Please enable JavaScript.

Coggle requires JavaScript to display documents.

GCP (ORG (ORG (Projects (Roles (Org Admin, Org owner), Resources (CORE (ID…

- - - - Resources
        
        CORE
        
        ID - globally unique
        
        Number - auto generated
        
        Name
      - Roles
        
        Org Admin
        
        Org owner
    - - group projects
        
        IAM roles applied to folder appliest o projects
        
        delegate Admin Rights
  - - - permissive overrules restrictive child
        
        IAM
        
        Billing
  - - - key cannot be empty
        
        64 labels per resource
        
        applied across all GCP
        
        org purposes
        
        Does not affect resource ops
- - - - resources per project
        
        API limit
        
        overlap restrictions
- - - - trace
        
        debug
        
        profiler
        
        collect CPU/mem dump
        
        CPU/RAM usage
        
        code errors in prod
        
        inspect without slowing/stopping
        
        no log statements
        
        GAE standard
        
        1 more item...
        
        find latency
        
        GAE/loadbalancers
        
        Apps with trace SDK
        
        auto enabled
        
        GCE/GKE/GAE
        
        1 more item...
        
        answers
        
        how long app handle requests
        
        overall latency
        
        which service bottlenecks
      - id and understand app errors
        
        real time
        
        write to logging or error reporting
        
        automatic analysis
        
        auto enabled
        
        app engine standard/cloud functions
      - java python
        
        ruby
        
        C
        
        php
        
        go
    - - native to GCP/AWS
        
        must be public and allow firewall traffic from uptime source IP
    - - access additional resources
        
        3rd party apps
    - - single project
        
        single pane of glass
        
        separate stackdriver accounts for data and control Isolation
  - - - project by project basis
        
        leg entry - status or event
        
        logs - named collection of logs
        
        retention period
        
        400 days
        
        30 days
        
        1 more item...
        
        admin
        
        1 more item...
  - - - admin activity/system event logs
        
        always on
        
        admin
        
        admin actions/API
        
        system
        
        GCE system event
  - - - new entries created after sink
  - - - create metrics and export sinks
- - - - trends
        
        centralized logging
- - - - Storage Classes
        
        multi-regional Standard
        
        99.95 SLA
        
        regional - standard
        
        99.9 SLA
        
        Nearline
        
        99.9
        
        30 day duration
        
        backups
        
        once a month
        
        coldline
        
        regional/multiregional
        
        archive data once a year
        
        90 day duration
        
        DR
        
        Changing Storage Class
        
        Security
        
        Access management
        
        IAM
        
        Granted at project/resource/bucket
        
        1 more item...
        
        Roles
        
        2 more items...
        
        Best practice
        
        ACL
        
        define who has access to bucket/objects
        
        1 more item...
        
        Best Practice
        
        1 more item...
        
        Signed URLs
        
        timer on bucket/obj
        
        1 more item...
        
        Customer Encryption Keys
        
        default, GCP encrypts all data with google keys
        
        .boto config for customer
        
        Best practices
        
        remove app access when not needed
        
        1 more item...
        
        Versioning
        
        no recycle
        
        no deleted folder
        
        1 more item...
        
        no limit on versions
        
        archived versions retain own ACL
        
        generation
        
        2 more items...
        
        lifecycle
        
        sets ttl on object
        
        1 more item...
        
        conditions
        
        1 more item...
        
        rule must all be met
        
        1 more item...
        
        cant change from multi-regional to regional
        
        only affects new objects
        
        moved to another bucket
        
        same class-web
        
        1 more item...
      - not a file system/block system
        
        block storage - persistent disk
    - - inherit buckets and storage class
        
        notes - folders are considered objects
- - - - gsutil cmd option source target
- - - - moving/copying/renaming obj
        
        edit object/bucket ACL
- - - - Cloud Bigtable
        
        BigQuery
        
        mission critical apps
        
        scale/consistency
        
        large data analytics processed using SQL
        
        data-warehouse
        
        1 more item...
        
