Скачать или смотреть Ensure Access & Identity in Google Cloud: Challenge Lab (2022)

Ensure Access & Identity in Google Cloud Challenge Lab

ALL COMMANDS LINK : https://bit.ly/3dmjko4

Exact from NOTEPAD :

nano role-definition.yaml

title: "orca_storage_manager_933"
description: "Permissions"
stage: "ALPHA"
includedPermissions:
storage.buckets.get
storage.objects.get
storage.objects.list
storage.objects.update
storage.objects.create


gcloud iam roles create orca_storage_manager_933 --project $DEVSHELL_PROJECT_ID \
--file role-definition.yaml

----------------

gcloud iam service-accounts create orca-private-cluster-402-sa \
--display-name "orca-private-cluster-402-sa"

---------------

gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID \
--member serviceAccount:orca-private-cluster-402-sa@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role projects/$DEVSHELL_PROJECT_ID/roles/orca_storage_manager_933

gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID \
--member serviceAccount:orca-private-cluster-402-sa@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role roles/monitoring.viewer

gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID \
--member serviceAccount:orca-private-cluster-402-sa@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role roles/monitoring.metricWriter

gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID \
--member serviceAccount:orca-private-cluster-402-sa@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role roles/logging.logWriter


-------------------------

gcloud container clusters create orca-cluster-983 \
--num-nodes 1 --master-ipv4-cidr=172.16.0.64/28 --network orca-build-vpc --subnetwork orca-build-subnet --enable-master-authorized-networks \
--master-authorized-networks 192.168.10.2/32 --enable-ip-alias --enable-private-nodes --enable-private-endpoint \
--service-account orca-private-cluster-402-sa@qwiklabs-gcp-03-1e7d37793b7e.iam.gserviceaccount.com --zone us-east1-b

------------------

Navigate to Compute Engine in the Cloud Console.
Click on the SSH button for the orca-jumphost instance.
In the SSH window, connect to the private cluster by running the following:

gcloud container clusters get-credentials orca-cluster-983 --internal-ip --zone us-east1-b --project qwiklabs-gcp-03-1e7d37793b7e

kubectl create deployment hello-server --image=gcr.io/google-samples/hello-app:1.0

kubectl expose deployment hello-server --name orca-cluster-983 \
--type LoadBalancer --port 80 --target-port 8080


HOPE IT HELPS!
HIT SUBSCRIBE (IT MEANS A LOT)
‪@techedcs‬