Cloud IAM と Pod のセキュリティ ポリシーで Google Kubernetes Engine を保護する のレビュー

bad

Surakarapu Chakravarthy · 3年弱前にレビュー済み

Fujita Naohiro · 3年弱前にレビュー済み

Podセキュリティーポリシーが作成されない。

野崎 野崎秀人 · 3年弱前にレビュー済み

Jangwal Akshay · 3年弱前にレビュー済み

Jangwal Akshay · 3年弱前にレビュー済み

Bellov Sergey · 3年弱前にレビュー済み

The material is outdated and the K8s API used here deprecated.

Gomez Sebastian · 3年弱前にレビュー済み

Tomoya Nonaka · 3年弱前にレビュー済み

Hazra Tapan · 3年弱前にレビュー済み

Munnangi Sarath Kumar · 3年弱前にレビュー済み

Jangwal Akshay · 3年弱前にレビュー済み

Voltz Jason · 3年弱前にレビュー済み

Kubernetes has officially deprecated PodSecurityPolicy in version 1.21 and will be removed in 1.25 with no upgrade path available with this feature enabled. For additional details, please refer to https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies Default change: During creation of nodepools or autoscaling configuration changes for cluster versions greater than 1.24.1-gke.800 a default location policy is applied. For Spot and PVM it defaults to ANY, and for all other VM kinds a BALANCED policy is used. To change the default values use the `--location-policy` flag. ERROR: (gcloud.beta.container.clusters.update) INVALID_ARGUMENT: Pod Security Policy was removed from GKE clusters with version >= 1.25.0. The cluster cannot be created with Pod Security Policy is enabled. Instructions for using an alternative pod-level security policies can be found at: https://cloud.google.com/kubernetes-engine/docs/how-to/migrate-podsecuritypolicy. - '@type': type.googleapis.com/google.rpc.RequestInfo requestId: '0xb8c0e903480f30a3'

M Sivaprasath · 3年弱前にレビュー済み

Could not create pod security Policies: student_03_525b2bce9214@cloudshell:~/training-data-analyst/courses/ak8s/14_IAM (qwiklabs-gcp-04-732f88260d6a)$ kubectl apply -f restricted-psp.yaml error: resource mapping not found for name: "restricted-psp" namespace: "" from "restricted-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"

Jia Donglin · 3年弱前にレビュー済み

Voltz Jason · 3年弱前にレビュー済み

Kubernetes has officially deprecated PodSecurityPolicy in version 1.21 and will be removed in 1.25 with no upgrade path available with this feature enabled. For additional details, please refer to https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies Default change: During creation of nodepools or autoscaling configuration changes for cluster versions greater than 1.24.1-gke.800 a default location policy is applied. For Spot and PVM it defaults to ANY, and for all other VM kinds a BALANCED policy is used. To change the default values use the `--location-policy` flag. ERROR: (gcloud.beta.container.clusters.update) INVALID_ARGUMENT: Pod Security Policy was removed from GKE clusters with version >= 1.25.0. The cluster cannot be created with Pod Security Policy is enabled. Instructions for using an alternative pod-level security policies can be found at: https://cloud.google.com/kubernetes-engine/docs/how-to/migrate-podsecuritypolicy. - '@type': type.googleapis.com/google.rpc.RequestInfo requestId: '0xb8c0e903480f30a3'

M Sivaprasath · 3年弱前にレビュー済み

Lab does not work

Marencic John · 3年弱前にレビュー済み

no matches for kind "PodSecurityPolicy" in version "policy/v1beta1. - failed could not create security policy had to move on

Giannoutsos Peter · 3年弱前にレビュー済み

Bly Scot · 3年弱前にレビュー済み

Subramanian Gandhi · 3年弱前にレビュー済み

There is an error in this lab due to deprecated PodSecurityPolicy and it could not be finished.

Roscoe Anthony · 3年弱前にレビュー済み

pod security creation coudl not happen with all steps mentioned

Agrawal Divya · 3年弱前にレビュー済み

error: resource mapping not found for name: "restricted-psp" namespace: "" from "restricted-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1" ensure CRDs are installed first apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false # Don't allow privileged pods! seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny runAsUser: rule: MustRunAsNonRoot fsGroup: rule: RunAsAny volumes: - '*'

Sanchez Levario Esmeralda · 3年弱前にレビュー済み

Sanchez Levario Esmeralda · 3年弱前にレビュー済み

pod security creation coudl not happen with all steps mentioned

Agrawal Divya · 3年弱前にレビュー済み