:_mod-docs-content-type: ASSEMBLY
[id="manually-creating-iam-gcp"]
= Manually creating IAM for GCP
include::_attributes/common-attributes.adoc[]
:context: manually-creating-iam-gcp

toc::[]

In environments where the cloud identity and access management (IAM) APIs are not reachable, or the administrator prefers not to store an administrator-level credential secret in the cluster `kube-system` namespace, you can put the Cloud Credential Operator (CCO) into manual mode before you install the cluster.

include::modules/alternatives-to-storing-admin-secrets-in-kube-system.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* xref:../../authentication/managing_cloud_provider_credentials/cco-mode-gcp-workload-identity.adoc#cco-mode-gcp-workload-identity[Using manual mode with GCP Workload Identity]
* xref:../../post_installation_configuration/cluster-tasks.adoc#post-install-rotate-remove-cloud-creds[Rotating or removing cloud provider credentials]

For a detailed description of all available CCO credential modes and their supported platforms, see xref:../../authentication/managing_cloud_provider_credentials/about-cloud-credential-operator.adoc#about-cloud-credential-operator[About the Cloud Credential Operator].

include::modules/manually-create-identity-access-management.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources
* xref:../../updating/preparing_for_updates/preparing-manual-creds-update.adoc#preparing-manual-creds-update[Preparing to update a cluster with manually maintained credentials]

include::modules/mint-mode.adoc[leveloffset=+1]

include::modules/mint-mode-with-removal-of-admin-credential.adoc[leveloffset=+1]

[id="manually-creating-iam-gcp-next-steps"]
== Next steps

* Install an {product-title} cluster:
** xref:../../installing/installing_gcp/installing-gcp-default.adoc#installing-gcp-default[Installing a cluster quickly on GCP] with default options on installer-provisioned infrastructure
** xref:../../installing/installing_gcp/installing-gcp-customizations.adoc#installing-gcp-customizations[Install a cluster with cloud customizations on installer-provisioned infrastructure]
** xref:../../installing/installing_gcp/installing-gcp-network-customizations.adoc#installing-gcp-network-customizations[Install a cluster with network customizations on installer-provisioned infrastructure]