GCP Flashcards
What does IAM stand for
Identity and Access Management
IAM role types
- Primitive roles
- Predefined roles
- Custom roles
Types of primitive roles
- Owner
- Editor
- Viewer
Supported persistent disk types
- HDD
- SSD
- Local SSD
Command: copy files to and from Cloud Storage
gsutil cp
Service used for executing code in response to events
Cloud Functions
Command: list Kubernetes services
kubectl get svc
Command: run commands from inside a container that is running on Kubernetes
kubectl exec
Command: create new service account
gcloud iam service-accounts create ...
How to change an App Engine region
You cannot. Need to create a new project
Computer choices
- Compute engine
- Kubernetes engine
- App engine
- Cloud functions
- Cloud run
- Anthos
CIDR notation
used for specifying IP address ranges
Fully managed NoSQL database, limited query syntax
Cloud Datastore
Command: create Kubernetes cluster
gcloud container clusters create
Load balancers available
- HTTP(S) load balancer
- SSL Proxy
- TCP Proxy
- Network TCP/UDP load balancer
- internal TCP/UDP load balancer
Compute: manages app platform
App engine
Compute: event-driven, server-less functions
Cloud functions
Compute: server-less for containerised apps
Cloud run
Compute: VM, GPU, TPU, disks
Compute engine
Compute: manages Kubernetes/containers
Kubernetes engine
Compute: enterprise hybrid/multi-cloud platform
Anthos
Storage options
- Cloud storage
- Nearline
- Coldline
- Persistent disk
- Cloud filestore
Database options
- cloud bigtable
- cloud datastore
- cloud filestore
- cloud memorystore
- cloud spanner
- cloud SQL
Data & analytics options
- bigquery
- cloud dataflow
- cloud datalab
- cloud dataproc
- cloud pub/sub
Stackdriver options
- debugger
- error reporting
- logging
- monitoring
- profiler
- transparent SLIs
- trace
Cloud IAM members
- Google account
- service account
- Google group
- G Suite domain
- Cloud Identity domain
types of audit log for each project
- admin activity
- system events
- data access
Key-value pairs of configuration data that are accessible from code running in a Cloud Function
environment variables
Way to enable point-in-time recovery for MySQL databases on Cloud SQL
enable binary logging
Command: list networks
gcloud compute networks list
Name of a point-in-time backup of a persistent disk
Snapshot
Way to ensure the nodes in a Kubernetes Engine cluster are running the latest version of Kubernetes
enable ‘Automatic node upgrades’ option
Cloud storage metadata key to set the MIME type
Content-Type
Mechanism that allows you to extract data from logs and track it
Custom logging metric
Command: interact with Cloud Storage
gsutil
Way to run Compute Engine instance based on templates
managed instances groups
Command: copy files to and from Cloud Storage
gsutil cp
Special account used for authenticating between difference services
service account
Mounted directories accessible from inside containers
volumes
App Engine feature that allows fast rollbacks, A/B testing, canary deployments
traffic splitting
common protocol and port used to connect to a Windows instance
RDP over port 3389
RDP: remote desktop protocol
Name of the Kubernetes Deployment that ensures a single instance of a pod will run on each node
DaemonSet
Templates that Deployment Manager supports
YAML, jinja, python
Service that allows you to run a MySQL or Postgres database
Cloud SQL
kubectl
flag that allows you to specify the JSON path of properties in JSON output
-o
along with the jsonpath
value
ex: kubectl get svc -o jsonpath
Compute Services that directly support running Docker containers
- Kubernetes engine
- App engine (flexible environment)
- Compute engine
- Cloud functions
Billing export formats
- BigQuery
- File export JSON
- File export csv
sparsely populated database
BigTable
Kubernetes resource that exposes deployments
service
interfaces for interacting with Google Cloud
- directly to the REST API
- cloud SDK
- client libraries
- console
Command: deploy a Cloud Function
gcloud functions deploy
Resource for storing sensitive information in Kubernetes
secrets
Command: create new Kubernetes Secret
kubectl create secret
Commonly paired database with App Engine
Cloud datastore
Command: add an IAM binding policy
`gcloud projects add-iam-policy-binding
Service that can ingest event streams. Commonly used with IoT
Pub/Sub
horizontally scalable SQL datapase
Cloud spanner
feature of Cloud Shell that allows you to browse to port 8080
web preview
Flag to use when deploying to app engine that will prevent the version from getting 100% of the traffic
--no-promote
open port 22 to the internet
gcloud compute firewall-rules create --network $SERVICES_NETWORK --allow tcp:22
Command: list gcloud configurations
gcloud config configurations list
mechanism that allow you to track custom information in code and save it to Stackdriver
custom monitoring metric
Command: set the CORS configuration on a bucket
gcloud cors set ...
service that supports monitoring, logging, and debugging
stackdriver
the flag to use that will allow you to determine the price of a bigQuery query without actually running the query
dry-run
name of Kubernetes controller that provides declarative updates for pods
deployments
App Engine app.yaml handler property that allows directories to be static
static_dir