Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

Common solutions and tools developed by Google Cloud's Professional Services team

Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

Source for Google Click to Deploy solutions listed on Google Cloud Marketplace.

Run @hashicorp Vault on Google Kubernetes Engine (GKE) with Terraform

Instant Kubernetes-Native Application Observability

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

Knowledge seeks no man

A Collection of Plugins for kubectl Integration (exec as any user, context switching, etc).

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Important production-grade Kubernetes Ops Services

Managed Certificates for Kubernetes clusters using GCLB

Easily check your cluster for use of deprecated APIs

Microservices demo application on cloud-hosted Kubernetes cluster

Drone plugin for deploying containers to Google Kubernetes Engine (GKE)

Steps and scripts for running @hashicorp Vault on @GoogleCloudPlatform Kubernetes

A solution to gracefully handle GCE VM terminations in kubernetes clusters

GitHub Action for interacting with Google Cloud Platform (GCP)

A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

Go-based microservices reference platform for demo of k8s observability with Istio

Run Sonatype Nexus Repository Manager OSS on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.

Mastering Kubernetes with Real Life Lessons from Deploying Production Systems

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.

Building applications with bazel and deploying them on to GKE. This demo contains a java-spring-boot rest service and an angular front-end. Both containers are deployed on GKE.

This project walks you through setting up monitoring and visualizing metrics from a Kubernetes Engine cluster. The logs from the Kubernetes Engine cluster will be leveraged to walk through the monitoring capabilities of Stackdriver.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

A walk through of RBAC on a Google GKE Kubernetes 1.6 cluster.