liveBook · Manning

GCP project

As explained in Google Anthos in Action

A Google Cloud project is an administrative container that holds configuration settings, resources, and access controls for applications using Google Cloud services.

A GCP project is an administrative boundary for configuration settings, Google Cloud resources, APIs, service accounts, and access controls. It also provides the project-level context for attached clusters and selected Anthos capabilities. section 2.8 section 2.3.2

Use the project to organize and govern cloud-connected services:

  • Host a Service Catalog and control catalog visibility and deployment rights alongside organization- and folder-level permissions. section 14.1.2
  • Enable the APIs required by deployments and create distinct service accounts with narrowly assigned IAM roles. section 17.3.5
  • Control whether users can view the project and use Google Cloud connectivity to attached clusters. section 2.3.2

Anthos on bare metal deployment

Before deployment, associate the cluster with a suitable project, enable the required Anthos, IAM, monitoring, logging, and connectivity APIs, and prepare separate service accounts for registration, connection, and operations telemetry. Missing APIs are caught by the preflight check. section 17.3.5

Figure 14.6 Accessing the Service Catalog
14-06

Use the Cloud console’s Tools menu to access Service Catalog, create private marketplaces, add applications, and configure project-level access rights. section 14.1.2

How Google Anthos in Action covers it

How deep it goes
Defines the boundary, then details API enablement, service accounts, IAM roles, and project visibility for Anthos deployments.
Examples
Uses private marketplaces, attached clusters, required APIs, and separated service accounts as operational examples.
What it assumes
Assumes familiarity with Google Cloud IAM and Kubernetes clusters while identifying required APIs, accounts, and roles.
What you can do after
Operate/configure cloud-connected deployments by preparing APIs, service accounts, IAM roles, catalogs, and cluster access.
How it connects
Connects Google Cloud projects with IAM, Service Catalog, Anthos, Kubernetes clusters, APIs, service accounts, and RBAC.

Also explained in

Compare how 3 books explain GCP project →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.