See :

https://github.com/microsoft/azure_arc/tree/main/azure_arc_k8s_jumpstart/gke
https://cloud.google.com/kubernetes-engine/docs/quickstart
https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl
https://cloud.google.com/sdk/gcloud/reference/container/clusters/create

pre-requisites

# Provider register: Register the Azure Policy provider
az provider register --namespace Microsoft.PolicyInsights

az provider register --namespace Microsoft.Kubernetes
az provider register --namespace Microsoft.KubernetesConfiguration
az provider register --namespace Microsoft.ExtendedLocation

az provider show -n Microsoft.Kubernetes -o table
az provider show -n Microsoft.KubernetesConfiguration -o table
az provider show -n Microsoft.ExtendedLocation -o table

Setup GKE Cluster

# https://cloud.google.com/sdk/gcloud/reference/auth/login
gcloud auth login $GKE_ACCOUNT
# sudo /home/$USER/google-cloud-sdk/bin/gcloud components update

gcloud config list
gcloud config set account $GKE_ACCOUNT

GKE_PROJECT_ID="$GKE_PROJECT-$(uuidgen | cut -d '-' -f2 | tr '[A-Z]' '[a-z]')"
gcloud projects create $GKE_PROJECT_ID --name $GKE_PROJECT --verbosity=info
gcloud projects list 
gcloud container clusters list --project $GKE_PROJECT_ID
gcloud config set project $GKE_PROJECT_ID
gcloud config list
# These flags are available to all commands: --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.


gcloud container get-server-config --zone $GKE_ZONE
export KUBECONFIG=gke-config

# You need to enable GKE API, see at https://console.cloud.google.com/apis/api/container.googleapis.com/overview?project=gke-arc-enabled
echo "You need to enable GKE API, see at https://console.cloud.google.com/apis/api/container.googleapis.com/overview?project=$GKE_PROJECT_ID"
# https://cloud.google.com/kubernetes-engine/docs/how-to/creating-a-cluster
# https://cloud.google.com/compute/docs/machine-types ==> n1-standard-1 is too small
gcloud container clusters create $GKE_PROJECT --project $GKE_PROJECT_ID \
    --zone=$GKE_ZONE \
    --node-locations=$GKE_ZONE \
    --disk-type=pd-ssd \
    --disk-size=50GB \
    --machine-type=n2-standard-4 \
    --num-nodes=1 \
    --image-type ubuntu

# check at https://console.cloud.google.com/kubernetes/list?project=gke-arc-enabled
# you may verified that 3 nodes have been created into the default nodepool, 1 per zone if you did create cluster with --zone europe-west4

gcloud container clusters list --project $GKE_PROJECT_ID
gcloud container clusters get-credentials $GKE_PROJECT --zone $GKE_ZONE

cat gke-config
k cluster-info
# Since we will have to change the context often from one cluster to another, we will merge all the contexts into one configuration and rename them.
# cp *-config ~/.kube
# KUBECONFIG=$HOME/.kube/eks-config:$HOME/.kube/aks-config:$HOME/.kube/gke-config
# kubectl config view --merge --flatten &gt; $HOME/.kube/config
# export KUBECONFIG=

k create clusterrolebinding cluster-admin-binding \
  --clusterrole cluster-admin \
  --user $(gcloud config get-value account)

# Deploy a dummy app
k create deployment hello-server --image=gcr.io/google-samples/hello-app:1.0
k expose deployment hello-server --type LoadBalancer --port 80 --target-port 8080

k get pods
k get service hello-server -o wide

# # https://cloud.google.com/kubernetes-engine/docs/how-to/exposing-apps#creating_a_service_of_type_loadbalancer
gke_hello_svc_lb_ip=$(k get svc hello-server -o jsonpath="{.status.loadBalancer.ingress[*].ip}")
echo "Test from your browser : http://$gke_hello_svc_lb_ip"

# clean-up
k delete deployment hello-server
k delete svc hello-server

Register to Azure Arc.

