Skip to main content

astroctl cloud gcp selfHosted setup

Create GCP resources and auto-store credentials in vault

Synopsis​

Create the GCP resources needed for a self-hosted Kubernetes cluster, then automatically store the generated credentials in the platform vault.

After setup completes, your cluster YAML uses vault credentials:

  provisioner:
    type: selfHosted
    selfHosted:
      accountId: "<your-project-id>"
      bucketName: "<auto-generated>"
      credentials:
        type: vault

Resources created:

  - Dedicated service account with 8 IAM roles
  - 5 required GCP APIs enabled
  - GCS bucket for cluster state
  - Service account key (auto-stored in vault)

Requires gcloud CLI to be installed and authenticated.

astroctl cloud gcp selfHosted setup [flags]

Examples​

  # One-shot setup — creates everything and stores credentials in vault
  astroctl cloud gcp selfHosted setup --project-id my-proj --region us-central1 \
      --cluster-name prod

  # Review gcloud commands before executing
  astroctl cloud gcp selfHosted setup --project-id my-proj --region us-central1 \
      --cluster-name prod

Options​

      --cluster-name string   Cluster name (used for resource naming and vault storage) (required)
  -h, --help                  help for setup
      --project-id string     GCP project ID (required)
      --region string         GCP region (e.g., us-central1) (required)

Options inherited from parent commands​

  -o, --output string   Output format (json|yaml) (default "yaml")

SEE ALSO​