GKE cluster

Reference shape for a Dirigible GKE cluster.

Autopilot

For a managed-node-pool experience, GKE Autopilot is the simplest fit:

gcloud container clusters create-auto dirigible \
    --region europe-west3 \
    --release-channel regular

Standard cluster

If you need explicit node-pool control:

gcloud container clusters create dirigible \
    --region europe-west3 \
    --release-channel regular \
    --machine-type e2-standard-4 \
    --num-nodes 3 \
    --workload-pool=$PROJECT.svc.id.goog \
    --enable-ip-alias \
    --enable-shielded-nodes

Workload Identity

Enable Workload Identity (above) so the platform pod (or any addon like external-dns, cert-manager) can call GCP APIs without static service-account keys.

See also

• GKE install
• GCP DNS Zone
• Let's Encrypt addon