Securing Google Kubernetes Engine with Cloud IAM and Pod Security Policies Reviews

Jesús Alberto D. · Reviewed over 4 years ago

Keshaw K. · Reviewed over 4 years ago

Jongwon L. · Reviewed over 4 years ago

Diana P. · Reviewed over 4 years ago

proxy m. · Reviewed over 4 years ago

RE-tried, got "no permission" again "You need permissions for this action. Required permission(s): iam.serviceAccounts.setIamPolicy" Re-tried, the error below was fixed, but encountered another Permission error! kubectl apply -f restricted-psp.yaml Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+ Error from server (Forbidden): error when creating "restricted-psp.yaml": podsecuritypolicies.policy is forbidden: User "student-00-61c1f16ae4e8@qwiklabs.net" cannot create resource "podsecuritypolicies" in API group "policy" at the cluster scope: requires one of ["container.podSecurityPolicies.create"] permission(s). ========== This is the worst lab I have tried in Google cloud. The support should go to check the log! There is the blocker in lab "Securing Google Kubernetes Engine with Cloud IAM and Pod Security Policies", section "Grant the ServiceAccountUser IAM Role to Username 2" step 4 - Click the Manage access button on the screen to open the permissions information panel. The permissions information panel will open on the right side of the window. ". Whn i click on the Manage access button I got no permission message, here is the message - "You need permissions for this action. Required permission(s): iam.serviceAccounts.setIamPolicy". It seems the user1 "student-00-e04e462eebfb@qwiklabs.net doesn't have iam.serviceAccounts.setIamPolicy permission. The lab missed granted user1 the permission. This is my second time try. Please have a look at that issues. Thanks.

Rose C. · Reviewed over 4 years ago

Ruben L. · Reviewed over 4 years ago

ok

Veeraram M. · Reviewed over 4 years ago

Jesús Alberto D. · Reviewed over 4 years ago

Kevin A. · Reviewed over 4 years ago

Vladislav Z. · Reviewed over 4 years ago

Damiano V. · Reviewed over 4 years ago

BALZANO F. · Reviewed over 4 years ago

Andrei B. · Reviewed over 4 years ago

Ashish T. · Reviewed over 4 years ago

both user did not have permission on IAM

Kumar Amit (. · Reviewed over 4 years ago

Not working at 2nd attempt.

Razvan-Dumitru T. · Reviewed over 4 years ago

Mihai I. · Reviewed over 4 years ago

Mihai S. · Reviewed over 4 years ago

Cristian N. · Reviewed over 4 years ago

Cristian N. · Reviewed over 4 years ago

Maria C. · Reviewed over 4 years ago

Anca-Maria R. · Reviewed over 4 years ago

The cluster upgrades took a very long time.

Razvan-Dumitru T. · Reviewed over 4 years ago

A bit to the limit, buffer time could be increased.

Tudor M. · Reviewed over 4 years ago