Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Snapshot Manager Install and Upgrade Guide
  3. Section I. NetBackup Snapshot Manager installation and configuration
  4. Deploying NetBackup Snapshot Manager extensions
  5. Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP
NetBackup™ Snapshot Manager Install and Upgrade Guide

Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP

Following are the permissions required for configuring the Google Kubernetes Engine (GKE) cluster:

  • For pushing the images to google container registry, user must have the write permissions for cloud bucket storage. The storage.admin role covers all the required permissions.

    For more information on pushing the images, see Pushing images to a registry in your project.

  • The user must have the cluster-admin IAM role assigned to it to configure the Kubernetes extension.

    For more information on the role based access control, see Define permissions using Roles or ClusterRoles.

  • Account associated with GCP provider configuration must have the following permissions for GKE based Kubernetes extension operations:

    • Permissions for cluster access:

      container.clusters.get

    • Permissions for auto scale feature:

      compute.instanceGroupManagers.get

      compute.instanceGroupManagers.update

      container.clusters.get

      container.clusters.update

      container.operations.get

Feedback

Was this page helpful?
Previous

Install extension using the extension script

Next

Prerequisites to install the extension on a managed Kubernetes cluster in GCP

Feedback

Was this page helpful?