This guide provides details on configuring your GCP project so that the Valtix Controller can manage your GCP project. The guide assumes that you already have a project created and have permissions to create VPCs, subnets and service account.
Overview of Steps¶
- Create two (2) service accounts
- Enable APIs (Compute Engine and Secret Manager)
- Create two (2) VPCs (managment and datapath)
- In both the VPC's, create one(1) subnet in each of the regions where Valtix Gateways are required
- Create firewall rules to allow traffic to the Valtix Gateway (app traffic) in the datapath VPC
- Create firewall rules to allow management traffic from Valtix Gateway to the Valtix Controller in the management VPC
These actions can be executed using the GCP Cloud Console Web UI, or using the gcloud CLI. If your computer is not configured for GCP CLI access , then you can use the command line shell from the GCP Cloud Console.
A shell script that covers all the above steps with default service account options is available with onboarding instructions here
To perform these steps manually or if you cannot run the scripted setup mentioned above, follow the steps in the next pages.