HOWTO: Provision a GCP Operations Runner¶
GCP-side operations runners execute automation jobs that need direct access to GCP resources — Cloud SQL management, GKE cluster operations, GSM secret reads — without routing through on-prem. This HOWTO covers provisioning a Jenkins agent in a GCP compute instance using the HybridOps infra module, wiring it to the Jenkins controller via the VPN tunnel, and validating that it can run HybridOps GCP-target modules from a pipeline. The GCP runner is the execution anchor for the Cloud SQL DR lane.
What this covers:
- GCP Jenkins agent provisioning via the HybridOps infra module with controller registration over VPN
- Workload Identity configuration for GCP API access without static service account keys
- Test pipeline execution: Cloud SQL health check and GSM secret read from a GCP-resident runner