menu

Google Kubernetes Engine Best Practices: Security

Advanced ステップ: 6 7時間 クレジット: 44

Get Anthos Ready. This second Google Kubernetes Engine-centric Quest of best practices hands-on labs focuses on security at scale when deploying and managing production GKE environments -- specifically role-based access control, hardening, VPC networking, and binary authorization.

Infrastructure Security

前提条件:

It is recommended that students have completed the first Quest in this series Google Kubernetes Best Practices before attempting these labs.

Quest Outline

ハンズオンラボ

warning コンテナへの GKE 移行

このラボでは、ステートレス アプリケーションを VM 上での実行から Kubernetes Engine(GKE)上での実行に移行するための基本的なチュートリアルを提供します。ここでは、アプリケーションを一般的な VM / OS ベースのデプロイから 3 種類のコンテナ化クラウド インフラストラクチャ プラットフォームに移行するライフサイクルを示します。

Deutsch English español (Latinoamérica) français 日本語 português (Brasil)
ハンズオンラボ

How to Use a Network Policy on Google Kubernetes Engine

In this lab you learn how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to limit intra-cluster network communication.

ハンズオンラボ

Using Role-based Access Control in Kubernetes Engine

After provisioning two service accounts to represent user personas and three namespaces: dev, test, and prod, you will test the access controls of the personals in each namespace.

ハンズオンラボ

Google Kubernetes Engine Security: Binary Authorization

This lab deploys a Kubernetes Engine Cluster with the Binary Authorization feature enabled; you'll learn how to whitelist approved container registries and the process of creating and running a signed container.

ハンズオンラボ

Securing Applications on Kubernetes Engine - Three Examples

In this lab you will learn how Kubernetes Engine security features can be used to grant varying levels of privilege to applications based on their particular requirements

ハンズオンラボ

Hardening Default GKE Cluster Configurations

This lab demonstrates some of the security concerns of a default GKE cluster configuration and the corresponding hardening measures to prevent multiple paths of pod escape and cluster privilege escalation

今すぐ登録する

このクエストに登録して、バッジ獲得までの進捗状況を管理しましょう。