Usage:
- Deploy a GKE cluster with:
- Workload Identity enabled
- Node Pools SA with following IAM roles:
- roles/compute.networkAdmin (includes compute.firewalls.* permissions)
- roles/compute.instanceAdmin.v1
- roles/container.defaultNodeServiceAccount
PROJECT_ID=projectid ./scripts/create-test-cluster.sh- Setup SA bindings for Workload Identity:
PROJECT_ID=projectid ./scripts/setup-workload-identity.sh- Deploy CLM components:
helm upgrade --install castai-live castai-helm/castai-live --namespace castai-live --create-namespace --set imageRegistry=europe-central2-docker.pkg.dev/sada-castai-live-collab/live/adamp --set daemon.image.tag=latest --set controller.image.tag=latest- Deploy GCP CNI with IP Migration enabled:
make docker-build-all docker-push-all helm-install