See https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/connect-cluster

azure_arc_ns="azure-arc"

# Deploy Azure Arc Agents for Kubernetes using Helm 3, into the azure-arc namespace
az connectedk8s connect --name $azure_arc_gke --infrastructure gcp -l $location -g $gke_rg_name
k get crds
k get azureclusteridentityrequests.clusterconfig.azure.com -n $azure_arc_ns
k describe azureclusteridentityrequests.clusterconfig.azure.com config-agent-identity-request -n $azure_arc_ns

k get connectedclusters.arc.azure.com -n $azure_arc_ns
k describe connectedclusters.arc.azure.com clustermetadata -n $azure_arc_ns

# verify
az connectedk8s list --subscription $subId -o table
az connectedk8s list -g $gke_rg_name -o table # -c $azure_arc_gke --cluster-type connectedClusters 

# -o tsv is MANDATORY to remove quotes
azure_arc_gke_id=$(az connectedk8s show --name $azure_arc_gke -g $gke_rg_name -o tsv --query id)

helm status azure-arc --namespace default 

# Azure Arc enabled Kubernetes deploys a few operators into the azure-arc namespace. You can view these deployments and pods here:
k get deploy,po -n $azure_arc_ns 
k get po -o=custom-columns=':metadata.name' -n $azure_arc_ns
k get po -l app.kubernetes.io/component=connect-agent -n $azure_arc_ns
k get po -l app.kubernetes.io/component=config-agent -n $azure_arc_ns
k get po -l app.kubernetes.io/component=flux-logs-agent -n $azure_arc_ns
k get po -l app.kubernetes.io/component=cluster-metadata-operator -n $azure_arc_ns
k get po -l app.kubernetes.io/component=resource-sync-agent -n $azure_arc_ns

k logs -l app.kubernetes.io/component=config-agent -c config-agent -n $azure_arc_ns

Enable GitOps on a connected cluster

See https://aka.ms/AzureArcK8sUsingGitOps

Create Config for GitOps workflow

Fork this sample repo into your GitHub account

git clone $gitops_url

k create namespace $arc_gitops_namespace

# https://docs.fluxcd.io/en/1.17.1/faq.html#will-flux-delete-resources-when-i-remove-them-from-git
# Will Flux delete resources when I remove them from git?
# Flux has an garbage collection feature, enabled by passing the command-line flag --sync-garbage-collection to fluxd
az k8s-configuration create --name $arc_config_name_gke --cluster-name $azure_arc_gke -g $gke_rg_name --cluster-type connectedClusters \
  --repository-url $gitops_url \
  --enable-helm-operator true \
  --helm-operator-params '--set helm.versions=v3' \
  --operator-namespace $arc_gitops_namespace \
  --operator-instance-name $arc_operator_instance_name_gke \
  --operator-type flux \
  --operator-params='--git-poll-interval=1m --sync-garbage-collection' \
  --scope cluster # namespace

az k8s-configuration list --cluster-name $azure_arc_gke -g $gke_rg_name --cluster-type connectedClusters
az k8s-configuration show --cluster-name $azure_arc_gke --name $arc_config_name_gke -g $gke_rg_name --cluster-type connectedClusters

repositoryPublicKey=$(az k8s-configuration show --cluster-name $azure_arc_gke --name $arc_config_name_gke -g $gke_rg_name --cluster-type connectedClusters --query 'repositoryPublicKey')
echo "repositoryPublicKey : " $repositoryPublicKey
echo "Add this Public Key to your GitHub Project Deploy Key and allow write access at https://github.com/$github_usr/arc-k8s-demo/settings/keys"

# notices the new Pending configuration
complianceState=$(az k8s-configuration show --cluster-name $azure_arc_gke --name $arc_config_name_gke -g $gke_rg_name --cluster-type connectedClusters --query 'complianceStatus.complianceState')
echo "Compliance State " : $complianceState

git_config=$(k get gitconfigs.clusterconfig.azure.com -n $arc_gitops_namespace -o jsonpath={.items[0].metadata.name})
k describe gitconfigs.clusterconfig.azure.com $git_config -n $arc_gitops_namespace

# https://kubernetes.io/docs/concepts/extend-kubernetes/operator
# https://github.com/fluxcd/helm-operator/blob/master/chart/helm-operator/CHANGELOG.md#060-2020-01-26
k get po -L app=helm-operator -n $arc_gitops_namespace
k describe po gke-cluster-config-helm-gitops-helm-operator-c546b564b-glcf5 -n $arc_gitops_namespace | grep -i "image" # ==> Image: docker.io/fluxcd/helm-operator:1.0.0-rc4
# https://hub.docker.com/r/fluxcd/helm-operator/tags

