Securing Google Kubernetes Engine with IAM and Pod Security Admission Reviews

Venkatreddy S. · Reviewed أكثر من سنة ago

Zhengxian L. · Reviewed أكثر من سنة ago

OK

Yerlan M. · Reviewed أكثر من سنة ago

Yang L. · Reviewed أكثر من سنة ago

Tamas N. · Reviewed أكثر من سنة ago

Hisashi S. · Reviewed أكثر من سنة ago

William Y. · Reviewed أكثر من سنة ago

Julia M. · Reviewed أكثر من سنة ago

Had a problem with the optional section. It wouldn't upgrade the default pool nodes at first, I was getting a 400 error about a cluster operation. Checked cluster status and there was 4th node listed in a paused-type state. Once cluster normalized and extra node disappeared, upgrade worked and completed credential rotation.

Allen B. · Reviewed أكثر من سنة ago

Viviane G. · Reviewed أكثر من سنة ago

CALEB H. · Reviewed أكثر من سنة ago

Venkat A. · Reviewed أكثر من سنة ago

Two issues: 1. Check progress for "Grant the Service Account User IAM Role to Username 2", doesn't work. I continued the lab, created the cluster etc (so the user obviously has permissions to carry on), and it still fails when checking progress. 2.monitoring logs - resource.type="k8s_cluster" protoPayload.response.reason="Forbidden" protoPayload.resourceName="core/v1/namespaces/restricted-ns/pods/nginx" You should state to press "show query" incase it is hidden. I had to manually search the error (By the end of it, I saw that there's a "show query" slide).

Ido G. · Reviewed أكثر من سنة ago

done

Amol Z. · Reviewed أكثر من سنة ago

Inspite of granting the service account user role to user 2, the stage does not succeed. If the role has not been granted, how can we go ahead and create the GKE cluster?

Balaji V. · Reviewed أكثر من سنة ago

Arbaz Ahmed A. · Reviewed أكثر من سنة ago

Amit S. · Reviewed أكثر من سنة ago

Vishwanatha B. · Reviewed أكثر من سنة ago

Alex P. · Reviewed أكثر من سنة ago

Gowtham A. · Reviewed أكثر من سنة ago

Albert F. · Reviewed أكثر من سنة ago

Vineet T. · Reviewed أكثر من سنة ago

Sudhir M. · Reviewed أكثر من سنة ago

Inspite of granting the service account user role to user 2, the stage does not succeed. If the role has not been granted, how can we go ahead and create the GKE cluster?

Balaji V. · Reviewed أكثر من سنة ago

Hardik P. · Reviewed أكثر من سنة ago