Deploy Kubernetes Agent on Google Cloud GKE

In this tutorial, the fcli command line tool will be downloaded and executed in Google Cloud Shell for deployment of the Kubernetes agent .

Steps to Deploy Kubernetes Agent on Google Cloud GKE - Part 1

1. In Google Cloud console, click on the Cloud Shell button to launch Google Cloud Shell.



2. In Google Cloud Shell command line, type kubectl to enter Kubernetes command line tool to access the Kuberentes cluster.
3. Download the fcli command line tool: wget https://forticwp-kubernetes-agent.s3.amazonaws.com/linux/fcli



4. Change the permission of the fcli command line tool: chmod +x fcli

Steps to Deploy Kubernetes Agent on Google Cloud GKE - Part 2

1. There are two methods to deploy the Kubernetes agent controller. The first method of deployment is execute the fcli command tool in one command while the second method splits the command into multiple consecutive commands.
   1. Execute the deploy command as shown from Add Kubernetes Cluster page on kubectl command line:

   ./fcli deploy kubernetes --token <AccessToken> --region <Region>

   

   2. Execute the deploy command separately:
      1. fcli config <Token> Note: The token provided from Add Kubernetes Cluster page.
      2. When prompt for region, enter "global" for non-European region, and "eu" for European region.
      3. fcli deploy kubernetes

      

2. If the fcli command was executed successfully, run the command below to verify it:

kubectl get pods -n fortinet

3. A successful deployment should look like below with all worker nodes, controller, and scanner in Running status.

Note: Make sure the scanner node has enough space to pull and scan images before deploying the Kubernetes Agent pods. To prevent the Kubernetes Agent pods from being deployed on nodes that are not ready, use the following command: kubectl taint nodes <node name> node.kubernetes.io/not-ready:NoSchedule Example: kubectl taint nodes ip-192-168-51-200.eu-central-1.compute.internal node.kubernetes.io/not-ready:NoSchedule