Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

Common solutions and tools developed by Google Cloud's Professional Services team

Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

Instant Kubernetes-Native Application Observability

Source for Google Click to Deploy solutions listed on Google Cloud Marketplace.

Run @hashicorp Vault on Google Kubernetes Engine (GKE) with Terraform

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

A Collection of Plugins for kubectl Integration (exec as any user, context switching, etc).

Knowledge seeks no man

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Important production-grade Kubernetes Ops Services

Easily check your cluster for use of deprecated APIs

Managed Certificates for Kubernetes clusters using GCLB

Microservices demo application on cloud-hosted Kubernetes cluster

Automated Azure Arc environments

Drone plugin for deploying containers to Google Kubernetes Engine (GKE)

A solution to gracefully handle GCE VM terminations in kubernetes clusters

GitHub Action for interacting with Google Cloud Platform (GCP)

Steps and scripts for running @hashicorp Vault on @GoogleCloudPlatform Kubernetes

A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

Go-based microservices reference platform for demo of k8s observability with Istio

Run Sonatype Nexus Repository Manager OSS on top of Kubernetes (GKE). Includes instructions for automated backups (GCS) and day-to-day usage.

A Blazing fast Security Auditing tool for Kubernetes

Mastering Kubernetes with Real Life Lessons from Deploying Production Systems

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.

This project presents a number of best practices for establishing network links between Kubernetes Engine clusters, and exposing cluster services across Google Cloud projects. You will use a set of Deployment Manager templates to create networks, subnets, vpn connections, and Kubernetes Engine clusters.

This project walks you through setting up monitoring and visualizing metrics from a Kubernetes Engine cluster. The logs from the Kubernetes Engine cluster will be leveraged to walk through the monitoring capabilities of Stackdriver.

Building applications with bazel and deploying them on to GKE. This demo contains a java-spring-boot rest service and an angular front-end. Both containers are deployed on GKE.