AK8S-14 Como proteger o Kubernetes Engine com o Cloud IAM e as políticas de segurança de pods avaliações

One of the progress checks does not work.

VLAD N. · Revisado há almost 6 years

Done

Girishgouda S. · Revisado há almost 6 years

George C. · Revisado há almost 6 years

Mark F. · Revisado há almost 6 years

Still doesn't work for me, it says to grant cluster-admin privileges to user1, which I'm under the impression I already did: student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ kubectl get podsecuritypolicy restricted-psp NAME PRIV CAPS SELINUX RUNASUSER FSGROUP SUPGROUP READONLYROOTFS VOLUMES restricted-psp false RunAsAny MustRunAsNonRoot RunAsAny RunAsAny false * student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ vi psp-cluster-role student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ vi psp-cluster-role.yaml student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ kubectl create clusterrolebinding cluster-admin-binding --clusterrole cluster-admin --user student-00-69951876b6b7@qwiklabs.net clusterrolebinding.rbac.authorization.k8s.io/cluster-admin-binding created student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ kubectl apply -f psp-cluster-role.yaml clusterrole.rbac.authorization.k8s.io/restricted-pods-role created student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$ kubectl get clusterrole restricted-pods-role NAME AGE restricted-pods-role 11s student_00_69951876b6b7@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-00-51d3903ceaf0)$

Alfonso S. · Revisado há almost 6 years

Dariusz P. · Revisado há almost 6 years

Marcos R. · Revisado há almost 6 years

Jithinraj S. · Revisado há almost 6 years

Tsvetan T. · Revisado há almost 6 years

Kadu B. · Revisado há almost 6 years

Ricardo P. · Revisado há almost 6 years

David R. · Revisado há almost 6 years

LTI S. · Revisado há almost 6 years

Status check for "Create a ClusterRole to a Pod Security Policy" fails all the time, plus continuing the pod with privileges is created with is NOT the expected behaiour. I attempted the lab twice, both with the same results, so not sure if issue is intermittent or not.

Wai L. · Revisado há almost 6 years

Wai L. · Revisado há almost 6 years

LTI S. · Revisado há almost 6 years

Paulo H. · Revisado há almost 6 years

Atchaiah c. · Revisado há almost 6 years

The "check my progress" of "Create a ClusterRole to a Pod Security Policy" did not work.

Gean Y. · Revisado há almost 6 years

Didn't work

Tim d. · Revisado há almost 6 years

Ankita K. · Revisado há almost 6 years

Jeremy D. · Revisado há almost 6 years

Kerry K. · Revisado há almost 6 years

Livinus T. · Revisado há almost 6 years

excellent. other things came up.

Jeremy D. · Revisado há almost 6 years