Скачать или смотреть Secure Workloads in Google Kubernetes Engine: Challenge Lab | Learn To Earn Cloud Security Level 1|

Welcome to My YouTube channel 😍
Learn To Earn Cloud Security Level 1| Secure Workloads in Google Kubernetes Engine: Challenge Lab

Level 1- LAB SOLUTIONS!
1- Cloud IAM: Qwik Start -    • Cloud IAM: Qwik Start| Learn To Earn Cloud...  

2- Getting started with Certificate Authority Service: Qwik Start -    • Getting started with Certificate Authority...  

4- Rent-a-VM to Process Earthquake Data -    • Rent-a-VM to Process Earthquake Data| Lear...  

5 - Securing google cloud with CFT ScoreCard -    • Securing google cloud with CFT ScoreCard| ...  

6- Getting Started with Cloud KMS -    • Getting Started with Cloud KMS #GoogleClou...  

7- Google Workspace Admin: Securing -    • Google Workspace Admin: Securing | To Earn...  

8- IAM Custom Roles -    • IAM Custom Roles | Learn To Earn Cloud Sec...  

9- User Authentication: Identity-Aware Proxy - https:   • User Authentication: Identity-Aware Proxy ...  

10 - Secure Workloads in Google Kubernetes Engine: Challenge Lab -    • Secure Workloads in Google Kubernetes Engi...  

11- Prisma Cloud: Securing GKE Run Time -    • Prisma Cloud: Securing GKE Run Time | Lear...  

12- Prisma Cloud: Protect your Cloud Instance with Host Defender -    • Prisma Cloud: Protect your Cloud Instance ...  

TASK 1--------------------------

gcloud container clusters create security-demo-cluster954 \
--zone us-central1-c \
--machine-type n1-standard-4 \
--num-nodes 2 \
--enable-network-policy

TASK 2--------------------------

gcloud sql instances create wordpress-db-955 --region us-central1

gcloud iam service-accounts create sa-wordpress-442

gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID \
--member="serviceAccount:sa-wordpress-442@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com" \
--role="roles/cloudsql.client"

gcloud iam service-accounts keys create key.json --iam-account=sa-wordpress-442@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com

kubectl create secret generic cloudsql-instance-credentials --from-file key.json

kubectl create secret generic cloudsql-db-credentials \
--from-literal username=wordpress \
--from-literal password=''


TASK 3--------------------------------

helm version
helm repo add stable https://charts.helm.sh/stable
helm repo update

helm install nginx-ingress stable/nginx-ingress --set rbac.create=true

kubectl get service nginx-ingress-controller

. add_ip.sh

kubectl apply -f https://github.com/jetstack/cert-mana...

kubectl create clusterrolebinding cluster-admin-binding \
--clusterrole=cluster-admin \
--user=$(gcloud config get-value core/account)


task 4 -----------------------------------------

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-nginx-access-to-internet
spec:
podSelector:
matchLabels:
app: nginx-ingress
policyTypes:
Ingress
ingress:
{}


kubectl apply -f network-policy.yaml


TASK 5--------------------

Name - us-central1-c.security-demo-cluster954

TASK 6---------------------

kubectl apply -f psp-restrictive.yaml
kubectl apply -f psp-role.yaml
kubectl apply -f psp-use.yaml

Like 👍 share ⤵️ subscribe ♥️