Advanced 7 Steps 小时 46 积分
Get Anthos Ready. This second Google Kubernetes Engine-centric Quest of best practices hands-on labs focuses on security at scale when deploying and managing production GKE environments -- specifically role-based access control, hardening, VPC networking, and binary authorization.
Prerequisites:
It is recommended that students have completed the first Quest in this series Google Kubernetes Best Practices before attempting these labs.Quest Outline
How to Use a Network Policy on Google Kubernetes Engine
In this lab you learn how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to limit intra-cluster network communication.
Using Role-based Access Control in Kubernetes Engine
After provisioning two service accounts to represent user personas and three namespaces: dev, test, and prod, you will test the access controls of the personals in each namespace.
Google Kubernetes Engine Security: Binary Authorization
This lab deploys a Kubernetes Engine Cluster with the Binary Authorization feature enabled; you'll learn how to whitelist approved container registries and the process of creating and running a signed container.
Securing Applications on Kubernetes Engine - Three Examples
In this lab you will learn how Kubernetes Engine security features can be used to grant varying levels of privilege to applications based on their particular requirements
Kubernetes Engine Communication Through VPC Peering
This lab will show you how to simplify the best practices for exposing cluster services to other clusters and establishing network links between Kubernetes Engine clusters running in separate projects.
Hardening Default GKE Cluster Configurations
This lab demonstrates some of the security concerns of a default GKE cluster configuration and the corresponding hardening measures to prevent multiple paths of pod escape and cluster privilege escalation
Enroll Now
Enroll in this quest to track your progress toward earning a badge.
