Common solutions and tools developed by Google Cloud's Professional Services team

Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

Source for Google Click to Deploy solutions listed on Google Cloud Marketplace.

Run @hashicorp Vault on Google Kubernetes Engine (GKE) with Terraform

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

Knowledge seeks no man

A Collection of Plugins for kubectl Integration (exec as any user, context switching, etc).

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Important production-grade Kubernetes Ops Services

Managed Certificates for Kubernetes clusters using GCLB

Drone plugin for deploying containers to Google Kubernetes Engine (GKE)

Steps and scripts for running @hashicorp Vault on @GoogleCloudPlatform Kubernetes

GitHub Action for interacting with Google Cloud Platform (GCP)

A solution to gracefully handle GCE VM terminations in kubernetes clusters

A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

Go-based microservices reference platform for demo of k8s observability with Istio

Run Sonatype Nexus Repository Manager OSS on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.

Instantly debug your Go applications on Kubernetes

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.

Mastering Kubernetes with Real Life Lessons from Deploying Production Systems

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.

Building applications with bazel and deploying them on to GKE. This demo contains a java-spring-boot rest service and an angular front-end. Both containers are deployed on GKE.

This project walks you through setting up monitoring and visualizing metrics from a Kubernetes Engine cluster. The logs from the Kubernetes Engine cluster will be leveraged to walk through the monitoring capabilities of Stackdriver.

A walk through of RBAC on a Google GKE Kubernetes 1.6 cluster.

This project demonstrates a series of best practices for improving the security of containerized applications deployed to Kubernetes Engine. You will deploy multiple instances of the same container image with a variety of security settings to illustrate the use of RBAC, security contexts, and AppArmor policies.

This demo provides a basic walkthrough of migrating a stateless application from running on a VM all the way to running it on Kubernetes Engine (GKE).

Binary Authorization is a Google Cloud Platform (GCP) managed service that works closely with Google Kubernetes Engine (GKE) to enforce deploy-time security controls to ensure that only trusted container images are deployed. This demo deploys a GKE cluster with the Binary Authorization feature enabled, demonstrates its use.

K8s deployment rollback system based on system observability principles of modern stacks