gke

Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

Instant Kubernetes-Native Application Observability

Common solutions and tools developed by Google Cloud's Professional Services team

A Blazing fast Security Auditing tool for Kubernetes

Easily check your clusters for use of deprecated APIs

Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

Source for Google Click to Deploy solutions listed on Google Cloud Marketplace.

Run @hashicorp Vault on Google Kubernetes Engine (GKE) with Terraform

A Collection of Plugins for kubectl Integration (exec as any user, context switching, etc).

Automated Azure Arc environments

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

Important production-grade Kubernetes Ops Services

Assign static external IPs from predefined pool of external IP addresses to Google GKE nodes so your customers could whitelist them

Microservices demo application on cloud-hosted Kubernetes cluster

Managed Certificates for Kubernetes clusters using GCLB

Unofficial PHP client for Kubernetes. It supports any form of authentication, the exec API, and it has an easy implementation for CRDs.

GitHub Action for interacting with Google Cloud Platform (GCP)

A solution to gracefully handle GCE VM terminations in kubernetes clusters

Drone plugin for deploying containers to Google Kubernetes Engine (GKE)

Go-based microservices reference platform for demo of k8s observability with Istio

Steps and scripts for running @hashicorp Vault on @GoogleCloudPlatform Kubernetes

A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

Mastering Kubernetes with Real Life Lessons from Deploying Production Systems

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Run Sonatype Nexus Repository Manager OSS on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.