# Install Google Cloud SDK
curl https://sdk.cloud.google.com | bash
exec -l $SHELL

# Initialize
gcloud init
gcloud auth login

# Install kubectl
gcloud components install kubectl

# Install gke-gcloud-auth-plugin
gcloud components install gke-gcloud-auth-plugin

# Create cluster
gcloud container clusters create my-cluster \
  --zone us-central1-a \
  --num-nodes 3 \
  --machine-type n1-standard-1

# Get credentials
gcloud container clusters get-credentials my-cluster --zone us-central1-a

# Verify
kubectl cluster-info

gcloud container clusters create prod-cluster \
  --zone us-central1-a \
  --num-nodes 3 \
  --machine-type n2-standard-4 \
  --enable-vertical-pod-autoscaling \
  --enable-autorepair \
  --enable-autoupgrade \
  --enable-ip-alias \
  --enable-stackdriver-kubernetes \
  --logging=SYSTEM,WORKLOAD \
  --monitoring=SYSTEM,WORKLOAD \
  --enable-network-policy

# Create node pool
gcloud container node-pools create gpu-pool \
  --cluster my-cluster \
  --zone us-central1-a \
  --machine-type n1-standard-4 \
  --accelerator type=nvidia-tesla-k80,count=1

# Scale node pool
gcloud container clusters update my-cluster \
  --enable-autoscaling \
  --min-nodes 1 \
  --max-nodes 10 \
  --zone us-central1-a

# List node pools
gcloud container node-pools list --cluster my-cluster --zone us-central1-a

# Delete node pool
gcloud container node-pools delete default-pool \
  --cluster my-cluster --zone us-central1-a

# Create VPC
gcloud compute networks create my-vpc --subnet-mode=custom

# Create subnet
gcloud compute networks subnets create my-subnet \
  --network=my-vpc \
  --region=us-central1 \
  --range=10.0.0.0/20

# Create cluster on custom VPC
gcloud container clusters create my-cluster \
  --network=my-vpc \
  --subnetwork=my-subnet \
  --zone=us-central1-a

# Automatic load balancer with service
kubectl apply -f - <<EOF
apiVersion: v1
kind: Service
metadata:
  name: web-lb
spec:
  type: LoadBalancer
  selector:
    app: web
  ports:
  - port: 80
    targetPort: 3000
EOF

# Get load balancer IP
kubectl get service web-lb

# Create service account
gcloud iam service-accounts create my-app-sa

# Create Kubernetes service account
kubectl create serviceaccount my-app

# Bind Kubernetes SA to GCP SA
gcloud iam service-accounts add-iam-policy-binding \
  my-app-sa@PROJECT_ID.iam.gserviceaccount.com \
  --role roles/iam.workloadIdentityUser \
  --member "serviceAccount:PROJECT_ID.svc.id.goog[default/my-app]"

# Annotate Kubernetes SA
kubectl annotate serviceaccount my-app \
  iam.gke.io/gcp-service-account=my-app-sa@PROJECT_ID.iam.gserviceaccount.com

apiVersion: v1
kind: Pod
metadata:
  name: my-app
spec:
  serviceAccountName: my-app
  containers:
  - name: app
    image: my-app:1.0

# Create persistent disk
gcloud compute disks create my-disk \
  --size=100GB \
  --zone=us-central1-a

# Create PVC
kubectl apply -f - <<EOF
apiVersion: v1
kind: PersistentVolume
metadata:
  name: gcp-disk
spec:
  capacity:
    storage: 100Gi
  accessModes:
  - ReadWriteOnce
  gcePersistentDisk:
    pdName: my-disk
EOF

# Create Filestore instance
gcloud filestore instances create my-filestore \
  --zone=us-central1-a \
  --tier=standard \
  --file-share name=share,capacity=1TB

# Mount in pod
kubectl apply -f - <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: nfs-pod
spec:
  containers:
  - name: app
    image: my-app:1.0
    volumeMounts:
    - name: nfs
      mountPath: /data
  volumes:
  - name: nfs
    nfs:
      server: 10.0.0.2
      path: /share
EOF

# Enable monitoring
gcloud container clusters update my-cluster \
  --enable-cloud-logging \
  --enable-cloud-monitoring

# View metrics
gcloud monitoring metrics-descriptors list

# Create alert policy
gcloud alpha monitoring policies create \
  --notification-channels=CHANNEL_ID \
  --display-name='Pod CPU Alert'

# View logs
gcloud logging read "resource.type=k8s_cluster AND resource.labels.cluster_name=my-cluster" --limit 50

# Stream logs
gcloud logging read --stream

# Enable backup for workloads
gcloud container backup-restore backup-plans create my-backup \
  --cluster=my-cluster \
  --all-namespaces

# Create backup
gcloud container backup-restore backups create \
  --backup-plan=my-backup

# Restore from backup
gcloud container backup-restore restores create \
  --backup=backup-id \
  --cluster=my-cluster

# Purchase commitment
gcloud compute commitments create my-commitment \
  --plan=one-year \
  --resources=CPUs:8,MEMORY:32GB

# Create cluster with preemptible nodes
gcloud container clusters create my-cluster \
  --preemptible \
  --num-nodes=3

# Create node pool with preemptible
gcloud container node-pools create preempt-pool \
  --cluster=my-cluster \
  --preemptible