Ensure Access & Identity in Google Cloud: Challenge Lab

 

FOLLOW THE STEPS CORRECTLY:

Task 1 : Create a custom security role :-

Activate Cloud Shell:

nano role-definition.yaml

// Copy the below content to file :-

title: "orca_storage_update"
description: "Permissions"
stage: "ALPHA"
includedPermissions:
- storage.buckets.get
- storage.objects.get
- storage.objects.list
- storage.objects.update
- storage.objects.create

// Save by : ctrl + o -> enter -> ctrl + x

gcloud iam roles create orca_storage_update --project $DEVSHELL_PROJECT_ID \
--file role-definition.yaml

----------------------------------------------------------------------------------------------------------------------------------------------

Task 2 & 3 : Create a service account and Bind a custom security role to an account :-

// Navigate to IAM & Admin -> Service Accounts -> CREATE SERVICE ACCOUNT.

  Service account name : orca-private-cluster-sa , then click create and add roles.
  Roles : orca_storage_update
          Monitoring Viewer
          Monitoring Metric Writer
          Logs Writer

// Click CONTINUE -> DONE

----------------------------------------------------------------------------------------------------------------------------------------------

Task 4 : Create and configure a new Kubernetes Engine private cluster :-

// Replace the project id :-

gcloud container clusters create orca-test-cluster --num-nodes 1 --master-ipv4-cidr=172.16.0.64/28 --network orca-build-vpc --subnetwork orca-build-subnet --enable-master-authorized-networks  --master-authorized-networks 192.168.10.2/32 --enable-ip-alias --enable-private-nodes --enable-private-endpoint --service-account orca-private-cluster-sa@<Project ID>.iam.gserviceaccount.com --zone us-east1-b

----------------------------------------------------------------------------------------------------------------------------------------------

Task 5 : Deploy an application to a private Kubernetes Engine cluster :-
// SSH to orca-jumphost VM instance

// Replace the project id :-

gcloud container clusters get-credentials orca-test-cluster --internal-ip --zone us-east1-b --project <Project ID>

kubectl create deployment hello-server --image=gcr.io/google-samples/hello-app:1.0

Comments

Post a Comment

Popular posts from this blog

Perform Foundational Data, ML, and AI Tasks in Google Cloud

Image
  Task 1: Run a simple Dataflow job In this task, you have to transfer the data in a CSV file to BigQuery using Dataflow via Pub/Sub. First of all, you need to create a BigQuery dataset called  lab  and a Cloud Storage bucket called with your project ID. 1.1 Created a BigQuery dataset called  lab In the Cloud Console, click on  Navigation Menu  >  BigQuery . Select your project in the left pane. Click  CREATE DATASET . Enter  lab  in the Dataset ID, then click  Create dataset . Run  gsutil cp gs://cloud-training/gsp323/lab.schema .  in the Cloud Shell to download the schema file. View the schema by running  cat lab.schema . Go back to the Cloud Console, select the new dataset  lab  and click  Create Table . In the Create table dialog, select  Google Cloud Storage  from the dropdown in the Source section. Copy  gs://cloud-training/gsp323/lab.csv  to  Select file from GCS bucket . Enter  customers  to “Table name” in the Destination section. Enable  Edit as text  and copy the JSON dat
Read more

Create ML Models with BigQuery ML:Challenge Lab

Image
  GSP341 : Create ML Models with BigQuery ML: Challenge Lab :- ---------------------------------------------------------------------------------------------------------------------------------------------- Task 1: Create a dataset to store your machine learning models :- In Cloud Shell :- bq mk austin // Navigation Menu -> BigQuery. ---------------------------------------------------------------------------------------------------------------------------------------------- Task 2: Create a forecasting BigQuery machine learning model :- // In BigQuery Console Query Editor :- CREATE OR REPLACE MODEL austin.location_model OPTIONS   (model_type='linear_reg', labels=['duration_minutes']) AS SELECT     start_station_name,     EXTRACT(HOUR FROM start_time) AS start_hour,     EXTRACT(DAYOFWEEK FROM start_time) AS day_of_week,     duration_minutes, FROM     `bigquery-public-data.austin_bikeshare.bikeshare_trips` AS trips JOIN     `bigquery-public-data.austin_bikeshare.bikesha
Read more