This document explains how to establish an SSH connection to your cluster's login node in Cluster Director. Connecting to this login node lets you manage shared file systems and submit Slurm jobs in your cluster.
For more information on how Compute Engine uses key-based SSH authentication to establish connections to a virtual machine (VM) instance, see About SSH connections.
Before you begin
When you access and use the Google Cloud console, you don't need to authenticate. You can automatically use Google Cloud services and APIs.
Required roles
To get the permissions that you need to connect to a login node in a cluster, ask your administrator to grant you the following IAM roles on the project:
-
To view clusters:
Hypercompute Cluster Viewer (
roles/hypercomputecluster.viewer) -
To connect to a node:
Compute OS Login (
roles/compute.osLogin) -
To connect to a node secured by Identity-Aware Proxy (IAP):
IAP-Secured Tunnel User (
roles/iap.tunnelResourceAccessor)
For more information about granting roles, see Manage access to projects, folders, and organizations.
These predefined roles contain the permissions required to connect to a login node in a cluster. To see the exact permissions that are required, expand the Required permissions section:
Required permissions
The following permissions are required to connect to a login node in a cluster:
-
To view the details of a single cluster:
hypercomputecluster.clusters.describe -
To connect to a node:
compute.instances.osLogin
You might also be able to get these permissions with custom roles or other predefined roles.
Connect to a login node
To connect to a login node through SSH by using the Google Cloud console, complete the following steps:
In the Google Cloud console, go to the Cluster Director page.
In the navigation menu, click Clusters. The Clusters page appears.
In the Clusters table, in the Name column, click the name of the cluster that you want to connect to. A page that gives the details of the cluster appears, and the Details tab is selected.
Click the Nodes tab.
In the Login nodes section, in the Connect column, click the SSH button in the row that contains your login node. The SSH-in-browser window opens.
If prompted, then click Authorize.
Connecting to your login node can take a few minutes to complete.