If you have successfully set up Google Cloud SDK and performed the necessary Cloud SDK Initialization
To initiate authentication, execute:
gcloud auth application-default login
This action will direct you to:
A unique URL will open in your browser:
https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=000000000000-abcdefghijklmnopqrstuvwxyz.apps.googleusercontent.com&redirect_uri=http%3A%2F%2Flocalhost%3A8085%2F&scope=openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud......
Credentials saved to file: [/Users/$HOME/.config/gcloud/application_default_credentials.json]
These credentials can be utilized by any library requesting Application Default Credentials (ADC).
/Users/$HOME/.bin/google-cloud-sdk/lib/third_party/google/auth/_default.py:69: UserWarning: Your application has authenticated with end user credentials from Google Cloud SDK without a quota project. This may lead to "quota exceeded" or "API not enabled" errors. It is recommended to run `gcloud auth application-default login` again and confirm that a quota project is added. Alternatively, service accounts can be used instead. For more details on service accounts, visit https://cloud.google.com/docs/authentication/
warnings.warn(_CLOUD_SDK_CREDENTIALS_WARNING)
A Quota project named "<PROJECT_NAME>" has been associated with ADC, which can be accessed by Google client libraries for billing and quota purposes. Note that some services may still bill the project owning the resource.
Next, Execute: pulumi preview
It seems like the zone: feature is now outdated, the provided configuration works correctly:
const cluster = new gcp.container.Cluster("cluster", {
initialNodeCount: 1,
loggingService: "logging.googleapis.com/kubernetes",
monitoringService: "monitoring.googleapis.com/kubernetes",
removeDefaultNodePool: true,
enableLegacyAbac: false,
enableBinaryAuthorization: true,
addonsConfig: {
horizontalPodAutoscaling: {
disabled: false,
},
istioConfig: {
disabled: false,
auth: "AUTH_MUTUAL_TLS",
},
cloudrunConfig: {
disabled: true
}
},
}, {
customTimeouts: {
create: "30m",
update: "30m",
delete: "30m"
}
});