GKE - Configuration Choices

Introduction

Kubernetes Architecture

GKE Architecture

GCP Public vs Private VMs

Standard vs Autopilot Cluster

GKE Public Cluster

GKE Private Cluster

Standard vs Enterprise Tier Cluster

GKE Availability Choices

Section Introduction

Note on New GKE Screen Options

PublicPrivate Node - New Option

Creating a Standard Cluster - Part 1

Creating a Standard Cluster - Part 2

Accessing the Cluster - Options

Creating a Autopilot Cluster

Accessing the Cluster - From Cloud Shell

Accessing the Cluster - From Laptop

Creating a Standard Cluster - Part 3

Accessing the Cluster - From Compute Instance

Using Kubectl - Shortcuts and Autocomplete

Sample App

Understanding Services

Create Backend Deployment & Service

See Loadbalancer in Action

Understanding Pod and Deployment

Loadbalancer with a Static IP

Create Frontend Deployment & Service

Using Config Map for Frontend App

Explore Cloud SQL Instance - Add DB and User

Run Frontend application from Browser and check DB Connection

Connecting to My SQL from Backend App

Deploy the Frontend App

Using Secret in the Deployment

Creating Private Cloud SQL - My SQL

Check App from Frontend

Connecting to Private My SQL from App

Non Secure DB Connection

Cloud Auth Proxy Introduction

Workload Identity Introduction

SQL Proxy as Sidecar

SQL Proxy as Independent Deployment

Workload Identity Setup

Volume Introduction

GKE Cluster Option for Volumes

Using Hostpath Volume

Using Existing PD - Scenarios

Using Existing PD

Using Existing PD - Regional

Using Existing Storage Class

Storage Class - Introduction

Using Custom Storage Class

Creating a Filestore

Using Existing Storage Class - Part 2

Using Existing Storage Class - Part 1

Using Existing Filestore

Using Custom Storage Class

Using Bucket in a Pod - Part 1

Storage Option - Comparision

Using Bucket in a Pod - Part 2

Basic Setup to use a Bucket

Load Balancer Introduction

Loadbalancing Open in Kubernetes

Nodeport Service in Kubernetes

Creating an External Loadbalancer

Creating an internal Loadbalancer

Loadbalancer with Static IP

Health Check with Loadbalancer

Container Native Loadbalancing in GKE

Ingress - Introduction

Creating Ingress with Static IP

Creating an Ingress

Accessing Ingress with DNS

Creating Secure (HTTPS) Connection with Ingress

Restrict Insecure (HTTP) Traffic with Ingress

Redirect HTTP to HTTPs with Ingress

Probes in Kubernetes

Creating Internal Loadbalancer with Ingress

Ingress Loadbalancer Healthcheck without Kubernetes Probe

Setting Probe & Custom Healthcheck

Attaching Certification from GCP Certificate Manager

Attaching SSL Policy with Ingress (ex - TLS 1.2)

Creating a Gateway

Gateway - Introduction

Creating Gateway with Static IP

Accessing Gateway with DNS

Redirect HTTP to HTTPs with Gateway

Creating Secure (HTTP) Connection with Gateway

Creating a Cloud Armor Security Policy

Cloud Armor - Introduction

Cloud Armor with Gateway

Cloud Armor with Ingress

Node Scheduling - An Introduction

Taints and Tolerations - Introduction

Node Affinity and Node Selector - Introduction

Nodepool - An Introduction

Creating Cluster with Node Pools

Additional Note on Node Pool

Restricting Unwanted Pods into a Node Pool

Assign Pods to a Desired Node Pool

Scaling Options in GKE

Creating Cluster with Scaling Options

Pod Vertical Scaling - VPA

Pod Horizontal Scaling - HPA

Cluster Auto Scaling

Cluster Node Auto-provisioning - Scenario 2

Scaling Down - Avoiding Application Outage - Options

Cluster Node Auto-provisioning - Scenario 1

Quality of Service (QoS) - Demo

Quality of Service (QoS) - Theory

Resource Quota

Limit Range

Creating an Autopilot Cluster

Default, Minimum & Maximum Resource Allocation in Autopilot Cluster

Choosing Node Type in Autopilot Cluster

Creating First Pod in Autopilot Cluster

Node Visibility in Autopilot Cluster

Reserve Capacity Demo

Reserving Capacity for Rapid Scaling

Introduction - Versioning in Kubernetes

Release Channels

Upgrade Options and Stretegies

Autopilot & Standard Cluster Upgrade

Security - Introduction

Cluster Visibility

Service Account - Best Practices

Cluster Access and Privileges - RBAC - Introduction

Cluster Access and Privileges - RBAC - Demo 1

Cluster Access and Privileges - RBAC - Demo 2

Network Policy Logging

Kubernetes Network Policy

Security Posture Management

Workload Scanning

Security - Conclusion

Understanding Binary Authorization

Create a Cluster with Binary Authorization

Setup Policy and Attestor

Deploy and Test Signed Image

Creating an Image and Attestor Signing

Observability in GKE

Logging in GKE

Monitoring in GKE

Anthos Introduction

Creating a GKE Cluster with Anthos Service Mesh

Cluster Walk through after enabling Service Mesh

Deploying Istio Components in the GKE Cluster

Anthos Service Mesh Dashboard

Dashboard Revisit for asmcli option

Service Mesh with GKE Enterprise

Configure Service Mesh using asmcli option

Enterprise GKE - Introduction

Enterprise GKE - Console Walk-through

Enterprise GKE - Features

Fleet - Adding a Cluster to a Fleet

Fleet - Introduction

Enable Enterprise GKE

Fleet - Adding Cluster to a Fleet from another Project

Create Clusters in Enterprise Tier

Posture Management - Enabling Security

Posture Management - Compliance

Posture Management - Security - Reporting Concerns

Policy - Introduction

Policy - Enable Policies and Demo

Policy - Constraints Demo

Teams - Introduction

Policy - Understanding Constraints

Teams - Demo

Config Sync - Introduction & Enable

Multi Cluster Loadbalancing

Config Sync - Deployment Demo

Config Sync - Git Sync Demo

Multi Cluster Ingress - Introduction

Multi Cluster Ingress - Demo Part 1

Multi Cluster Ingress - Demo Part 2

Multi Cluster Ingress - Miscellaneous

Multi Cluster Ingress - Demo Part 3

Multi Cluster Gateway - Introduction

Multi Cluster Gateway - Demo Part 2

Multi Cluster Gateway - Demo Part 1

Multi Cluster Gateway - Demo Part 3

Enterprise GKE - Pricing

Understanding Cost for GKE Cluster

Cost Saving in GKE Cluster

Using Multiple Cluster - Moving Between Contexts

Using Multiple Cluster - Understanding Context

Using Multiple Cluster - Namespace specific Context

Using Artifact Registry