Ensure Access & Identity in Google Cloud: Challenge Lab

 

FOLLOW THE STEPS CORRECTLY:

Task 1 : Create a custom security role :-

Activate Cloud Shell:

nano role-definition.yaml

// Copy the below content to file :-

title: "orca_storage_update"
description: "Permissions"
stage: "ALPHA"
includedPermissions:
- storage.buckets.get
- storage.objects.get
- storage.objects.list
- storage.objects.update
- storage.objects.create

// Save by : ctrl + o -> enter -> ctrl + x

gcloud iam roles create orca_storage_update --project $DEVSHELL_PROJECT_ID \
--file role-definition.yaml

----------------------------------------------------------------------------------------------------------------------------------------------

Task 2 & 3 : Create a service account and Bind a custom security role to an account :-

// Navigate to IAM & Admin -> Service Accounts -> CREATE SERVICE ACCOUNT.

  Service account name : orca-private-cluster-sa , then click create and add roles.
  Roles : orca_storage_update
          Monitoring Viewer
          Monitoring Metric Writer
          Logs Writer

// Click CONTINUE -> DONE

----------------------------------------------------------------------------------------------------------------------------------------------

Task 4 : Create and configure a new Kubernetes Engine private cluster :-

// Replace the project id :-

gcloud container clusters create orca-test-cluster --num-nodes 1 --master-ipv4-cidr=172.16.0.64/28 --network orca-build-vpc --subnetwork orca-build-subnet --enable-master-authorized-networks  --master-authorized-networks 192.168.10.2/32 --enable-ip-alias --enable-private-nodes --enable-private-endpoint --service-account orca-private-cluster-sa@<Project ID>.iam.gserviceaccount.com --zone us-east1-b

----------------------------------------------------------------------------------------------------------------------------------------------

Task 5 : Deploy an application to a private Kubernetes Engine cluster :-
// SSH to orca-jumphost VM instance

// Replace the project id :-

gcloud container clusters get-credentials orca-test-cluster --internal-ip --zone us-east1-b --project <Project ID>

kubectl create deployment hello-server --image=gcr.io/google-samples/hello-app:1.0

Comments

Post a Comment

Popular posts from this blog

Create ML Models with BigQuery ML:Challenge Lab

Image
  GSP341 : Create ML Models with BigQuery ML: Challenge Lab :- ---------------------------------------------------------------------------------------------------------------------------------------------- Task 1: Create a dataset to store your machine learning models :- In Cloud Shell :- bq mk austin // Navigation Menu -> BigQuery. ---------------------------------------------------------------------------------------------------------------------------------------------- Task 2: Create a forecasting BigQuery machine learning model :- // In BigQuery Console Query Editor :- CREATE OR REPLACE MODEL austin.location_model OPTIONS   (model_type='linear_reg', labels=['duration_minutes']) AS SELECT     start_station_name,     EXTRACT(HOUR FROM start_time) AS start_hour,     EXTRACT(DAYOFWEEK FROM start_time) AS day_of_week,     duration_minutes, FROM     `bigquery-public-data.austin_bikeshare.bikeshare_trips` AS trips JOIN   ...
Read more

My Experience in LGM-SOC

Image
 Hello everyone we all know that now a days open source has become a new craze between all of us we are just attracted towards. Few months before I applied in the LGM SOC as  I started contributing over there it help me a lot in merging my first pr in the open source project. letsgrowmore.in To say in short: It’s a project of which the source code is open to everyone, and everyone is able and allowed to participate, be it by writing bugfixes, major changes, … Most commercial products clearly don’t fall under this category, seeing as they’re in house and the code is only accessible to developers of that company. Github, however, is filled with projects that are. All you need to do, is pull a project, create a branch, and start coding. Of course, if you first get on the same page as the maintainers, the chances of your changes being merged into the master branch are bigger. A very well known example of an Open Source project: Linux operating systems. You find a bug? go ahead and...
Read more