gcp.pkl entry file. One forma provisions the cluster side (a project IAM grant,
a VPC, a subnet, a Cloud Router, a Cloud NAT, and a Standard zonal GKE cluster)
and, through a Kubernetes target authenticated against that cluster’s endpoint,
the workload side (a namespace, config maps, a secret, a service account, an
nginx frontend and Node.js backend deployment, and their services). It needs
GCP_PROJECT and GCP_APPLY_AS set so the cluster and the IAM grant resolve.
Deploy. Apply the GCP entry file. formae provisions the cloud infrastructure
first, then authenticates the Kubernetes target against the new cluster’s
endpoint and rolls out the workload:

