Securing Google Kubernetes Engine with Cloud IAM and Pod Security Policies Reviews

(전희영) L. · Reviewed neredeyse 3 yıl ago

민환 오. · Reviewed neredeyse 3 yıl ago

Brandon S. · Reviewed neredeyse 3 yıl ago

이번에는 Cluster Create 시 오류 발생해서 진행이 안되어 다시 재수행 할예정

진용 이. · Reviewed neredeyse 3 yıl ago

PoDsecuritypolicy 정책 만들때 오류가 발생합니다. no matches for kind "PodSecurityPolicy" in version "policy/v1beta1" ensure CRDs are installed first

진용 이. · Reviewed neredeyse 3 yıl ago

성훈 장. · Reviewed neredeyse 3 yıl ago

Broken. Can't apply pod security policy.

Lloyd K. · Reviewed neredeyse 3 yıl ago

Abhay G. · Reviewed neredeyse 3 yıl ago

Task 1 - Granting Permission (Service Account User) has some problems Task 2 - restricted-psp.yml has problem with pod-security-policy Unable to complete lab

Nithin K. · Reviewed neredeyse 3 yıl ago

Tatsuya O. · Reviewed neredeyse 3 yıl ago

Cannot copmpleted. Podsecuritypolicy not allowed in cluster version

Manuel S. · Reviewed neredeyse 3 yıl ago

did not work good

kineret l. · Reviewed neredeyse 3 yıl ago

Francesco R. · Reviewed neredeyse 3 yıl ago

Eric E. · Reviewed neredeyse 3 yıl ago

kineret l. · Reviewed neredeyse 3 yıl ago

Avi G. · Reviewed neredeyse 3 yıl ago

lab has some thing wrong with it with the kube versions

Saar B. · Reviewed neredeyse 3 yıl ago

BROKE LAB

Guy O. · Reviewed neredeyse 3 yıl ago

敦志 髙. · Reviewed neredeyse 3 yıl ago

Lev V. · Reviewed neredeyse 3 yıl ago

error: resource mapping not found for name: "restricted-psp" namespace: ""

Sho I. · Reviewed neredeyse 3 yıl ago

Ignacio A. · Reviewed neredeyse 3 yıl ago

student_01_a283a5f8d347@cloudshell:~/ak8s/Security (qwiklabs-gcp-00-a3a049174473)$ kubectl apply -f restricted-psp.yaml error: resource mapping not found for name: "restricted-psp" namespace: "" from "restricted-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1" ensure CRDs are installed first student_01_a283a5f8d347@cloudshell:~/ak8s/Security (qwiklabs-gcp-00-a3a049174473)$ kubectl get podsecuritypolicy restricted-psp error: the server doesn't have a resource type "podsecuritypolicy" student_01_a283a5f8d347@cloudshell:~/ak8s/Security (qwiklabs-gcp-00-a3a049174473)$ gcloud beta container clusters update $my_cluster --zone $my_zone --enable-pod-security-policy Kubernetes has officially deprecated PodSecurityPolicy in version 1.21 and will be removed in 1.25 with no upgrade path available with this feature enabled. For additional details, please refer to https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies Default change: During creation of nodepools or autoscaling configuration changes for cluster versions greater than 1.24.1-gke.800 a default location policy is applied. For Spot and PVM it defaults to ANY, and for all other VM kinds a BALANCED policy is used. To change the default values use the `--location-policy` flag. ERROR: (gcloud.beta.container.clusters.update) INVALID_ARGUMENT: Pod Security Policy was removed from GKE clusters with version >= 1.25.0. The cluster cannot be created with Pod Security Policy is enabled. Instructions for using an alternative pod-level security policies can be found at: https://cloud.google.com/kubernetes-engine/docs/how-to/migrate-podsecuritypolicy. student_01_a283a5f8d347@cloudshell:~/ak8s/Security (qwiklabs-gcp-00-a3a049174473)$ student_01_a283a5f8d347@cloudshell:~/ak8s/Security (qwiklabs-gcp-00-a3a049174473)$ kubectl get podsecuritypolicies error: the server doesn't have a resource type "podsecuritypolicies"

康二 田. · Reviewed neredeyse 3 yıl ago

error! student_01_89b30fedca41@cloudshell:~/ak8s/Security (qwiklabs-gcp-02-0d4ed7eb32f1)$ kubectl apply -f restricted-psp.yamlerror: resource mapping not found for name: "restricted-psp" namespace: "" from "restricted-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1" ensure CRDs are installed first student_01_89b30fedca41@cloudshell:~/ak8s/Security (qwiklabs-gcp-02-0d4ed7eb32f1)$ kubectl get podsecuritypolicy restricted-psp error: the server doesn't have a resource type "podsecuritypolicy"

康二 田. · Reviewed neredeyse 3 yıl ago

There is an step that does not allow to continue due to the version of the cluster.

DAVID A. · Reviewed neredeyse 3 yıl ago