Learning Hub / Cloud — OpenStack, AWS, EKS & GKE / Production GKE Platform — From Zero to Production
Part 4 — Architect · wrap-up
Cheat sheet & self-check
Every command from this section on one page.
16 · Architecture & design review
Quick checks before go-live
gcloud container clusters describe prod --region europe-west1 --format='yaml(releaseChannel,maintenancePolicy,privateClusterConfig,workloadIdentityConfig,databaseEncryption,networkConfig.datapathProvider)' | Channel, windows, privacy, Workload Identity, secrets encryption, data plane |
kubectl get ns -L pod-security.kubernetes.io/enforce | Pod Security level of every namespace |
kubectl get resourcequota,limitrange -A | Quotas and default limits per namespace |
kubectl get networkpolicy -A | Namespaces with (and without) network policies |