|
| 1 | +// Module included in the following assemblies: |
| 2 | +// |
| 3 | +// * osd_planning/gcp-ccs.adoc |
| 4 | + |
| 5 | +[id="ccs-gcp-provisioned_{context}"] |
| 6 | += Provisioned GCP Infrastructure |
| 7 | + |
| 8 | +This is an overview of the provisioned Google Cloud Platform (GCP) components on a deployed {product-title} cluster. For a more detailed listing of all provisioned GCP components, see the link:https://access.redhat.com/documentation/en-us/openshift_container_platform/[{OCP} documentation]. |
| 9 | + |
| 10 | +[id="gcp-policy-instances_{context}"] |
| 11 | +== Compute instances |
| 12 | + |
| 13 | +GCP compute instances are required to deploy the control plane and data plane functions of {product-title} in GCP. Instance types might vary for control plane and infrastructure nodes depending on worker node count. |
| 14 | + |
| 15 | +* Single availability zone |
| 16 | +** 2 infra nodes (custom machine type: 4 vCPU and 32 GB RAM) |
| 17 | +** 3 control plane nodes (custom machine type: 8 vCPU and 32 GB RAM) |
| 18 | +** 2 worker nodes (custom machine type: 4 vCPU and 16 GB RAM) |
| 19 | +* Multiple availability zones |
| 20 | +** 3 infra nodes (custom machine type: 4 vCPU and 32 GB RAM) |
| 21 | +** 3 control plane nodes (custom machine type: 8 vCPU and 32 GB RAM) |
| 22 | +** 3 worker nodes (custom machine type: 4 vCPU and 16 GB RAM) |
| 23 | + |
| 24 | + |
| 25 | +[id="gcp-policy-storage_{context}"] |
| 26 | +== Storage |
| 27 | + |
| 28 | +* Infrastructure volumes: |
| 29 | +** 128 GB SSD persistent disk (deleted on instance deletion) |
| 30 | +** 110 GB Standard persistent disk (kept on instance deletion) |
| 31 | +* Worker volumes: |
| 32 | +** 128 GB SSD persistent disk (deleted on instance deletion) |
| 33 | +* Control plane volumes: |
| 34 | +** 128 GB SSD persistent disk (deleted on instance deletion) |
| 35 | + |
| 36 | +[id="gcp-policy-vpc_{context}"] |
| 37 | +== VPC |
| 38 | + |
| 39 | +* **Subnets:** One master subnet for the control plane workloads and one worker subnet for all others. |
| 40 | +* **Router tables:** One global route table per VPC. |
| 41 | +* **Internet gateways:** One internet gateway per cluster. |
| 42 | +* **NAT gateways:** One master NAT gateway and one worker NAT gateway per cluster. |
| 43 | + |
| 44 | +[id="gcp-policy-services_{context}"] |
| 45 | +== Services |
| 46 | + |
| 47 | +The following services must be enabled on a GCP CCS cluster: |
| 48 | + |
| 49 | +* `Deploymentmanager` |
| 50 | +* `Compute` |
| 51 | +* `Cloudapis` |
| 52 | +* `Cloudresourcemanager` |
| 53 | +* `DNS` |
| 54 | +* `Iamcredentials` |
| 55 | +* `IAM` |
| 56 | +* `Servicemanagement` |
| 57 | +* `Serviceusage` |
| 58 | +* `Storage-api` |
| 59 | +* `Storage-component` |
| 60 | + |
| 61 | +[id="gcp-policy-permissions_{context}"] |
| 62 | +== Permissions |
| 63 | + |
| 64 | +The following roles must be added to the support service account: |
| 65 | + |
| 66 | +* `Compute.admin` |
| 67 | +* `Dns.admin` |
| 68 | +* `orgpolicy.policyViewer` |
| 69 | +* `Owner` |
| 70 | +* `resourcemanager.projectIamAdmin` |
| 71 | +* `Servicemanagement.admin` |
| 72 | +* `serviceusage.serviceUsageAdmin` |
| 73 | +* `storage.admin` |
0 commit comments