Google Kubernetes Engine
Create, inspect, update and delete GKE clusters and node pools — the full Container API v1 surface (Google OAuth2).
OCNORA ships 38 typed Google Kubernetes Engine operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run.
Before you connect Google Kubernetes Engine
- Authentication
- OAuth 2.0
- Credential
- {"client_id", "client_secret", "refresh_token"}
- Connection test
- Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.
What you can do with Google Kubernetes Engine
Operations, grouped by what they do to your data.
Create and send 3
Read and search 13
Update 14
Delete and cancel 3
A sample Google Kubernetes Engine workflow
- 1A core triggerStart the run from a chat, form, manual, schedule, webhook, workflow trigger — no Google Kubernetes Engine trigger is needed.
- 2Check Autopilot Compatibilitygke.check_autopilot_compatibilityList the incompatibilities that would block migrating this Standard cluster to Autopilot.
- 3Cancel Operationgke.cancel_operationCancel a running GKE operation. Cancellation is best-effort — some operations cannot be stopped once started.
An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.
Every node below has a reference page: what it does, the connection it needs, its config fields with types, constraints and examples, and the shapes it emits.
Operations 38
- Cancel OperationCancel a running GKE operation. Cancellation is best-effort — some operations cannot be stopped once started.gke.cancel_operation
- Check Autopilot CompatibilityList the incompatibilities that would block migrating this Standard cluster to Autopilot.gke.check_autopilot_compatibility
- Complete Control Plane UpgradeFinish a control-plane upgrade that is paused waiting on a maintenance exclusion.gke.complete_control_plane_upgrade
- Complete IP RotationFinish an IP rotation started with gke.start_ip_rotation, retiring the old control-plane IP.gke.complete_ip_rotation
- Complete Node Pool UpgradeFinish a blue-green node-pool upgrade that is waiting on the soak period, retiring the old nodes.gke.complete_node_pool_upgrade
- Create ClusterCreate a GKE cluster. Returns the operation — the cluster builds asynchronously, so poll gke.get_operation if a later step needs it RUNNING. The fields below cover the common case; cluster_json takes a full Cluster resource and wins over all of them.gke.create_cluster
- Create Node PoolAdd a node pool to an existing cluster. Returns the operation — the nodes come up asynchronously. The fields below cover the common case; node_pool_json takes a full NodePool resource and wins over all of them.gke.create_node_pool
- Delete ClusterDelete a cluster and every node in it. Returns the operation — deletion continues afterwards.gke.delete_cluster
- Delete Node PoolDelete a node pool and its nodes. Returns the operation — deletion continues afterwards.gke.delete_node_pool
- Fetch Cluster Upgrade InfoRead the upgrade targets, release channel and end-of-life dates for a cluster's control plane.gke.fetch_cluster_upgrade_info
- Fetch Node Pool Upgrade InfoRead the upgrade targets and end-of-life dates for one node pool.gke.fetch_node_pool_upgrade_info
- Get ClusterFetch one GKE cluster (full resource).gke.get_cluster
- Get Cluster JWKSRead the cluster's public JWKS so a workflow can verify tokens its workloads issued. Requires the cluster's OIDC issuer — i.e. Workload Identity — to be enabled; without it GKE answers 400 INVALID_ARGUMENT rather than saying what is missing. Google serves this endpoint without authentication.gke.get_jwks
- Get Node PoolRead one node pool's full configuration, including its node config, autoscaling and management settings.gke.get_node_pool
- Get OpenID ConfigurationRead the cluster's OIDC discovery document (issuer, JWKS URI, supported claims). Requires the cluster's OIDC issuer — i.e. Workload Identity — to be enabled; without it GKE answers 400 INVALID_ARGUMENT rather than saying what is missing. Google serves this endpoint without authentication.gke.get_openid_config
- Get OperationPoll a GKE operation so a workflow can wait for a cluster or node-pool change to finish.gke.get_operation
- Get Server ConfigRead the cluster and node versions GKE will accept in this location, the defaults, and the release channels.gke.get_server_config
- List ClustersList GKE clusters in a location ("-" for all locations).gke.list_clusters
- List Node PoolsList the node pools of a GKE cluster.gke.list_node_pools
- List OperationsList GKE operations in a location ("-" for all locations).gke.list_operations
- List Usable SubnetworksList the subnetworks this caller is allowed to create a cluster in, across the whole project (including shared-VPC host projects).gke.list_usable_subnetworks
- Roll Back Node Pool UpgradeRoll back a previously failed or partly-completed node-pool upgrade.gke.rollback_node_pool_upgrade
- Set AddonsEnable or disable cluster addons (HTTP load balancing, DNS cache, Config Connector, GCE persistent-disk CSI driver…).gke.set_addons
- Set Legacy ABACEnable or disable the legacy ABAC authorizer. Kubernetes RBAC is the modern replacement; enabling ABAC widens access.gke.set_legacy_abac
- Set Node LocationsSet the zones the cluster's nodes run in. Adding a zone creates nodes there; removing one deletes them.gke.set_locations
- Set Logging ServiceChoose where the cluster sends logs, or turn logging off.gke.set_logging_service
- Set Maintenance PolicySet the maintenance window and exclusions that govern when GKE may upgrade this cluster. An empty object clears the policy.gke.set_maintenance_policy
- Set Master AuthRotate the control-plane credentials. Basic auth and client certificates are disabled on modern clusters — prefer IAM.gke.set_master_auth
- Set Monitoring ServiceChoose where the cluster sends metrics, or turn monitoring off.gke.set_monitoring_service
- Set Network PolicyEnable or disable the network-policy provider (Calico) that enforces Kubernetes NetworkPolicy objects.gke.set_network_policy
- Set Node Pool AutoscalingTurn cluster autoscaling on or off for one node pool, and set its bounds.gke.set_node_pool_autoscaling
- Set Node Pool ManagementSet auto-upgrade and auto-repair for one node pool.gke.set_node_pool_management
- Set Node Pool SizeResize a GKE node pool to a fixed node count; returns the operation.gke.set_node_pool_size
- Set Resource LabelsReplace the cluster's labels. The API needs the current fingerprint for optimistic locking; this node reads it for you when you do not supply one.gke.set_resource_labels
- Start IP RotationBegin rotating the control-plane IP (and optionally its credentials). Every node must then be updated, and the rotation finished with gke.complete_ip_rotation.gke.start_ip_rotation
- Update ClusterApply a ClusterUpdate. The API accepts one desired* field per call, so change one thing at a time.gke.update_cluster
- Upgrade Control PlaneUpgrade the control plane to a specific version, or "-" for the default of the cluster's release channel.gke.update_master
- Update Node PoolUpdate a node pool — its node version, image type, tags, labels, taints or upgrade settings. This is what upgrades the nodes.gke.update_node_pool
Google Kubernetes Engine questions
- How does OCNORA authenticate with Google Kubernetes Engine?
- With a stored OAuth 2.0 credential, shaped {"client_id", "client_secret", "refresh_token"}. A connection test can check it when you add it.
- What can I automate with Google Kubernetes Engine?
- 38 typed operations, each with a reference page listing its config fields and the shapes it emits.
- What if the Google Kubernetes Engine operation I need is not listed?
- Where Google Kubernetes Engine has an HTTP API, call it from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
- Are there templates that use Google Kubernetes Engine?
- Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
- How are Google Kubernetes Engine calls controlled?
- Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.
See your first Google Kubernetes Engine workflow run.
Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.