Fleet

As explained in Google Anthos in Action

A fleet is a Google Cloud logical grouping of clusters and other resources for centralized multicluster management, policy application, and trust relationships.

A fleet is a Google Cloud logical grouping of clusters and other resources for multicluster management, consistent policy application, security boundaries, and higher-trust relationships between member clusters. section 2.3.1

Use fleet membership to:

• Build one-to-many administration relationships that reduce repeated security and access configuration. section 2.3.1
• Manage traffic between clusters and join their service meshes through a shared trust relationship. section 2.3.1
• Account for sameness: clusters, namespaces, services, and identities may require unique names across the fleet. section 2.3.1
• Keep security-separated systems in distinct fleets, accepting outside-the-cluster networking for shared services. section 2.3.1

Viewing a fleet in Anthos

The Anthos UI at the Google Cloud project level lists clusters registered to that project’s fleets. A cluster view exposes location, type, labels, warnings, Kubernetes version, available CPU and memory, and enabled features. An example fleet contains GKE, bare-metal, and Azure AKS clusters. section 2.4 section 2.4.4

Figure 2.1 Example of fleet merging causing security problems

Use the fleet-merging diagram to examine how combining security-separated clusters can create additional attack vectors. section 2.3.1

How Google Anthos in Action covers it

How deep it goes

Defines membership, trust, naming sameness, and security trade-offs but stops short of fleet creation or configuration procedures.

Examples

Shows GKE, bare-metal, and Azure AKS clusters in one fleet and illustrates security risks from fleet merging.

What you can do after

Operate fleet membership and inspect heterogeneous clusters through the Anthos UI in Google Cloud.

How it connects

Connects multicluster management with Anthos, the Connect framework, service mesh, namespaces, identities, and outside-the-cluster networking.

liveBookmanning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Related concepts

• Kubernetes clusterhas part · A Kubernetes cluster is a set of control-plane and worker machines managed by Kubernetes to run and coordinate workloads and services.
• Cloud Service Meshused by · Cloud Service Mesh is Google's managed service mesh for controlling, securing, and observing communication among distributed services, formerly known as Anthos Service Mesh.
• Google Distributed Cloud Edgeused by · Google Distributed Cloud Edge is a fully managed Google solution that delivers hardware, operating systems, and software for telco network functions and edge applications at customer locations.
• cluster nodehas part · A cluster node is an individual physical or virtual machine that participates in a distributed cluster and provides computing resources or services.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.