manually-creating-iam-gcp.adoc

Manually creating IAM for GCP

In environments where the cloud identity and access management (IAM) APIs are not reachable, or the administrator prefers not to store an administrator-level credential secret in the cluster kube-system namespace, you can put the Cloud Credential Operator (CCO) into manual mode before you install the cluster.

modules/alternatives-to-storing-admin-secrets-in-kube-system.adoc

Additional resources

• Using manual mode with GCP Workload Identity

• Rotating or removing cloud provider credentials

For a detailed description of all available CCO credential modes and their supported platforms, see About the Cloud Credential Operator.

modules/manually-create-identity-access-management.adoc

Additional resources

• Updating a cluster using the web console

• Updating a cluster using the CLI

modules/mint-mode.adoc

modules/mint-mode-with-removal-of-admin-credential.adoc

Next steps

• Install an {product-title} cluster:

  • Installing a cluster quickly on GCP with default options on installer-provisioned infrastructure

  • Install a cluster with cloud customizations on installer-provisioned infrastructure

  • Install a cluster with network customizations on installer-provisioned infrastructure