Config Private repo

If you are using a private git repo, then you need to perform one more task to close the loop: you need to add the public key that was generated by flux as a Deploy key in the repo.

az k8s-configuration show --cluster-name $azure_arc_gke --name $arc_config_name_gke -g $gke_rg_name --query 'repositoryPublicKey'

Validate the Kubernetes configuration

k get ns --show-labels
k -n team-a get cm -o yaml
k -n itops get all
k get ep -n gitops
k get events
flux_logs_agent_pod=$(k get po -l app.kubernetes.io/component=flux-logs-agent -n $azure_arc_ns -o jsonpath={.items[0].metadata.name})
k logs $flux_logs_agent_pod -c flux-logs-agent -n $azure_arc_ns 
# az k8s-configuration delete --name '<config name>' -g '<resource group name>' --cluster-name '<cluster name>' --cluster-type connectedClusters
helm ls

# clean-up
k delete ns team-a
k delete ns team-b
k delete ns team-g
k delete ns itops
k delete deployment azure-vote-front
k delete deployment azure-vote-back
k delete svc azure-vote-back
k delete svc azure-vote-front

k delete svc hello-server

Deploy applications using Helm and GitOps

You can learn more about the HelmRelease in the official Helm Operator documentation

See https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/use-gitops-with-helm

az k8s-configuration create --name "$arc_config_name_gke-azure-voting-app" --cluster-name $azure_arc_gke -g $gke_rg_name \
  --operator-instance-name "$arc_operator_instance_name_gke-azure-voting-app" \
  --operator-namespace prod \
  --enable-helm-operator \
  --helm-operator-version='0.6.0' \
  --helm-operator-params='--set helm.versions=v3' \
  --repository-url $gitops_helm_url \
  --operator-params='--git-readonly --git-path=releases/prod' \
  --scope namespace \
  --cluster-type connectedClusters

az k8s-configuration show --resource-group $gke_rg_name --name "$arc_config_name_gke-azure-voting-app" --cluster-name $azure_arc_gke --cluster-type connectedClusters

repositoryPublicKey=$(az k8s-configuration show --cluster-name $azure_arc_gke --name $arc_config_name_gke -g $gke_rg_name --cluster-type connectedClusters --query 'repositoryPublicKey')
echo "repositoryPublicKey : " $repositoryPublicKey
echo "Add this Public Key to your GitHub Project Deploy Key and allow write access at https://github.com/$github_usr/arc-k8s-demo/settings/keys"


# notices the new Pending configuration
complianceState=$(az k8s-configuration show --cluster-name $azure_arc_gke --name "$arc_config_name_gke-azure-voting-app" -g $gke_rg_name --cluster-type connectedClusters --query 'complianceStatus.complianceState')
echo "Compliance State " : $complianceState

echo "If you forget to add the GitHub SSH Key, you will see in the GitOps pod the error below : "
echo "Permission denied (publickey). fatal: Could not read from remote repository.\n\nPlease make sure you have the correct access rights nand the repository exists."

# troubleshooting: 
for pod in $(k get po -L app=helm-operator -n $arc_gitops_namespace -o=custom-columns=:.metadata.name)
do
  if [[ "$pod"=~"^$arc_operator_instance_name_gke*" ]]
    then
      echo "Verifying GitOps config Pod $pod"
      k logs $pod -n $arc_gitops_namespace | grep -i "Error"
      k logs $pod -n $arc_gitops_namespace | grep -i "Permission denied (publickey)"
  fi
done


# Verify the App
k get po -n prod

k top pods
k top node # verify CPU < 10%
k get events -A

for n in $(k get nodes -o=custom-columns=:.metadata.name)
do
  k describe node $n # you verify if CPU request is around 100%
done

