Google Kubernetes Engine (GKE)

ConfigMaps and Secrets: ConfigMaps and Secrets are used to store configuration data and sensitive information, respectively. ConfigMaps can store key-value pairs, files, or directories, while Secrets are used to store sensitive data like passwords and API keys.

Command: kubectl create configmap [CONFIGMAP_NAME] –from-file=[FILE_PATH]

Command: kubectl create secret generic [SECRET_NAME] –from-file=[FILE_PATH]

Logging and Monitoring: GKE integrates with Google Cloud’s operations suite, including Cloud Logging and Cloud Monitoring, to provide centralized logging and monitoring of your cluster and its applications.

Command: kubectl logs [POD_NAME] Command: kubectl top pod [POD_NAME]

Network Policies: Network policies define how pods communicate with each other and with other network endpoints. GKE supports Kubernetes network policies to control ingress and egress traffic between pods in a cluster.

RBAC and IAM: Role-Based Access Control (RBAC) and Identity and Access Management (IAM) are used to manage access to GKE resources. RBAC defines roles and permissions for Kubernetes resources, while IAM provides access control for GKE and other Google Cloud services.

Command: kubectl create -f [RBAC_MANIFEST_FILE]
Command: gcloud projects add-iam-policy-binding [PROJECT_ID] –member=[MEMBER] –role=[ROLE]

GKE Autopilot: GKE Autopilot is a fully managed mode of GKE that automatically provisions and manages the underlying infrastructure, including nodes, scaling, and updates. Autopilot clusters are optimized for security, cost, and performance, allowing you to focus on your applications.

Command: gcloud container clusters create-auto [CLUSTER_NAME] –region [REGION]

GKE API: The GKE API allows you to manage GKE resources programmatically, including creating and deleting clusters, updating configurations, and monitoring the status of your resources.
Migrating to GKE: When migrating workloads to GKE, you can use tools like Migrate for Anthos, which automates the migration of VMs, containerizing applications, and deploying them to GKE.
Integration with other Google Cloud services: GKE can be integrated with various Google Cloud services like Cloud Storage, BigQuery, Pub/Sub, and more, enabling seamless data processing, analysis, and storage across services.

Multi-cluster Management: GKE allows you to manage multiple clusters across different regions and environments, providing a unified control plane for managing resources, monitoring, and deploying applications across clusters.

Command: gcloud container hub memberships register [CLUSTER_NAME] –gke-uri=[GKE_URI]

Binary Authorization: Binary Authorization is a security feature in GKE that ensures only trusted container images are deployed in your cluster. By integrating with your CI/CD pipeline, it enforces policies for container images before they are deployed.
GKE Private Clusters: Private clusters restrict access to the control plane and nodes by placing them in a private network, ensuring that they are not exposed to the public internet. This enhances the security of your applications and data.