Create a workstation cluster Stay organized with collections Save and categorize content based on your preferences.
To follow step-by-step guidance for this task directly in the Google Cloud console, clickGuide me:
Before you begin
Before you begin using Cloud Workstations, be sure that you have therequired permissions and that you complete these required setup steps.You can skip this section if you've already completed this setup.
- Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.Roles required to select or create a project
- Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
- Create a project: To create a project, you need the Project Creator role (
roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.createpermission.Learn how to grant roles.
Verify that billing is enabled for your Google Cloud project.
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.Roles required to select or create a project
- Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
- Create a project: To create a project, you need the Project Creator role (
roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.createpermission.Learn how to grant roles.
Verify that billing is enabled for your Google Cloud project.
Enable the Cloud Workstations API.
Roles required to enable APIs
To enable APIs, you need the Service Usage Admin IAM role (
roles/serviceusage.serviceUsageAdmin), which contains theserviceusage.services.enablepermission.Learn how to grant roles.Make sure that you have a Cloud Workstations Admin IAM role on the project so that you can create workstation configurations. To check your IAM roles in the Google Cloud console, go to theIAM page:
- Cloud Workstations are hosted on VMs booted from Compute Engine's preconfigured publicContainer-Optimized OS (COS) images. If the
constraints/compute.trustedimageProjectsorganization policy constraint is enforced, you mustset image access constraints to allow users to create boot disks fromprojects/cos-cloudor all public images. - Optional: Enable the Container File System API to allow faster workstation startup.
Enable the Container File System API
For more information, seeReduce workstation startup time with Image streaming.
Create your workstation cluster
Workstation clusters define a group of workstations in a particular region,manage workstations during their lifecycle, and provide configurablenetwork connectivity.
Workstation clusters aren't related to Google Kubernetes Engine (GKE) clusters.
To create a workstation cluster, follow these steps:
In the console,navigate to theCloud Workstations >Cluster management page.
From the workstationsCluster management page, clickadd_boxCreate.
In theName field, enter a name for your workstation cluster.
Select theRegion that is closest to you.
Optional: To create your workstations inside aVPC,expand theNetwork settings section and select your custom network.
In theNetwork field, enter the name for your network—for example,
test-network.In theSubnetwork field, enter the name for your subnetwork—forexample,
test-subnetwork.In theGateway type section, selectPublic gateway orPrivate gateway.
To make your workstations accessible from public networks, selectPublic gateway.
If you requiredata residency for data in transit, selectPrivate gateway.
To allow ingress and egress to the workstations service from insidethe selected network, selectPrivate gateway. For more information about creating a private clusters, seeConfigure VPC Service Controls and private clusters
ClickCreate, which begins the cluster creation process.
Workstation cluster creation can take up to 20 minutes, but in mostcases is only needed once.
Clean up
To delete a workstation cluster from the Google Cloud console:
- In the Google Cloud console, go toCloud Workstations > Clusters.
- Select the checkbox beside the cluster that you want to delete.
- Click themore_vertMore optionsmenu and selectDelete to delete the selected workstation cluster.
What's next
Learn more about configuring options in yourworkstation configuration.
Use theCloud Workstations base editor.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-19 UTC.