14

I think what you are looking for is an Open Source project that can take inputs from both Amazon CloudWatch and Google StackDriver; there isn't a huge amount out there at the moment, but I will detail what I know. I have made the assumption that you know how to import your application telemetry into the solutions below. Open Source Open source solutions ...


7

Note: I'm not a GCE user yet, the answer is based solely on documentation. You could be Viewing Audit Logs in the Google Cloud Console, more specifically the Admin Activity logs: Admin Activity logs contain log entries for API calls or other administrative actions that modify the configuration or metadata of resources. For example, the logs record ...


5

You can't add deny rules to GC firewall. The default policy is Deny. You can only add allow rules - allow everything you need and let everything else get rejected. Since the ports you need to block are allowed by default, you simply need to remove them. Check the name of the default rule: gcloud compute firewall-rules list [NAME …] [--regexp=REGEXP, -r ...


5

It's would be better if you will use ClusterIP type as a service than apply Ingress resource on it https://kubernetes.io/docs/concepts/services-networking/ingress/#single-service-ingress


4

I don't know much about Redis/ElasticSearch, but GCS is not really a database-like solution, it is closer to a file storage solution. If you're looking for database-like storage Google Cloud offers: Cloud SQL Cloud Bigtable Cloud Datastore Cloud Spanner If you expect a modest app traffic or alternating high/low traffic it might be more cost-effective (and ...


4

It seems that my cluster is capped at 3% of maximum utilization, if I read the units correctly. This makes no sense at all, why isn't it capable of reaching 100% ? Why do you think it does make no sense at all? I ran a few tests that created quite a few pods What is a few tests? (each pod running basically an hello world script) What does this ...


3

If you cordon and drain the nodepool before deleting it, then you can avoid downtime. I use the following script (shamelessly taken from the lazyweb elsewhere and adapted to my needs): oldpool=pool-1 oldnodes=$(k get no --selector='cloud.google.com/gke-nodepool='$oldpool -o json | jq .items[].metadata.name -r | xargs) kubectl cordon --selector='cloud....


3

It's not currently possible to restrict a GCP load balancer's ports and protocols used like you can with an AWS ELB. This is a feature request. https://issuetracker.google.com/issues/35904903


2

I looked for that too but I don't think you can as these are the ports used by Google to do LB: HTTP requests can be load balanced based on port 80 or port 8080. HTTPS requests can be load balanced on port 443. TCP Proxy Load Balancing supports the following ports: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1883, 5222 From: GCP HTTP(S) LB and GCP ...


2

We had the similar requirement as there needs to be a set of data cached in a server for serving the application (fast processing) and also by end of the day, we would need to sync the data from the cache server to the origin server. In the longer run, I would suggest to go for Redis as you can have Redis as an intermediate database (caching) and it will ...


2

Thank you to the comment from user54 for the answer. Both of my pasted wget URLs work as long as I'm using the correct value for password. In this case, I needed to use my user's API Token as described in the answer to another question: https://stackoverflow.com/a/34634247/317951


2

Not sure if you sorted this out, but I had to do something similar to get who started the instance so I can badger them into stopping the instance if they are not using it. I put together a Logging query: resource.type = gce_instance AND (jsonPayload.event_subtype = compute.instances.start OR jsonPayload.event_subtype = compute.instances.insert ) AND ...


2

You can find the IP addresses of the Travis build machines here. If you add the IP addresses of the Travis infrastructure you use to your whitelisted IPs in Cloud SQL it should work. Keep in mind these IP addresses can change in the future though.


2

Yes, it is possible to split the incoming traffic between several GAE app/service versions based on the IP address from which the requests originate. From Splitting traffic across multiple versions: When you have specified two or more versions for splitting, you must choose whether to split traffic by using either an IP address or HTTP cookie. It's ...


2

You seem to be confused a bit about how Firestore stores data and what Google is suggesting you do. What is the problem? You are backing up a bucket inside other bucket. This is not correct. Firestore stores its data inside some sort of mostly opaque database format. If you are copying this out to a GCS bucket, that really is an export into a different ...


