project 'aca-1'
gcloud projects create aca-1

You also need to assign a billing account to your new project. Currently the gcloud command looks like this:

# Assign a billing account to 'aca-1'
gcloud beta billing projects link aca-1 \
  --billing-account 0X0X0X-0X0X0X-0X0X0X

Granting permissions

For Altinity to be able to create Kubernetes and ClickHouse clusters in your cloud account, you need to grant the following permissions to anywhere-admin@altinity.com inside the project you just created:

• roles/compute.admin
• roles/container.admin
• roles/dns.admin
• roles/storage.admin
• roles/storage.hmacKeyAdmin
• roles/iam.serviceAccountAdmin
• roles/iam.serviceAccountKeyAdmin
• roles/iam.serviceAccountTokenCreator
• roles/iam.serviceAccountUser
• roles/iam.workloadIdentityPoolAdmin
• roles/serviceusage.serviceUsageAdmin
• roles/resourcemanager.projectIamAdmin
• roles/iap.tunnelResourceAccessor

You can do this through the Google Cloud console or you can use gcloud from the command line.

# Add a role for a member of a group associated with a project
gcloud projects add-iam-policy-binding aca-1 \
  --member='group:anywhere-admin@altinity.com' \
  --role='roles/compute.admin'

With the virtual network created and the appropriate permissions granted to the Altinity.Cloud Anywhere admin account, Altinity can create Kubernetes clusters and ClickHouse clusters inside them.