Checklist

Before setting up the Control Plane and Data Plane, please ensure that you have the necessary GCP permissions. Otherwise, you will not be able to complete your setup without errors.

Prerequisites

The following tools are needed to setup a DevZero Control Plane hosted on GKE:

You need a GCP account to host the DevZero Control Plane on GKE. If you don't have one, you can create a new account here. Go to the IAM Admin of your GCP account and attach the following roles to your user:

Project IAM Admin
Role Administrator

GCP Initial Permissions

Required API in GCP

These are the APIs that needs to be enabled in your GCP account:

Enable Kubernetes Engine API

Enable the Kubernetes Engine API from here.

GCP K8S API

Enable Cloud Key Management Service (KMS) API

Enable the KMS API from here.

GCP KMS API

Enable Filestore API

Enable the Filestore API from here.

GCP Filestore API

Enable Compute Engine API

Enable the Compute Engine API from here.

GCP Compute API

Required Permissions in GCP

Follow these steps to check the required permissions and add them to your user if they are missing:

Run the permissions Script

git clone https://github.com/devzero-inc/self-hosted-tf.git
cd self-hosted-tf/examples/gcp
./permissions.sh

Approve the Role created by the script

Note: Skip this step if you already have the required permissions.

The script creates a role and ask to attach it to your GCP user. approve it to attach the role.

GCP Permissions Script

Verify the permissions

Verify all the permissions are attached to your user by running the script again.

GCP Verify Permissions

Checklist

On this page