# Provider: gke (appbox)

`when provider=gke`. From `GetGKEAPPBoxTasks`: Guardian → GCP SA → GKE →
ProjectPolicy → NodePool → OIDC → bucket policies → Namespace → exporters →
cert-manager/PCA → TiDBOperator → gateway/proxy → SLI → Dataflow/O11y/RBAC.

Suspect early: Guardian (VPC), GKE cluster, NodePool.