Hardening Default GKE Cluster Configurations Reviews

nnjhjn m. · Reviewed about 6 years ago

gfgfg b. · Reviewed about 6 years ago

siewli l. · Reviewed about 6 years ago

jhjhj n. · Reviewed about 6 years ago

jhjhj n. · Reviewed about 6 years ago

nnjhjn m. · Reviewed about 6 years ago

Marcus O. · Reviewed about 6 years ago

Well explained, albeit command line heavy

Michael W. · Reviewed about 6 years ago

hghgh j. · Reviewed about 6 years ago

hghh j. · Reviewed about 6 years ago

hghh j. · Reviewed about 6 years ago

hghgh j. · Reviewed about 6 years ago

Extremely valuable advice in this lab! There is a minor problem in the last step with the unprivileged service account. Getting cluster credentials after activating the SA fails with: ERROR: (gcloud.container.clusters.get-credentials) ResponseError: code=403, message=Required "container.clusters.get" permission(s) for "projects/qwiklabs-gcp-01-b4ad11ed3355/zones/us-central1-a/clusters/simplecluster". Later deploying a pod that should violate the `restrictive-psp` does not fail because `gce.privileged` is still applied instead. Some mess up with accounts/permissions I guess; sadly didn't have enough time to fully debug.

Andreas H. · Reviewed about 6 years ago

hghjhj k. · Reviewed about 6 years ago

ghg h. · Reviewed about 6 years ago

hghgg h. · Reviewed about 6 years ago

mnmn n. · Reviewed about 6 years ago

jhhhjj g. · Reviewed about 6 years ago

hghgh m. · Reviewed about 6 years ago

hghjhj k. · Reviewed about 6 years ago

hghgh m. · Reviewed about 6 years ago

ghg h. · Reviewed about 6 years ago

hghgg h. · Reviewed about 6 years ago

jhhhjj g. · Reviewed about 6 years ago

mnmn n. · Reviewed about 6 years ago