关于“Hardening Default GKE Cluster Configurations”的评价

nnjhjn m. · 已于 about 6 years前审核

gfgfg b. · 已于 about 6 years前审核

siewli l. · 已于 about 6 years前审核

jhjhj n. · 已于 about 6 years前审核

jhjhj n. · 已于 about 6 years前审核

nnjhjn m. · 已于 about 6 years前审核

Marcus O. · 已于 about 6 years前审核

Well explained, albeit command line heavy

Michael W. · 已于 about 6 years前审核

hghgh j. · 已于 about 6 years前审核

hghh j. · 已于 about 6 years前审核

hghh j. · 已于 about 6 years前审核

hghgh j. · 已于 about 6 years前审核

Extremely valuable advice in this lab! There is a minor problem in the last step with the unprivileged service account. Getting cluster credentials after activating the SA fails with: ERROR: (gcloud.container.clusters.get-credentials) ResponseError: code=403, message=Required "container.clusters.get" permission(s) for "projects/qwiklabs-gcp-01-b4ad11ed3355/zones/us-central1-a/clusters/simplecluster". Later deploying a pod that should violate the `restrictive-psp` does not fail because `gce.privileged` is still applied instead. Some mess up with accounts/permissions I guess; sadly didn't have enough time to fully debug.

Andreas H. · 已于 about 6 years前审核

hghjhj k. · 已于 about 6 years前审核

ghg h. · 已于 about 6 years前审核

hghgg h. · 已于 about 6 years前审核

mnmn n. · 已于 about 6 years前审核

jhhhjj g. · 已于 about 6 years前审核

hghgh m. · 已于 about 6 years前审核

hghjhj k. · 已于 about 6 years前审核

hghgh m. · 已于 about 6 years前审核

ghg h. · 已于 about 6 years前审核

hghgg h. · 已于 about 6 years前审核

jhhhjj g. · 已于 about 6 years前审核

mnmn n. · 已于 about 6 years前审核