Getting Started > Installing Gremlin on GKE Autopilot

Installing Gremlin on GKE Autopilot

Supported platforms:

Gremlin supports GKE Autopilot using the standard Kubernetes agent. The Gremlin Helm Chart is the recommended way to install the agent, but you can also install it manually.

In addition to the agent, you’ll also need to install our allowlist in your cluster. This grants the Gremlin agent permission to access the required Linux capabilities.

Note

Enabling the AllowlistSynchronizer on GKE Autopilot disables the ability to use kubectl exec in impacted pods. This restriction is part of GKE’s security controls for partner applications and is designed to prevent direct access to the runtime environment.

To install Gremlin to a GKE Autopilot cluster:

Copy the YAML below to a file and save it.
Deploy the manifest to your cluster, e.g. using kubectl apply -f gremlin-allowlist.yaml. Wait until the synchronizer reports a Ready status.
1. You can monitor its progress using the command kubectl wait --for=condition=Ready allowlistsynchronizer/gremlin.
Install, authenticate, and configure the Gremlin agent using either the Helm instructions (recommended) or the manual Kubernetes installation instructions.

YAML


apiVersion: auto.gke.io/v1
kind: AllowlistSynchronizer
metadata:
  name: gremlin
spec:
  allowlistPaths:
    - Gremlin/agent/v1.0.0/*

‍

Troubleshooting

If you’re having trouble deploying the allowlist, please check the Google Cloud documentation first. If you continue to experience problems, contact us.

‍

Privileges Required

Privilege	Description
CLIENTS_READ	Allows reading all client information within the team
CLIENTS_WRITE	Allows editing all client information within the team
TEAM_SECURITY_READ	Allows reading of team related credential information