How to create a Google Kubernetes Engine Cluster in GCP with Terraform

[@SchaibleZ]

this is seriously the best walk through that I've found!! Great work!

[@CODEMENTAL]

Thank you for the feedback!

[@svsilence]

really good explanation thank you, i can provision GKE without any problem

[@Deevg-f9e]

Very informative. I tried to create a GKE auto mode cluster with a shared VPC network(private IP range), and assigned necessary IAM roles to the GKE hosted service project with (compute.engineadmin and container.admin roles). While provisioning the gke auto pilot cluster, getting this exception as " Error: Error waiting for creating GKE cluster: All cluster resources were brought up, but: only 0 nodes out of 1 have registered; cluster may be unhealthy." Verified the logs for any key findings, but not helpful. Any thoughts/references on this error to troubleshoot ??

[@CODEMENTAL]

Most likely an issue of connectivity between Control plane and nodes.

[@slash93cr]

Thanks man this video helped me a lot!

[@alexr6631]

Thanks man! I have only one error with custom network and subnetrwork name. Changing these values to "default" helps.

[@CODEMENTAL]

That error us because you are missing a vpc. So default will be pointing to the default vpc

[@hemapatil3239]

Well Explained, thank you

[@CODEMENTAL]

Glad it was helpful!

[@sonergezgen8704]

Very Nice content, Thank you !! but however, I am struggling with Terraform Cloud. How can I place my credentials config file securely into terraform cloud? Or any other secure ways to authenticate me against GKE from terraform cloud?

[@CODEMENTAL]

I am not familiar with tetraform cloud. But it really depends on where your tertraform will run from. If it is from GCP you can always assign a permission to the service account assigned to the VM running tertraform. Or if you run it from gke you can use workload identify

[@matheussiqueira2027]

Congratulations on the video. Is the code published on github?

[@yuiyep6500]

Thanks. really good VDO .

[@jideolaarowolo1692]

do you have the code for this project in any repository like github?

[@CODEMENTAL]

I will try to upload this on the weekend.

[@namacool1]

@@CODEMENTAL is there any update ?

[@reparatur9862]

Hi thank you for the Tutorial :). Can you help me please with this Erorr: Error: googleapi: Error 403: Required 'compute.zones.list' permission for 'projects/airflow-test-cluster', forbidden

[@CODEMENTAL]

Hello, you are missing a role from the user or service account that you are trying to use, which has the permission compute.zones.list. The problem you are describing looks similar to this stackoverflow problem: stackoverflow.com/questions/48232189/google-compute-engine-required-compute-zones-get-permission-error

[@Furkan-gh2wl]

Hi sir could you help me i am getting error

[@CODEMENTAL]

What error?

[@Furkan-gh2wl]

@@CODEMENTAL Error: Reference to undeclared input variable │ │ on main.tf line 5, in module "gke": │ 5: name = var.gcp_cluster_name │ │ An input variable with the name "gcp_cluster_name" has not been declared. Did you mean "gke_cluster_name"? ╵ ╷ │ Error: Reference to undeclared input variable │ │ on main.tf line 7, in module "gke": │ 7: regional = var.gke_regional │ │ An input variable with the name "gke_regional" has not been declared. Did you mean "gcp_regional"? i do and apply the same thing you did but i can't fix this error.

[@Furkan-gh2wl]

@@CODEMENTAL Error: Reference to undeclared resource │ │ on providers.tf line 9, in provider "kubernetes": │ 9: token = data.google_client_config.default.access_token │ │ A data resource "google_client_config" "default" has not been declared in the root module. ╵ and this error sir.thank you

[@CODEMENTAL]

You need to create the tfvars file, in the video I show how to do that. Also make sure you have downloaded the json with the credentials for gcp

[@siddharthnaik6621]

very nice video but can u pls provide code for the benefit of users . there are multiple requests . Thanks in advance !!

[@arunthokade3158]

great work but provide the source code... make the code publicly available. if i want to copy it i cant.