2

Given that you mentioned rarely using some k8s resources, you could explore some alternatives: With gcloud SDK you could create scripts to be executed for the periods you want to reduce GKE nodes (even to zero) during periods you're not using it With Google Cloud Functions (GCF) you can create some python/Node.js/Go script to access GKE APIs and also ...


2

Try to use only n1-standard-1 nodes and let the autoscaler do it's magic. If you can accept some downtime (and eventually some failures of the CI/CD jobs that should be fixed when you retry) you can use preemptible nodes. Migrate stateless apps to Cloud Run. Follow this guide to reduce resource consumption on your cluster.


2

You run the command with the user shishir9159_gmail_com but the error shows shishir9159@35.202.219.6: Permission denied ... seems like the _gmail_com portion of the username is truncated. Can you try setting the ansible_user config parameter in your inventory file or playbook rather than passing it on via the CLI?


1

"Multiple accounts in multiple regions" is an AWS idea which is really antithetical to how things are done in Google Cloud. GCP gives you a lot of tools to slice-and-dice your systems, but none of them work in the "multiple accounts/multiple regions" paradigm. But if you insist on going that route, your best bet may be to create custom bash scripts which ...


1

Setting export GOOGLE_APPLICATION_CREDENTIALS=${TF_CREDS} solved the issue.


1

I found the solution. As build artifact you need to publish, firebase.json, .firebaserc and whole functions folder including package.json (without node_modules) Then in release using sudo firebase deploy --token $(firebase-token) --project $(firebase-project) --only functions --force


1

Firstly, docker-compose is is a tool for defining and running multi-container Docker applications. (https://docs.docker.com/compose/). Dockerfile is single-container, if you want to run multi-containers on GKE you should convert docker-compose to kubernetes deployment. You can manually convert or use http://kompose.io/ to convert automatically.


1

Yes, they mean the Compute Engine. So you pay Google only for API, not for server.


1

TombstonedTaskError is raised if you're attempting to enqueue a named task using a name that has been used recently, see What is TombstonedTaskError from App Engine's Task Queue?. The duration of the de-duplication logic has been documented since that answer was posted. From Naming a task (emphasis mine): When you create a new task, App Engine assigns ...


1

The easiest approach does appear to be to use gcloud, as trying to get a kubeconfig without it proved tricky. Fortunately, gcloud, kubectl and helm are available as a single docker image kiwigrid/gcloud-kubectl-helm. For example: docker run -it --rm --volume ./gcp-key-file.json:/data/gcp-key-file.json:ro kiwigrid/gcloud-kubectl-helm:2.11.0-224.0.0 bash ...


1

I don’t know of a specific tool but I have setup a lot of webhook handlers on OKD kubernetes to do git driven updates to kubernetes. All the scripts are on GitHub as OCD. The tools I used are: adnanh/webook a go binary that you configure to catch git webhooks and run scripts. Here is my hooks.json config to match GitHub release events and run a build script ...


1

I faced the similar problem recently, but fixed it by providing additional roles to the service account. I am not sure what permissions you need, you need to look it up. In my case, I was trying to create an appengine project, So I had to add "Appengine Admin" role to the service account and enable "appengine.googleapis.com" via terraform resource "...


1

I removed the service account and recreated it (with same name and roles). Generated a new key and updated the CI and suddenly it worked. gcloud glitch.


1

As far as I'm aware, there is no universal standard amongst cloud providers. One reason for this is because most cloud providers like to abstract how their backend infrastructure, that their instances run on, is managed. How your instance is ran could change minute by minute depending on the cloud provider. The user doesn't care as long as they are getting ...


1

I think you can do this by Nodeselector. Firstly add a label for node selector in your daemonset config. Then label your nodes with the attached label. Now if you can set the autoscaling thresholds, it will be deployed on that node automatically on nodes that matches the label. Maybe you can tweak somehow to attach a label to your node when it is added to ...


Only top voted, non community-wiki answers of a minimum length are eligible