End-to-End Process for Deploying Threat Defense Virtual Cluster in GCP
Template-based Deployment
The following flowchart illustrates the workflow for template-based deployment of the Threat Defense Virtual cluster on GCP.
Workspace |
Steps |
|
---|---|---|
Local Host | Download templates and files from GitHub. | |
Local Host | Edit template parameters. | |
Google Cloud Platform | Create GCP bucket. | |
Local Host | Create Google Cloud function source archive file ftdv_cluster_function.zip. | |
Google Cloud Platform | Upload the Google function source archive file. | |
Google Cloud Platform | Deploy infrastructure.yaml. | |
Google Cloud Platform | If private IP addresses are used, create VPC connector. | |
Google Cloud Platform | If external IP addresses are used, set deployWithExternalIP to True in cluster_function_infra.yaml. | |
Google Cloud Platform | Deploy cluster function infrastructure template. | |
Google Cloud Platform | Deploy cluster. |
Manual Deployment
The following flowchart illustrates the workflow for manual deployment of the Threat Defense Virtual cluster on GCP.
Workspace |
Steps |
|
---|---|---|
Local Host | Create day 0 configuration script. | |
Google Cloud Platform | Create instance template using day 0 configuration. | |
Google Cloud Platform | Configure the interfaces. | |
Google Cloud Platform | Create instance group and attach instance template. | |
Google Cloud Platform | Create NLB and attach to instance group. | |
Google Cloud Platform | Create firewall rules for NLB. | |
Management Center | Create access rules for health check traffic. | |
Management Center | Add control node. |