<p>I have GKE and I need to use customised Ubuntu image for GKE nodes. I am planning to enable autoscaling. So I require to install TLS certificates to trust the private docker registry in each nodes. It's possible for existing nodes manually. But when I enable auto scale the cluster, it will spin up the nodes. Then docker image pull request will fail, because of the docker cannot trust the private docker registry which hosted in my on premise.</p>

<p>I have created a customised Ubuntu image and uploaded to image in GCP. I was trying to create a GKE and tried to set the node's OS image as that image which I created.</p>

<p>Do you know how to create a GKE cluster with customised Ubuntu Image? Has anyone experienced with incidents like this?</p>

<p>Node pools in GKE are based off GCE instance templates and can't be modified. That means that you aren't allowed to set metadata such as <em>startup-scripts</em> or make them based on custom images.</p>

<p>However, an alternative approach might be <a href="https://serverfault.com/a/940757/504596">deploying a privileged DaemonSet</a> that <a href="https://kubernetes.io/docs/concepts/workloads/pods/pod/#privileged-mode-for-pod-containers" rel="nofollow noreferrer">manipulates the underlying OS settings and resources</a>.</p>

<p>Is important to mention that giving <a href="https://kubernetes.io/docs/tasks/configure-pod-container/security-context/" rel="nofollow noreferrer">privileges to resources in Kubernetes</a> must be done carefully.</p>
