Securing Google Kubernetes Engine with IAM and Pod Security Admission Reviews

Zhengxian L. · Reviewed 1 yıldan fazla ago

OK

Yerlan M. · Reviewed 1 yıldan fazla ago

Yang L. · Reviewed 1 yıldan fazla ago

Tamas N. · Reviewed 1 yıldan fazla ago

Hisashi S. · Reviewed 1 yıldan fazla ago

William Y. · Reviewed 1 yıldan fazla ago

Julia M. · Reviewed 1 yıldan fazla ago

Had a problem with the optional section. It wouldn't upgrade the default pool nodes at first, I was getting a 400 error about a cluster operation. Checked cluster status and there was 4th node listed in a paused-type state. Once cluster normalized and extra node disappeared, upgrade worked and completed credential rotation.

Allen B. · Reviewed 1 yıldan fazla ago

Viviane G. · Reviewed 1 yıldan fazla ago

CALEB H. · Reviewed 1 yıldan fazla ago

Venkat A. · Reviewed 1 yıldan fazla ago

Two issues: 1. Check progress for "Grant the Service Account User IAM Role to Username 2", doesn't work. I continued the lab, created the cluster etc (so the user obviously has permissions to carry on), and it still fails when checking progress. 2.monitoring logs - resource.type="k8s_cluster" protoPayload.response.reason="Forbidden" protoPayload.resourceName="core/v1/namespaces/restricted-ns/pods/nginx" You should state to press "show query" incase it is hidden. I had to manually search the error (By the end of it, I saw that there's a "show query" slide).

Ido G. · Reviewed 1 yıldan fazla ago

done

Amol Z. · Reviewed 1 yıldan fazla ago

Inspite of granting the service account user role to user 2, the stage does not succeed. If the role has not been granted, how can we go ahead and create the GKE cluster?

Balaji V. · Reviewed 1 yıldan fazla ago

Arbaz Ahmed A. · Reviewed 1 yıldan fazla ago

Amit S. · Reviewed 1 yıldan fazla ago

Vishwanatha B. · Reviewed 1 yıldan fazla ago

Alex P. · Reviewed 1 yıldan fazla ago

Gowtham A. · Reviewed 1 yıldan fazla ago

Albert F. · Reviewed 1 yıldan fazla ago

Vineet T. · Reviewed 1 yıldan fazla ago

Sudhir M. · Reviewed 1 yıldan fazla ago

Inspite of granting the service account user role to user 2, the stage does not succeed. If the role has not been granted, how can we go ahead and create the GKE cluster?

Balaji V. · Reviewed 1 yıldan fazla ago

Hardik P. · Reviewed 1 yıldan fazla ago

Vikas D. · Reviewed 1 yıldan fazla ago