Projects in Awesome Lists tagged with gke-helmsman

https://github.com/googlecloudplatform/gke-rbac-demo

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine rbac security

Last synced: 06 Apr 2025

https://github.com/googlecloudplatform/gke-private-cluster-demo

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

containers database gcp gke gke-helmsman gke-networking kubernetes kubernetes-engine postgres postgresql private-cluster security service-account workload-identity

Last synced: 22 Jan 2025

https://github.com/GoogleCloudPlatform/gke-networking-demos

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine networking routing vpn

Last synced: 02 Apr 2025

https://github.com/googlecloudplatform/gke-networking-demos

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine networking routing vpn

Last synced: 17 Mar 2025

https://github.com/GoogleCloudPlatform/gke-monitoring-tutorial

This project walks you through setting up monitoring and visualizing metrics from a Kubernetes Engine cluster. The logs from the Kubernetes Engine cluster will be leveraged to walk through the monitoring capabilities of Stackdriver.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine monitoring stackdriver

Last synced: 02 Apr 2025

https://github.com/googlecloudplatform/gke-migration-to-containers

This demo provides a basic walkthrough of migrating a stateless application from running on a VM all the way to running it on Kubernetes Engine (GKE).

containers gke gke-helmsman kubernetes kubernetes-engine

Last synced: 10 Apr 2025

https://github.com/googlecloudplatform/gke-monitoring-tutorial

This project walks you through setting up monitoring and visualizing metrics from a Kubernetes Engine cluster. The logs from the Kubernetes Engine cluster will be leveraged to walk through the monitoring capabilities of Stackdriver.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine monitoring stackdriver

Last synced: 22 Jan 2025

https://github.com/GoogleCloudPlatform/gke-network-policy-demo

This guide demonstrates how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to network communication. You will provision a simple HTTP server and two client pods in a Kubernetes Engine cluster, then use a Network Policy restrict connections from client pods.

gke gke-helmsman kubernetes kubernetes-engine networking security

Last synced: 04 Apr 2025

https://github.com/googlecloudplatform/gke-network-policy-demo

This guide demonstrates how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to network communication. You will provision a simple HTTP server and two client pods in a Kubernetes Engine cluster, then use a Network Policy restrict connections from client pods.

gke gke-helmsman kubernetes kubernetes-engine networking security

Last synced: 05 Feb 2025

https://github.com/GoogleCloudPlatform/gke-security-scenarios-demo

This project demonstrates a series of best practices for improving the security of containerized applications deployed to Kubernetes Engine. You will deploy multiple instances of the same container image with a variety of security settings to illustrate the use of RBAC, security contexts, and AppArmor policies.

containers gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine security

Last synced: 30 Apr 2025

https://github.com/googlecloudplatform/gke-security-scenarios-demo

This project demonstrates a series of best practices for improving the security of containerized applications deployed to Kubernetes Engine. You will deploy multiple instances of the same container image with a variety of security settings to illustrate the use of RBAC, security contexts, and AppArmor policies.

containers gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine security

Last synced: 10 Feb 2025

https://github.com/GoogleCloudPlatform/gke-enterprise-demo

This demo aims to show what a fully-featured project running in Kubernetes Engine looks like. It includes Elasticsearch, a very popular open-source project for indexing and searching data, as well as some custom software to interface with it.

containers elasticsearch gke gke-helmsman kubernetes kubernetes-engine

Last synced: 02 Apr 2025

https://github.com/googlecloudplatform/gke-enterprise-demo

This demo aims to show what a fully-featured project running in Kubernetes Engine looks like. It includes Elasticsearch, a very popular open-source project for indexing and searching data, as well as some custom software to interface with it.

containers elasticsearch gke gke-helmsman kubernetes kubernetes-engine

Last synced: 17 Feb 2025

https://github.com/GoogleCloudPlatform/gke-vault-demo

This demo builds two GKE Clusters and guides you through using secrets in Vault, using Kubernetes authentication from within a pod to login to Vault, and fetching short-lived Google Service Account credentials on-demand from Vault within a pod.

containers gcp gke gke-helmsman hashicorp-vault kubernetes kubernetes-engine security vault

Last synced: 02 Apr 2025

https://github.com/googlecloudplatform/gke-vault-demo

This demo builds two GKE Clusters and guides you through using secrets in Vault, using Kubernetes authentication from within a pod to login to Vault, and fetching short-lived Google Service Account credentials on-demand from Vault within a pod.

containers gcp gke gke-helmsman hashicorp-vault kubernetes kubernetes-engine security vault

Last synced: 14 Apr 2025

https://github.com/googlecloudplatform/gke-application-security-demo

This project demonstrates a series of best practices for improving the security of containerized applications deployed to Kubernetes Engine. You will deploy multiple instances of the same container image with a variety of security settings to illustrate the use of RBAC, security contexts, and AppArmor policies.

