You run a job.

The Secure Agent uses the Secure Agent role to store cluster details in the staging location.

The Secure Agent uses the Secure Agent role to create the cluster.

If you create master and worker roles and service accounts, the Secure Agent attaches the service accounts to the cluster nodes.

The Secure Agent uses the Secure Agent role to create cluster resources for the master node.

The master node uses the master role to access cloud resources on services on Google Cloud like Google Compute Engine to manage node elasticity and resource optimization.

The master node uses the master role to access the initialization script. If you didn't create master and worker roles and service accounts, the master node uses the Secure Agent role.

The Secure Agent uses the Secure Agent role to create cluster resources for the worker nodes and creates a managed instance group with the minimum number of worker nodes.

The worker nodes use the worker role to access cloud resources on services on Google Cloud like Google Compute Engine and Google Cloud Networking to access compute and networking capabilities. If you didn't create master and worker roles and service accounts, the worker nodes use the Secure Agent role.

The worker nodes use the worker role to access the initialization script. If you didn't create master and worker roles and service accounts, the worker nodes use the Secure Agent role.