JaymesKat/GCP-hands-on-practice

Documentation of completed GCP Qwiks labs for Google Africa Developer Associate Scholarship (GADS) program # GCP-hands-on-practice Documentation of completed GCP Qwiks labs for Google Africa Developer Associate Scholarship (GADS) program **Completed Hands-on Labs** (View screenshots here) 1. Cloud IAM 2. Working with multiple VPC networks 3. Controlling access to multiple VPC networks 4. Virtual Private Networks (VPN) 5. Controlling an HTTP Load Balancer with Autoscaling 6. Caching Storage Content with Cloud CDN 7. Implement Private Google Access and Cloud NAT 8. AK8S-03 Creating a GKE Cluster 9. Configuring an Internal Load Balancer 10. AK8S-05 Upgrading Kubernetes Engine Clusters 11. AK8S-06 Creating Kubernetes Engine Deployments ## **Labs translated to gcloud command line instructions** ### **Lab1: Configuring an Internal Load Balancer** **Reference architecture** **Initial set up** - Open command line terminal (Ensure you have installed and set up Google Cloud SDK in your local environment) - Ensure gcloud is authenticated with a user with permissions to administer Compute Engine - Set default project `gcloud config set project [PROJECT ID]` It will be referenced later using the `$DEV_SHELL_PROJECT_ID` variable. - The network **my-internal-app** with **subnet-a** and **subnet-b** and firewall rules for **RDP**, **SSH**, and **ICMP** traffic have been configured for you. **Steps** 1. **Create internal traffic and health check firewall rules** - Create a firewall rule to allow traffic from any sources in the 10.10.0.0/16 range ``` gcloud compute firewall-rules create fw-allow-lb-access \ --direction=INGRESS \ --priority=1000 \ --network=my-internal-app \ --action=ALLOW \ --rules=all \ --source-ranges=10.10.0.0/16 \ --target-tags=backend-service ``` - Create the health check rule ``` gcloud compute firewall-rules create fw-allow-health-checks \ --direction=INGRESS \ --priority=1000 \ --network=my-internal-app \ --action=ALLOW \ --rules=tcp:80 \ --source-ranges=130.211.0.0/22,35.191.0.0/16 \ --target-tags=backend-service ``` 2. **Create a NAT configurati …