Google GKE Hub API

Name: GKE Hub API
Brand: GKE Hub API
Availability: InStock

✓ Official Vendor SpecCloud InfrastructureContainer Orchestrationoauth227 EndpointsREST

For Agents

Manage fleets of Kubernetes clusters, register memberships, and enable cross-cluster features such as Config Management and Service Mesh. Built for platform teams operating multi-cluster Kubernetes.

Install Jentic One Beta

Connect the GKE Hub API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the GKE Hub API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with GKE Hub API.

Create and manage fleets that group clusters under a project

Enable and configure fleet-level features such as Config Management

GET STARTED

Start building with GKE Hub API

Explore with Jentic

View OpenAPI Document

Use Cases

Patterns agents use GKE Hub API for, with concrete tasks.

★ Onboard a New Cluster to a Fleet

Platform teams that operate Kubernetes across multiple regions or vendors register every cluster as a fleet membership so policy and observability can be applied uniformly. The GKE Hub API creates the membership and generates the connect manifest YAML that the cluster operator applies to register the cluster with Google Cloud. After registration, the cluster shows up in fleet dashboards.

Call POST /v1/projects/{project}/locations/{location}/memberships, then GET /v1/{name}:generateConnectManifest and supply the manifest to the cluster operator.

Roll Out Config Management Across the Fleet

GitOps-driven platforms enable Config Management as a fleet feature so every registered cluster pulls policy and configuration from the same Git repo. The features endpoints create or patch the configmanagement feature on the fleet, and individual memberships inherit the configuration. This eliminates per-cluster setup and gives a single point of audit.

Call POST /v1/projects/{project}/locations/{location}/features with featureId configmanagement and a Git source spec, then verify it propagates to all memberships.

Audit and Drift Detection for Multi-Cluster

Compliance teams need to know which clusters are part of the fleet and what features they have enabled. The list memberships and list features endpoints return that inventory in a single project per location, supporting scheduled audits and drift detection against an expected baseline. Bindings and namespaces are also enumerable for tenant scoping reviews.

Call GET /v1/projects/{project}/locations/{location}/memberships and GET /v1/{parent}/features, then compare against the expected baseline and flag deltas.

Agent-Driven Multi-Cluster Operations

An AI agent embedded in a platform engineering toolchain can register new clusters and enable fleet features through Jentic. The agent searches for the membership-create operation, loads its schema, and executes it without engineers needing to wire OAuth and connect-manifest fetching by hand.

Use Jentic to search 'register a cluster with gke hub', load the membership create schema, and execute it for a target cluster, then fetch its connect manifest.

Key Endpoints

27 endpoints — gke hub is the control plane for managing fleets of kubernetes clusters across gke, anthos, and attached on-prem or multi-cloud clusters.

METHOD

PATH

DESCRIPTION

GET

/v1/{+parent}/memberships

List fleet memberships

POST

/v1/{+parent}/memberships

Create a fleet membership

GET

/v1/{+name}:generateConnectManifest

Generate the connect manifest for a membership

GET

/v1/{+parent}/fleets

List fleets in a location

POST

/v1/{+parent}/fleets

Create a fleet

GET

/v1/{+parent}/features

List fleet-level features

POST

/v1/{+parent}/features

Create or enable a fleet-level feature

POST

/v1/{+name}:cancel

Cancel a long-running operation

GET

/v1/{+parent}/memberships

List fleet memberships

POST

/v1/{+parent}/memberships

Create a fleet membership

GET

/v1/{+name}:generateConnectManifest

Generate the connect manifest for a membership

GET

/v1/{+parent}/fleets

List fleets in a location

POST

/v1/{+parent}/fleets

Create a fleet

Why Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Service account credentials live encrypted in the Jentic vault. Agents receive scoped OAuth tokens for the cloud-platform scope and operate under the IAM roles bound to that account.

Intent-based discovery

Agents search by intent (e.g., 'register a cluster with gke hub' or 'enable config management') and Jentic returns the matching membership or feature operation with its schema.

Time to first call

Direct integration: 2-4 days for IAM, fleet modelling, and connect manifest plumbing. Through Jentic: under an hour for individual fleet operations.

FAQs

Specific to using GKE Hub API through Jentic.

What authentication does the GKE Hub API use?

It uses Google OAuth 2.0 with the cloud-platform scope, typically via a service account that has gkehub.admin or similar IAM roles. Through Jentic, those credentials live encrypted in the vault and the agent receives scoped bearer tokens.

Can I register a non-GKE cluster with GKE Hub?

Yes. Create a membership for the external cluster, call generateConnectManifest, and apply the returned YAML on the cluster to install the Connect agent. The cluster then appears in the fleet alongside GKE clusters.

What are the rate limits for the GKE Hub API?

Google enforces standard per-project quotas on management calls, typically several hundred requests per minute. Cluster onboarding operations return long-running operations whose duration depends on the cluster, not the API rate.

How do I enable Config Management on my fleet through Jentic?

Search Jentic for 'enable config management on gke fleet', load the schema for POST /v1/{parent}/features with featureId configmanagement, and execute it with a Git repo source spec.

Is the GKE Hub API free?

Hub itself has no separate charge, but Anthos features such as Config Management and Service Mesh have their own per-cluster pricing. See the Anthos pricing documentation for current rates.

Does GKE Hub run my workloads?

No. Hub is the control plane for fleets, memberships, and features. Workloads still run on the underlying GKE, Anthos, or attached clusters.

Google GKE Hub API

Connect the GKE Hub API to your agent

Capabilities

Start building with GKE Hub API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs