Securing Google Kubernetes Engine with IAM and Pod Security Admission Reviews

SHREEKRISHNA B. · Reviewed over 1 year ago

Sarath T. · Reviewed over 1 year ago

Balaji G. · Reviewed over 1 year ago

Abdul Ashik Khan M. · Reviewed over 1 year ago

Raj G. · Reviewed over 1 year ago

Venkatreddy S. · Reviewed over 1 year ago

Zhengxian L. · Reviewed over 1 year ago

OK

Yerlan M. · Reviewed over 1 year ago

Yang L. · Reviewed over 1 year ago

Tamas N. · Reviewed over 1 year ago

Hisashi S. · Reviewed over 1 year ago

William Y. · Reviewed over 1 year ago

Julia M. · Reviewed over 1 year ago

Had a problem with the optional section. It wouldn't upgrade the default pool nodes at first, I was getting a 400 error about a cluster operation. Checked cluster status and there was 4th node listed in a paused-type state. Once cluster normalized and extra node disappeared, upgrade worked and completed credential rotation.

Allen B. · Reviewed over 1 year ago

Viviane G. · Reviewed over 1 year ago

CALEB H. · Reviewed over 1 year ago

Venkat A. · Reviewed over 1 year ago

Two issues: 1. Check progress for "Grant the Service Account User IAM Role to Username 2", doesn't work. I continued the lab, created the cluster etc (so the user obviously has permissions to carry on), and it still fails when checking progress. 2.monitoring logs - resource.type="k8s_cluster" protoPayload.response.reason="Forbidden" protoPayload.resourceName="core/v1/namespaces/restricted-ns/pods/nginx" You should state to press "show query" incase it is hidden. I had to manually search the error (By the end of it, I saw that there's a "show query" slide).

Ido G. · Reviewed over 1 year ago

done

Amol Z. · Reviewed over 1 year ago

Inspite of granting the service account user role to user 2, the stage does not succeed. If the role has not been granted, how can we go ahead and create the GKE cluster?

Balaji V. · Reviewed over 1 year ago

Arbaz Ahmed A. · Reviewed over 1 year ago

Amit S. · Reviewed over 1 year ago

Vishwanatha B. · Reviewed over 1 year ago

Alex P. · Reviewed over 1 year ago

Gowtham A. · Reviewed over 1 year ago