Skip to content

Commit f2901d8

Browse files
OSDOCS-13735:adding new DNS module
1 parent b1e596b commit f2901d8

File tree

2 files changed

+59
-0
lines changed

2 files changed

+59
-0
lines changed

installing/installing_gcp/installing-gcp-customizations.adoc

+6
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,12 @@ include::modules/installation-gcp-enabling-shielded-vms.adoc[leveloffset=+2]
4848

4949
include::modules/installation-gcp-enabling-confidential-vms.adoc[leveloffset=+2]
5050

51+
include::modules/installation-gcp-managing-dns-solution.adoc[leveloffset=+2]
52+
53+
[role="_additional-resources"]
54+
.Additional resources
55+
* xref:../../installing/installing_gcp/installation-config-parameters-gcp.adoc#installation-configuration-parameters-additional-gcp_installation-config-parameters-gcp[Installation configuration parameters for GCP]
56+
5157
include::modules/installation-gcp-config-yaml.adoc[leveloffset=+2]
5258

5359
[role="_additional-resources"]
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
2+
:_mod-docs-content-type: PROCEDURE
3+
[id="installation-gcp-managing-DNS-solution_{context}"]
4+
= Managing your own DNS
5+
6+
You can use Confidential VMs when installing your cluster. Confidential VMs encrypt data while it is being processed. For more information, see Google's documentation on link:https://cloud.google.com/confidential-computing[Confidential Computing]. You can enable Confidential VMs and Shielded VMs at the same time, although they are not dependent on each other.
7+
8+
[NOTE]
9+
====
10+
Confidential VMs are currently not supported on 64-bit ARM architectures.
11+
====
12+
13+
.Procedure
14+
15+
* Use a text editor to edit the `install-config.yaml` file prior to deploying your cluster and add one of the following stanzas:
16+
.. To use confidential VMs for only control plane machines:
17+
+
18+
[source,yaml]
19+
----
20+
controlPlane:
21+
platform:
22+
gcp:
23+
confidentialCompute: Enabled <1>
24+
type: n2d-standard-8 <2>
25+
onHostMaintenance: Terminate <3>
26+
----
27+
<1> Enable confidential VMs.
28+
<2> Specify a machine type that supports Confidential VMs. Confidential VMs require the N2D or C2D series of machine types. For more information on supported machine types, see link:https://cloud.google.com/compute/confidential-vm/docs/os-and-machine-type#machine-type[Supported operating systems and machine types].
29+
<3> Specify the behavior of the VM during a host maintenance event, such as a hardware or software update. For a machine that uses Confidential VM, this value must be set to `Terminate`, which stops the VM. Confidential VMs do not support live VM migration.
30+
+
31+
.. To use confidential VMs for only compute machines:
32+
+
33+
[source,yaml]
34+
----
35+
compute:
36+
- platform:
37+
gcp:
38+
confidentialCompute: Enabled
39+
type: n2d-standard-8
40+
onHostMaintenance: Terminate
41+
----
42+
+
43+
.. To use confidential VMs for all machines:
44+
+
45+
[source,yaml]
46+
----
47+
platform:
48+
gcp:
49+
defaultMachinePlatform:
50+
confidentialCompute: Enabled
51+
type: n2d-standard-8
52+
onHostMaintenance: Terminate
53+
----

0 commit comments

Comments
 (0)