<

LA Containers>

CLUSTERS

SECURITY NETWORKING

OVERVIEW

STATEFUL ON- PREMISES

APPS

OTHER
SERVICES
 Or chest r at ing Clust er s

<
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

App
Engine

Data

Cloud Cloud Cloud

St or age Dat ast or e SQL

Kuber net es
Engine
 Kuber net es Engine Ar chit ect ur e

<
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

App Engine

Data

Cloud Cloud Cloud SQL

Storage Datastore

Kuber net es
Engine
 Kuber net es Engine Cost s

<
LA Containers>

Deskt op / Mobile

Cloud Load Balancing

App Engine

Data

Cloud Storage Cloud Datastore Cloud SQL

Kubernetes Cluster

Node Node

Kuber net es
$ Engine
 Spinning Up Your Fir st Clust er

<
LA Containers>

Deskt op / Mobile

Cloud Load Balancing

App Engine

Data

Cloud Storage Cloud Datastore Cloud SQL

Kubernetes Cluster

Node Node Node Node

Kuber net es
Engine
 Deploying t o Your Clust er

<
LA Containers>

Deskt op / Mobile

Kubernetes Cluster

Node Node Node Node

Kuber net es
Engine
 Scaling Up Clust er s & Applicat ions

<
LA Containers>

Deskt op / Mobile

X
Kubernetes Cluster
Pod

< >

Node Node Node Node

Kuber net es
Engine
 Upgr ading and Delet ing Clust er s

<
LA Containers>

Deskt op / Mobile

Kubernetes Cluster

Node Node Node Node

Kuber net es
Engine
Node Node Node Node
 Hands- On Demo: Clust er s

<
LA Containers>
Hands- On: Clust er s
1. Create Cluster
Deskt op / Mobile 2. Deploy App
- Write code
- Containerize appX
- Store in registry
Hands- On Specif icat ions - Deploy to cluster
- Expose
- Create a Kubernetes Engine
Cloud Load
cluster3.with 4 nodes
Scale cluster
Balancing 4. Scale app
- Zone: us-east4-a 5. Delete cluster
Kubernetes Cluster
- 4GB minimum allocatable for each node
- Enable auto-upgrade and auto-repair
- Deploy lac-app-100
- ScaleNode
Node Node
cluster to 6 nodes Node Node Node
Kuber net es
Engine
- Scale app to 4 replicas
- Set max surge to 4
- Delete cluster but keep app in Container Registry

Cont ainer
Regist r y

lac- app- 100

 Int egr at ing wit h Cloud IAM
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

Cloud IAM
 Managing Role Based Access Cont r ol

<<
<
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

Cloud IAM

DevOps Pr oject Administ r at or s

Owner
 Est ablishing a Pod Secur it y Policy

<<
<
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

RBAC RBAC
Namespace Clust er - wide
Rol e Cl us t er Rol e
Cloud IAM

DevOps Pr oject Administ r at or s

Owner
 Implement ing Secur it y Pr ot ocols

<<
<
LA Containers>

Deskt op / Mobile

Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

Cloud IAM

DevOps Pr oject Administ r at or s

Owner
 Hands- on Demo: GKE Secur it y

<<
<
LA Containers>
Hands- On: Secur it y
1. Create Cluster
Deskt op / Mobile 2. Add 2 users
- GKE Admin
- GKE Developer
3. Add service account
- GKE Viewer
4. Set Pod Security Policy
Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

RBAC
Pod Namespace
Rol e
Cloud IAM Service
Account

Pr oject
Developer Administ r at or
Owner
 Conf igur ing Load Balancer s

<
LA Containers>

Deskt op / Mobile

Kubernetes Cluster

Node Node

Mast er
Node

Node Node
 Est ablishing a Net wor k Policy

<<
LA Containers>

Deskt op / Mobile

Ext er nal Load

Balancer

Kubernetes Cluster

Node Node

Mast er
Node

Node Node
 Cr eat ing a Pr ivat e Clust er

<
LA Containers>

Deskt op / Mobile

Ext er nal Load

Balancer

Kubernetes Cluster

Node Node

Mast er
Node

Node Node
 Hands- on Demo: Net wor king

<<
<
LA Containers>
Specif icat ions Hands On: Net wor king
- Allow GKE to assign 1. Set up internal load
load balancer IP Deskt op / Mobile balancer
- Use default for load 2. Create private cluster
balancer source range 3. Add network policy

Comput e Int er nal Ext er nal Load

Engine Load Balancer
Balancer
Net wor k Kubernetes Cluster
Policy
Kubernetes Cluster

Pod

Node Node Node Node

Mast er Mast er
Node Node

Node Node Node Node

 Implement ing St at ef ul Applicat ions

<
LA Containers>

Deskt op / Mobile

Cloud Load Balancing

App Engine

Data

Cloud Cloud Cloud SQL

Storage Datastore

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine
 Int egr at ing Ot her GCP Ser vices

<<
<
LA Containers>

Deskt op / Mobile

Cloud Load Balancing

App Engine

Data

Cloud Cloud Cloud SQL

Storage Datastore

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine
 Monit or ing & Logging wit h St ackdr iver

<<
LA Containers

Deskt op / Mobile

Cloud Load
Balancing

Kubernetes Cluster

Node Node Kuber net es Node Node

Engine

Stackdriver Kubernetes