Book Image

Google Cloud for DevOps Engineers

By : Sandeep Madamanchi
Book Image

Google Cloud for DevOps Engineers

By: Sandeep Madamanchi

Overview of this book

DevOps is a set of practices that help remove barriers between developers and system administrators, and is implemented by Google through site reliability engineering (SRE). With the help of this book, you'll explore the evolution of DevOps and SRE, before delving into SRE technical practices such as SLA, SLO, SLI, and error budgets that are critical to building reliable software faster and balance new feature deployment with system reliability. You'll then explore SRE cultural practices such as incident management and being on-call, and learn the building blocks to form SRE teams. The second part of the book focuses on Google Cloud services to implement DevOps via continuous integration and continuous delivery (CI/CD). You'll learn how to add source code via Cloud Source Repositories, build code to create deployment artifacts via Cloud Build, and push it to Container Registry. Moving on, you'll understand the need for container orchestration via Kubernetes, comprehend Kubernetes essentials, apply via Google Kubernetes Engine (GKE), and secure the GKE cluster. Finally, you'll explore Cloud Operations to monitor, alert, debug, trace, and profile deployed applications. By the end of this SRE book, you'll be well-versed with the key concepts necessary for gaining Professional Cloud DevOps Engineer certification with the help of mock tests.
Table of Contents (17 chapters)
1
Section 1: Site Reliability Engineering – A Prescriptive Way to Implement DevOps
6
Section 2: Google Cloud Services to Implement DevOps via CI/CD
Appendix: Getting Ready for Professional Cloud DevOps Engineer Certification

Chapter 9: Securing the Cluster Using GKE Security Constructs

Kubernetes, or K8s, is an open source container orchestration system that runs containerized applications but requires significant effort to set up and maintain. Google Kubernetes Engine (GKE) is an enhanced version of K8s that is managed in nature, abstracts the master plane components from the user, provides the ability to auto-upgrade, and supports features such as DNS, logging, and monitoring dashboards as built-ins rather than maintaining them as external plugins. Kubernetes has a lot of critical concepts, jargon, and objects. The last two chapters (Chapter 7, Understanding Kubernetes Essentials to Deploy Containerized Applications, and Chapter 8, Understanding GKE Essentials to Deploy Containerized Applications) focused on native Kubernetes features such as cluster anatomy, elaborated on key Kubernetes objects, and discussed how applications are scheduled on a cluster. In addition, the focus was extended to learning...