在 Google Cloud 實作基礎雲端安全防護措施：挑戰實驗室 Reviews

Bhabesh R. · Reviewed about 1 month ago

Miguel Ricardo A. · Reviewed about 1 month ago

Marcelo C. · Reviewed about 1 month ago

Konstantyn T. · Reviewed about 1 month ago

Jeremiah H. · Reviewed about 1 month ago

Suresh N. · Reviewed about 1 month ago

Yura T. · Reviewed about 1 month ago

matias d. · Reviewed about 1 month ago

Sandika M. · Reviewed about 1 month ago

Anielka F. · Reviewed about 1 month ago

Samar G. · Reviewed about 1 month ago

Keyur S. · Reviewed about 1 month ago

Tetiana F. · Reviewed about 1 month ago

Andrew M. · Reviewed about 1 month ago

Shamus S. · Reviewed about 1 month ago

CARLOS R. · Reviewed about 1 month ago

Lab trying too hard to be tricky with non-default network that isn't mentioned, and already existing jumphost not being made clear. In the past, other labs had leftovers from previous students (like buckets) and it could be assumed for this one as well (in error)

Phil R. · Reviewed about 1 month ago

Kamini Y. · Reviewed about 1 month ago

Mateusz F. · Reviewed about 1 month ago

Maansi G. · Reviewed about 1 month ago

bad lab

Ferney De Jesus A. · Reviewed about 1 month ago

CARLOS R. · Reviewed about 1 month ago

A bunch of objects were already existing (like the two subnets and the jumphost) with incorrect settings. Are other students abandoned labs leaking into my lab? It's a bit unexpected that I have to clean up other people's mess while doing my challenge lab. In the end, the lab grader was bugged with "Please ensure you have correctly added the internal IP of the orca-jumphost machine to your cluster." and I had to waste credits taking it again... student_02_e785104aa399@cloudshell:~ (qwiklabs-gcp-03-26094f5f009f)$ JUMPHOST_INTERNAL_IP=$(gcloud compute instances describe orca-jumphost \ --zone=$ZONE \ --format='value(networkInterfaces[0].networkIP)') student_02_e785104aa399@cloudshell:~ (qwiklabs-gcp-03-26094f5f009f)$ echo $JUMPHOST_INTERNAL_IP 10.0.8.2 student_02_e785104aa399@cloudshell:~ (qwiklabs-gcp-03-26094f5f009f)$ gcloud container clusters update $CLUSTER_NAME \ --zone=$ZONE \ --enable-master-authorized-networks \ --master-authorized-networks=$JUMPHOST_INTERNAL_IP/32 Updating orca-cluster-697...done. Updated [https://container.googleapis.com/v1/projects/qwiklabs-gcp-03-26094f5f009f/zones/europe-west1-b/clusters/orca-cluster-697]. To inspect the contents of your cluster, go to: https://console.cloud.google.com/kubernetes/workload_/gcloud/europe-west1-b/orca-cluster-697?project=qwiklabs-gcp-03-26094f5f009f student_02_e785104aa399@cloudshell:~ (qwiklabs-gcp-03-26094f5f009f)$ gcloud container clusters describe $CLUSTER_NAME \ --zone=$ZONE \ --format="yaml(name,subnetwork,nodeConfig.serviceAccount,privateClusterConfig.enablePrivateNodes,privateClusterConfig.enablePrivateEndpoint,masterAuthorizedNetworksConfig.enabled,masterAuthorizedNetworksConfig.cidrBlocks)" masterAuthorizedNetworksConfig: cidrBlocks: - cidrBlock: 10.0.8.2/32 enabled: true name: orca-cluster-697 nodeConfig: serviceAccount: orca-private-cluster-349-sa@qwiklabs-gcp-03-26094f5f009f.iam.gserviceaccount.com privateClusterConfig: enablePrivateEndpoint: true enablePrivateNodes: true subnetwork: orca-build-subnet

Phil R. · Reviewed about 1 month ago

Guadalupe O. · Reviewed about 1 month ago

Ahmed A. · Reviewed about 1 month ago