All Projects → jcbsmpsn → gke-rbac-walkthrough

jcbsmpsn / gke-rbac-walkthrough

Licence: Apache-2.0 license
A walk through of RBAC on a Google GKE Kubernetes 1.6 cluster.

Projects that are alternatives of or similar to gke-rbac-walkthrough

gke-rbac-demo
This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC a…
Stars: ✭ 138 (+115.63%)
Mutual labels:  gke, rbac
gke-anthos-holistic-demo
This repository guides you through deploying a private GKE cluster and provides a base platform for hands-on exploration of several GKE related topics which leverage or integrate with that infrastructure. After completing the exercises in all topic areas, you will have a deeper understanding of several core components of GKE and GCP as configure…
Stars: ✭ 55 (-14.06%)
Mutual labels:  gke, rbac
k8s-security-demos
Demos for several kubernetes security features
Stars: ✭ 60 (-6.25%)
Mutual labels:  gke, rbac
zf3-circlical-user
Turnkey Authentication, Identity, and RBAC for Laminas and Zend Framework 3. Supports Doctrine and Middleware.
Stars: ✭ 35 (-45.31%)
Mutual labels:  rbac
react-rbac-ui-manager
react-rbac-ui-manager is a simple RBAC (Role Based Access Control) user interface library based on the material design system using the Material-UI lib.
Stars: ✭ 73 (+14.06%)
Mutual labels:  rbac
kubernetes-elastic-agents
Kubernetes Elastic agent plugin for GoCD
Stars: ✭ 35 (-45.31%)
Mutual labels:  gke
laravel-php-k8s
Just a simple port of renoki-co/php-k8s for easier access in Laravel
Stars: ✭ 71 (+10.94%)
Mutual labels:  gke
ToBeAdmin
beego 与 Ant Design Pro Vue 基础权限系统
Stars: ✭ 38 (-40.62%)
Mutual labels:  rbac
k8s-istio-observe-frontend
Angular 12-based front-end UI for k8s Golang observability project: https://github.com/garystafford/k8s-istio-observe-backend/tree/2021-istio
Stars: ✭ 20 (-68.75%)
Mutual labels:  gke
scheduled-scaler
No description or website provided.
Stars: ✭ 68 (+6.25%)
Mutual labels:  gke
kubernetes-vault
Run Hashicorp Vault on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.
Stars: ✭ 15 (-76.56%)
Mutual labels:  gke
gke-istio-gce-demo
In this project, you will leverage Kubernetes Engine and Google Compute Engine to explore how Istio can manage services that reside outside of the Kubernetes Engine environment. You will deploy a typical Istio service mesh in Kubernetes Engine, then configure an externally deployed microservice to join the mesh.
Stars: ✭ 53 (-17.19%)
Mutual labels:  gke
gtoken
Securely access AWS services from GKE cluster
Stars: ✭ 43 (-32.81%)
Mutual labels:  gke
vault-terraform-demo
Deploy HashiCorp Vault with Terraform in GKE.
Stars: ✭ 47 (-26.56%)
Mutual labels:  gke
sqlx-adapter
Asynchronous casbin adapter for mysql, postgres, sqlite based on sqlx-rs
Stars: ✭ 27 (-57.81%)
Mutual labels:  rbac
gke-istio-telemetry-demo
This project demonstrates how to use an Istio service mesh in a single Kubernetes Engine cluster alongside Prometheus, Jaeger, and Grafana, to monitor cluster and workload performance metrics. You will first deploy the Istio control plane, data plane, and additional visibility tools using the provided scripts, then explore the collected metrics …
Stars: ✭ 55 (-14.06%)
Mutual labels:  gke
objection-authorize
isomorphic, "magical" authorization integration with Objection.js 🎉
Stars: ✭ 71 (+10.94%)
Mutual labels:  rbac
croc-hunter-jenkinsx
Croc Hunter demo, deployed with Jenkins X
Stars: ✭ 19 (-70.31%)
Mutual labels:  gke
google-managed-certs-gke
DEPRECATED: How to use Google Managed SSL Certificates on GKE
Stars: ✭ 16 (-75%)
Mutual labels:  gke
multitenant-microservices-demo
Full Isolation in Multi-Tenant SaaS with Kubernetes + Istio
Stars: ✭ 57 (-10.94%)
Mutual labels:  gke

gke-rbac-walkthrough

This is not an official Google product.

A walk through of RBAC in Kubernetes 1.6 on a Google Container Engine (GKE) cluster.

Prerequisites:

  1. gcloud utility installed
    • It must be version 151+. Run gcloud version | grep "Google Cloud SDK" to confirm.
  2. kubectl installed
    • It must be version 1.6+. Run kubectl version to confirm.

Labs

  1. Create a cluster
  2. Create GCP Service Accounts to use for authenticating
  3. Create some namespaces
  4. Create roles and role bindings
  5. Create cluster roles and role bindings
  6. Using Existing Cluster Roles
  7. Accessing the API from a Pod
  8. Cleaning up
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].