Good day and welcome to the community!
You may create a dashboard to monitor your GKE workload or service account by using Google Cloud's Workload Identity[1] or Kubernetes service accounts[2]. To create a Kubernetes service account, you can follow the steps below:
- Configure kubectl to communicate with your cluster:
gcloud container clusters get-credentials [CLUSTER_NAME] --zone [ZONE] --project [PROJECT_ID]
- Create a Kubernetes service account:
kubectl create serviceaccount [SERVICE_ACCOUNT_NAME]
- Bind the Kubernetes service account to an IAM role:
kubectl create rolebinding [ROLE_BINDING_NAME] --clusterrole=[CLUSTER_ROLE_NAME] --serviceaccount=[NAMESPACE]:[SERVICE_ACCOUNT_NAME]
You can then use the Kubernetes service account credentials in applications running on GKE clusters[3]. You may create a Kubernetes dashboard on a GKE cluster using Terraform. Try to deploy a 2-node separately managed node pool GKE cluster using Terraform and configure kubectl using Terraform output to deploy a Kubernetes dashboard on the cluster.
You can use the google_monitoring_dashboard resource in Terraform to create a dashboard for monitoring your GKE workloads.
You can use the google_container_cluster resource in Terraform to create a GKE cluster.
Hope this helps.
[1] Use Workload Identity | Google Kubernetes Engine (GKE) - Google Cloud. https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity.
[2] Use Kubernetes service accounts | Google Kubernetes Engine (GKE .... https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts.
[3] Authenticate to Google Cloud using a service account. https://cloud.google.com/kubernetes-engine/docs/tutorials/authenticating-to-cloud-platform.
LinkedIn
Twitter
