Google Cloud Skills Boost

Google Kubernetes Engine Best Practices: Security

7 hours Advanced universal_currency_alt 28 Credits
Get Anthos Ready. This second Google Kubernetes Engine-centric Quest of best practices hands-on labs focuses on security at scale when deploying and managing production GKE environments -- specifically role-based access control, hardening, VPC networking, and binary authorization. Looking for a hands on challenge lab to demonstrate your skills and validate your knowledge? On completing this quest, enroll in and finish the additional challenge lab at the end of this quest to receive an exclusive Google Cloud digital badge.
Badge for Google Kubernetes Engine Best Practices: Security

When you complete this activity, you can earn the badge displayed above! View all the badges you have earned by visiting your profile page. Boost your cloud career by showing the world the skills you have developed!

  • Lab

    Migrating to GKE Containers

    This lab teaches you how to migrate a stateless application from running on a VM to running on Kubernetes Engine (GKE). You will learn about the lifecycle of an application transitioning from a typical VM/OS-based deployment to three different containerized cloud infrastructure platforms.

  • Lab

    warning How to Use a Network Policy on Google Kubernetes Engine

    In this lab you learn how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to limit intra-cluster network communication.

  • Lab

    warning Using Role-based Access Control in Kubernetes Engine

    After provisioning two service accounts to represent user personas and three namespaces for dev, test, and prod, you will test the access controls of the personals in each namespace.

  • Lab

    warning Google Kubernetes Engine Security: Binary Authorization

    This lab deploys a Kubernetes Engine Cluster with the Binary Authorization feature enabled; you'll learn how to whitelist approved container registries and the process of creating and running a signed container.

  • Lab

    warning Securing Applications on Kubernetes Engine - Three Examples

    In this lab you will learn how Kubernetes Engine security features can be used to grant varying levels of privilege to applications based on their particular requirements

  • Lab

    warning Hardening Default GKE Cluster Configurations

    This lab demonstrates some of the security concerns of a default GKE cluster configuration and the corresponding hardening measures to prevent multiple paths of pod escape and cluster privilege escalation

  • info
    Quest Info
    Prerequisites
    It is recommended that students have completed the first Quest in this series Google Kubernetes Best Practices before attempting these labs.
    Available languages
    English and 日本語
    What do I do when I finish this quest?
    After finishing this quest, you can explore additional content in your learning path or browse the learning catalog.
    What badges can I earn?
    Upon finishing a quest, you will earn a badge of completion. Some quests test your ability to apply your knowledge via a final assessment challenge lab. For these quests, you will receive a skill badge. Badges can be viewed on your profile and shared with your social network.