1. Prepare the prerequisites
Before reserving an address or creating a VM, confirm who can provision resources, who owns network policy, and who will run Open EPM. Work through these checks with those operators.
- Google Cloud ARM instance gives the machine and storage example and the billing, quota and network checks.
- Domain and HTTPS origins identifies the hostnames, DNS control and TLS inputs to prepare for the intended gateway.
- OIDC identity provider explains which issuer, audiences and initial operator identity the chosen distribution uses.
- Local tools and permissions lists what the workstation, project administrator and VM operator each need.
Continue to cloud provisioning after the project and subnet are approved and you know which deployment checkpoints you can complete.
In this section
- 1.1 Google Cloud ARM instanceCheck ARM64 machine availability, quota, disk sizing and the packaged guest-encryption requirement.
- 1.2 Domain and HTTPS originsPlan the approved HTTPS origins, DNS ownership and certificates for the selected profile.
- 1.3 OIDC identity providerMatch the issuer, signing keys, distinct audiences and initial operator to the deployment profile.
- 1.4 Local tools and permissionsIdentify the Cloud SDK, IAP and OS Login permissions, VM tools and release verification inputs.