        MemoryStore
        
        Filestore
        
        Managed File server
        
        NAS
        
        REDIS
        
        stored in memory
        
        sub-millisecond response
        
        1 more item...
        
        fully manged
        
        serverless
        
        high capacity data warehouse/analytics
        
        no operational db
        
        IAM roles attached to Dataset
        
        gq ls - j -a (project)
        
        persist for 6 months
        
        export to GCS/BQ
        
        1 more item...
        
        primary BQ permissions resource
        
        Partitioning
        
        queries run against entire table
        
        When Data arrives to tables
        
        timestamp in column
        
        1 more item...
        
        Roles
        
        Viewer
        
        Editor
        
        Owner
        
        1 more item...
        
        can create new dataset
        
        start
        
        list and get jobs or update
        
        Dataset Roles
        
        reader
        
        Writer
        
        Owner
        
        1 more item...
        
        Edit/append data in dataset
        
        read/query/copy/exports
        
        High Throughput Analytics
        
        Graphs/IOT/Finance
        
        non-relational
        
        analytics
        
        expensive
        
        managing nodes
        
        hbase
        
        heavy hitter
        
        1 more item...
      - Semi-Structure key-value
        
        Product Catalog/Game Store
        
        non-relational
        
        no SDK
      - NoSQL
        
        semistructured
        
        ACID
        
        no-ops
        
        flexible schema
        
        web/mobile apps
        
        1 more item...
      - Datastore Query Performance
        
        improve query performance with indexes
        
        composite index
        
        apply via GcloudCommand
        
        complex queries
    - - Global Supplychain/retail
        
        relational
        
        Horizontal
    - - global
        
        modification required
        
        more expensive
        
        Schema
        
        HA
        
        Replication Automatic
  - - - relational
        
        non-horizontal
  - - - first step
        
        manged single compute engine VM
  - - - storage
        
        backups
        
        failover
  - - - verticle scaling
        
        single region only
  - - - automatically replicated to failover instance
  - - - autofailover to failover instance
        
        failover becomes primary
    - - no data loss
        
        large spike needs addressed
        
        dlete/crecreate
        
        increase machine type
        
        shard into multiple DB
  - - - compute
        
        requires restart
        
        costs less
      - auto
        
        no downtime
- - - - availability
        
        performance
        
        SQL/NoSQL
        
        Transactional/Analytical
        
        relational
        
        non-relational
        
        1 more item...
        
        tables/rows
        
        1 more item...
        
        OLTP - transactional
        
        Operational data
        
        1 more item...
        
        OLAP - analytical
        
        consolidation data
        
        1 more item...
      - Horizontal
        
        more machines
      - vertical
        
        more compute
- - - - all of the components of GCP
      - Billing
        
        project billing manager
        
        no access to project resources
        
        ownership - IAM inheritance
        
        payment linkage
        
        which account pays for which project
        
        export
        
        cloud storage for long term
        
        bigquery for analysis
    - - determain what ops are allowed on resources
        
        not directly assiged to member
        
        bundled into roles
    - - Primitive
        
        Predefined
        
        Custom
        
        More Granular
        
        individual permissions when predefined roles are not specific enough
        
        Granular access
        
        single service application
        
        Broad original
        
        project
        
        owner
        
        editor
        
        viewer
        
        1 more item...
        
        Modify all Resources
        
        modify all resources/IAM/billing
  - - - service account
        
        Member = Google acount
        
        Associated with email address
        
        Cloud ID domain
        
        Google Group
        
        allAuthenticatedUsers
        
        2 more items...
        
        collection of users in group
        
        1 more item...
        
        virtual group of all google accounts in org
        
        no access to g suite
        
        1 more item...
        
        Application/Server interactions
        
        represented by email
        
        authenticate apps and services
        
        GCE uses service accounts for GCP
        
        Google Managed
        
        2 more items...
        
        Keys
        
        default managed by google
        
        no edit default
        
        code on GCP
        
        Custom
        
        google maintains copy
        
        google cant retrieve
        
        granular controls
        
        Scopes
        
        legacy methods for default service accounts
- - - - share projects between VPC
        
        Egress has a cost
  - - - compute network admin
    - - limit of 15500 machines per VPC
        
        unicast only