Google cloud services (computing instance) offer encryption by default for disk storage, the customer can provide its own key with the feature customer supplied encryption (detailed here also).

How can we apply a disk encryption with cryptsetup without giving the encryption key to google?