k8-lab
A secure GKE workload platform, built and documented one phase at a time.
- Image
- Project owned, non-root, deployed by digest.
- Namespace
- Pod Security enforced, resource budget applied, traffic denied by default.
- Ingress
- Gateway API on a reserved address, managed TLS, Service never published.
Serving this response
Read from the container answering right now, not written into the page. Two replicas run behind the load balancer, so a reload may be answered by the other one.
- Pod
- nginx-79cf4d547f-8pp62
- Namespace
- demo
- Pod IP
- 10.20.1.52
- Node
- gke-k8-lab-general-7d6bb7c7-uybi
- Running as uid
- 101
- Image digest
- sha256:2585b26deb9448cd190fa79f274deae75bf240dae60a4e4eaa7d53067091292d