Google Kubernetes Engine for Everest June 2018

This is an accompanying repository for the GKE Everest Session in June 2018.

This is not an official Google product or tutorial.

Requirements

1. GCP Project
2. gcloud SDK (Google Cloud Shell is a free x64 Linux env with this isntalled.)
3. GCP Billing Account
4. Basic Kubernetes and GCP Knowledge

See here for pricing on relevant technologies (GKE, Storage, Networking).

Creating a GKE Cluster

This script will use gcloud to create a GKE cluster with several of the GCP and GKE constructs discussed during the session.

Clone the repo and make the scripts executable.

git clone https://github.com/agmsb/gke-everest-june-2018 && chmod +x create.sh && chmod +x delete.sh

Populate parameters in options.sh if need be and then execute create.sh.

Cleanup

Execute delete.sh to clean up anything you created with create.sh.

Demos

Global Ingress with HTTP/S Load Balancer & Kubemci

This tutorial will walk you through configuring a Global Ingress using Google's HTTP/S Load Balancer in front of multiple GKE clusters in different regions. Kubemci will be the tool to perform the configuration.

Limiting Connections with Network Policy

This tutorial will walk you through restricting incoming traffic to Pods and restricting outgoing traffic from Pods using Network Policy on GKE.

High Availability for Stateful Workloads with Regional Persistent Disks

This solution will walk you through creating a Wordpress Blog backed by MariaDB on Regional Persistent Disks. It will simulate zone failure to demonstrate the regional HA provided by GKE and Regional PDs.

Setting up Clusters with Shared VPC

This tutorial will show you how to set up two GKE clusters in the same shared VPC.

Additional Resources

1. Exploring Container Security: Isolation at different layers of the Kubernetes stack

2. Exploring Container Security: Running a Tight Ship with GKE 1.10

3. Preparing a Kubernetes Engine Environment for Production