zukko78

DOCKER
======

./create_partycrasher_zip.sh

docker build -t partycrasher .

-- docker run gunicorn with local ES
docker run -e ELASTICSEARCH_ALLOW_DELETE_ALL=true -e ELASTICSEARCH_CREATE_INDEXES=true -e ELASTICSEARCH_HOSTS=host.docker.internal -e ELASTICSEARCH_PORT=9200 -e ELASTICSEARCH_REST_HTTP_SCHEME=http -e ELASTICSEARCH_REST_SIGN_REQUESTS_ENABLED=false -e PARTYCRASHER_LOGGER_LEVEL=DEBUG -it --rm  -p 8080:8080 --name partycrasher partycrasher

zukko78

Table of Contents

• 0.1. References
• 0.2. Other cheatsheets
• 0.3. Manage multiple gcloud config configurations
  • 0.3.1. Switch gcloud context with gcloud config
• 0.4. Auth
• 0.5. info

zukko78

The objective is to document findings and recommendations from the review of DevOps processes and artifacts.

Table of Contents

• Istio Recommendations
  • Telemetry with Stackdriver
  • Telemetry with Kiali
  • Canary Deployment
• Mesh-wide security options

zukko78

(still a work-in-progress)

Shortlinks:

• Cluster Health
  • Index Level
  • Shard Level
• Nodes Overview
• Indices Overview
• Cluster Maintenance

zukko78

• Good luck to everyone taking this exam!
• Skimmed through documents mentioned in https://medium.com/@earlg3/google-cloud-architect-exam-study-materials-5ab327b62bc8
• It is a good idea to take the practice exam https://cloud.google.com/certification/practice-exam/cloud-architect. It will give a taste of what the real exam feel like in a lighter fashion. There are right answers given after the exam. I found it is worth the time.
• If you have more time, might be a good idea to watch the Google Cloud Next 2017: https://www.youtube.com/playlist?list=PLIivdWyY5sqI8RuUibiH8sMb1ExIw0lAR
• IMHO Comparing to the AWS certification exams, it feels like harder than the associate exams but easier than the professional level exams. AWS exams have been designed to have more matching answers, it is a matter to choose what matches most.
• Case studies: All the case studies except JencoMart are on my exam. Dress4win got 6 or 7. Please note I have found some question is very generic, not entirely related to the case study

zukko78

CI & CD:
========
2 core software development processes
CI process of automating regular code commits followed by an automated build and test process designed to highlight intergration issues early.
Additional tooling and functionality provided by Bamboo, CruiseControl, Jenkins, Go and TeamCity etc.
workflow based
CD takes the form of a workflow based process which accepts a tested software build payload from a CI server. Automates the deployment into a working QA, Pre-prod or Prod environment.
AWS CodeDeploy and CodePipeline provide CI/CD services
Elasticbeanstalk and CFN provide functionality which can be utilized by CI/CD servers.

zukko78

alias genkconfig='gcloud container clusters list --format="value(name,zone)" | while read -r name zone;do gcloud container clusters  get-credentials $name --zone $zone;done'

zukko78

Solution #1

• GKE with Google-managed SSL certificates
  • Create a ManagedCertificate object.
  • Associate the ManagedCertificate object to an Ingress by adding an annotation networking.gke.io/managed-certificates to the Ingress. This annotation is a comma-separated list of ManagedCertificate resources, cert1,cert2,cert3 for example.

Solution #2

Assumption

Assumes you are using the default L7 GLBC ingress controller. default for GKE cluster.

• ingress-gce

zukko78

The access pattern fits Nearline storage class requirements and Nearline is a more cost-effective storage approach than Multi-Regional. 
The object lifecycle management policy to delete data is correct versus changing the storage class to Coldline.

Google Cloud Storage supports Multi-Regional buckets that synchronize data across regions automatically.
Google Cloud SQL instances are deployed within a single region.
Google Cloud Bigtable data is stored within a single region.
Google Cloud Datastore is stored within a single region.

Using a shared VPC allows each team to individually manage their own application resources, while enabling each application to communicate 
between each other securely over RFC1918 address space.

zukko78

GCP Cloud Architect - Part 3
Case Studies 
Refreshed Nov 9th 2018; JencoMart completely dropped
Overview - 3 case studies; 40-50% on the exam; Question on one side, Case study on other side
Layout of Case study - 1.Company Overview 2.Solution concept - current goal 3.Existing Technical Env 4.Requirements(Tech/Business) 5.Executive statement 
Mountkirk Games
Dress4Win
TerramEarth

Mountkirk Games