This topic describes the steps required to create service accounts for VMware Tanzu Kubernetes Grid Integrated Edition on Google Cloud Platform (GCP).
In order for Kubernetes to create load balancers and attach persistent disks to pods, you must create service accounts with sufficient permissions.
You need separate service accounts for Kubernetes cluster control plane and worker node VMs. VMware recommends configuring each service account with the least permissive privileges and unique credentials.
To create a load balancer in GCP, follow the instructions in Creating a GCP Load Balancer for the TKGI API.