containers gke gke-helmsman kubernetes kubernetes-engine security

Last synced: 11 Apr 2025

https://github.com/googlecloudplatform/gke-tracing-demo

This project introduces you to Stackdriver's tracing feature, and provides a distributed tracing example that can serve as a basis for your own applications. You will deploy a multi-tier application to a Kubernetes Engine cluster and trace calls between the components.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine stackdriver tracing

Last synced: 07 Apr 2025

https://github.com/GoogleCloudPlatform/gke-tracing-demo

This project introduces you to Stackdriver's tracing feature, and provides a distributed tracing example that can serve as a basis for your own applications. You will deploy a multi-tier application to a Kubernetes Engine cluster and trace calls between the components.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine stackdriver tracing

Last synced: 02 Apr 2025

https://github.com/GoogleCloudPlatform/gke-istio-telemetry-demo

This project demonstrates how to use an Istio service mesh in a single Kubernetes Engine cluster alongside Prometheus, Jaeger, and Grafana, to monitor cluster and workload performance metrics. You will first deploy the Istio control plane, data plane, and additional visibility tools using the provided scripts, then explore the collected metrics and trace data in Grafana.

gke gke-helmsman graphana istio jaeger kubernetes kubernetes-engine prometheus

Last synced: 24 Nov 2024

https://github.com/googlecloudplatform/gke-istio-telemetry-demo

This project demonstrates how to use an Istio service mesh in a single Kubernetes Engine cluster alongside Prometheus, Jaeger, and Grafana, to monitor cluster and workload performance metrics. You will first deploy the Istio control plane, data plane, and additional visibility tools using the provided scripts, then explore the collected metrics and trace data in Grafana.

gke gke-helmsman graphana istio jaeger kubernetes kubernetes-engine prometheus

Last synced: 05 Feb 2025

https://github.com/GoogleCloudPlatform/gke-ip-address-management

An application to help with IP Address Management (IPAM) for Google Kubernetes Engine (GKE) clusters. Easily allows the calculation of the subnets required to spin up GKE clusters in VPC-native mode. See it at: https://googlecloudplatform.github.io/gke-ip-address-management/

containers gcp gke gke-helmsman gke-networking kubernetes-engine kubernetes-networking

Last synced: 02 Apr 2025

https://github.com/googlecloudplatform/gke-ip-address-management

An application to help with IP Address Management (IPAM) for Google Kubernetes Engine (GKE) clusters. Easily allows the calculation of the subnets required to spin up GKE clusters in VPC-native mode. See it at: https://googlecloudplatform.github.io/gke-ip-address-management/

containers gcp gke gke-helmsman gke-networking kubernetes-engine kubernetes-networking

Last synced: 09 Apr 2025

https://github.com/googlecloudplatform/gke-terraform-generator

gke-tf was created to streamline the creation of customized Terraform source files that build GKE clusters and supporting resources in GCP.

gke gke-helmsman google-cloud kubernetes terraform

Last synced: 22 Jan 2025

https://github.com/googlecloudplatform/gke-istio-gce-demo

In this project, you will leverage Kubernetes Engine and Google Compute Engine to explore how Istio can manage services that reside outside of the Kubernetes Engine environment. You will deploy a typical Istio service mesh in Kubernetes Engine, then configure an externally deployed microservice to join the mesh.

gke gke-helmsman google-cloud-platform istio kubernetes kubernetes-engine mysql

Last synced: 19 Dec 2024

https://github.com/googlecloudplatform/gke-rolling-updates-demo

This project demonstrates a different upgrade procedures best suited for clusters containing stateless and stateful workloads. You will perform the upgrades in two stages. First, the control plane is updated, then node pools are upgraded.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine updates upgrades

Last synced: 05 Feb 2025

https://github.com/googlecloudplatform/gke-logging-sinks-demo

This project describes the steps required to deploy a sample application to Kubernetes Engine that forwards log events to Stackdriver Logging. As a part of the exercise, you will create a Cloud Storage bucket and a BigQuery dataset for exporting log data.

gke gke-helmsman google-cloud-platform kubernetes kubernetes-engine logging

Last synced: 19 Dec 2024

https://github.com/googlecloudplatform/gke-istio-vpn-demo

This project demonstrates how Istio's mesh expansion feature can be used to link services accross a VPN. The feature allows for a non-Kubernetes service running outside of the Istio infrastructure on Kubernetes Engine, to be integrated into, and managed by the Istio service mesh.

gke gke-helmsman google-cloud-platform istio kubenetes kubernetes-engine

Last synced: 05 Feb 2025

https://github.com/googlecloudplatform/gke-datadog-demo

This project demonstrates how a third party solution, like Datadog, can be used to monitor a Kubernetes Engine cluster and its workloads. Using the provided manifest, you will install Datadog and a simple nginx workload into your cluster. The Datadog agents will be configured to monitor the nginx workload, and ship metrics to your own Datadog account.

gke gke-helmsman kubernetes kubernetes-engine logging

Last synced: 19 Dec 2024