# https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#how-pods-with-resource-requests-are-scheduled
# When you create a Pod, the Kubernetes scheduler selects a node for the Pod to run on. Each node has a maximum capacity for each of the resource types: the amount of CPU and memory it can provide for Pods. The scheduler ensures that, for each resource type, the sum of the resource requests of the scheduled Containers is less than the capacity of the node. Note that although actual memory or CPU resource usage on nodes is very low, the scheduler still refuses to place a Pod on a node if the capacity check fails. This protects against a resource shortage on a node when resource usage later increases, for example, during a daily peak in request rate

# Yoy might see the vote-front-azure-vote-app Pod in PENDING status 
# FailedScheduling : 0/3 nodes are available: 3 Insufficient cpu
#   Limits:
#      cpu:  500m
#    Requests:
#      cpu:  250m

# https://cloud.google.com/kubernetes-engine/docs/troubleshooting#PodUnschedulable
# https://stackoverflow.com/questions/47269602/how-do-i-avoid-unschedulable-pods-when-running-an-autoscale-enabled-google-conta
# https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/

# GKE has a default LimitRange with default limits for CPU request set to 100m. GKE has a default LimitRange with default limits for CPU request set to 100m
# This limit is applied to every container
k get limitrange -o=yaml -n prod


# ^vote-front-azure-vote-app.*
#!/bin/bash
for pod in $(k get po -l app=vote-front-azure-vote-app -n prod -o=custom-columns=:.metadata.name)
do
  if [[ "$pod"="^vote-front-azure-vote-app*" ]] 
    then
      echo "Verifying Pod $pod"
      k describe pod $pod -n prod
      k logs $pod -n prod | grep -i "Error"
      k exec $pod -n prod -it -- /bin/sh
  fi
done


k get svc/azure-vote-front -n prod -o yaml
k describe svc/azure-vote-front -n prod


# https://cloud.google.com/kubernetes-engine/docs/how-to/exposing-apps#creating_a_service_of_type_nodeport
# azure_vote_front_port=$(k get svc/azure-vote-front -n prod -o jsonpath="{.spec.ports[0].nodePort}")
# gcloud compute firewall-rules create test-node-port --allow tcp:node-port

azure_vote_front_url=$(k get svc/azure-vote-front -n prod -o jsonpath="{.status.loadBalancer.ingress[0].ip}")

# Find the external IP address from the output above and open it in a browser.
echo "Open your brower to test the App at http://$azure_vote_front_url"


# Cleanup
az k8s-configuration delete --name "$arc_config_name_gke-azure-voting-app" --cluster-name $azure_arc_gke --cluster-type connectedClusters -g $gke_rg_name
k delete ns prod

Use Azure Policy to enable GitOps on clusters at scale

See:

https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/use-azure-policy
https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/policy-samples
https://docs.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources
https://docs.microsoft.com/fr-fr/cli/azure/policy/definition?view=azure-cli-latest#az-policy-definition-create
https://docs.microsoft.com/fr-fr/cli/azure/policy/remediation?view=azure-cli-latest#az-policy-remediation-create Use Case: Use Azure Policy to enforce that each Microsoft.Kubernetes/connectedclusters resource or Git-Ops enabled Microsoft.ContainerService/managedClusters resource has specific Microsoft.KubernetesConfiguration/sourceControlConfigurations applied on it. You can use the above doc to follow steps by steps guidance in the portal , using "Deploy GitOps to Kubernetes cluster" built-in policy in the "Kubernetes" category. Other option you can use CLI to apply this policy running the snippet below.

Assure-GitOps-endpoint-for-Kubernetes-cluster.json

az policy definition list | grep -i "kubernetes"  
az policy definition create --name "gke-gitops-enforcement"
                            --description "Ensure to deploy GitOps to Kubernetes cluster"
                            --display-name "gke-gitops-enforcement"
                            [--management-group]
                            [--metadata]
                            [--mode]
                            --params --git-poll-interval=1m
                            [--rules]
                            [--subscription]

az policy assignment list -g $gke_rg_name -g $gke_rg_name

gitOpsAssignmentId=$(az policy assignment show --name xxx -g $gke_rg_name --query id)

# Create a remediation for a specific assignment
az policy remediation start ...
# Start-AzPolicyRemediation -Name 'myRemedation' -PolicyAssignmentId $gitOpsAssignmentId # '/subscriptions/${subId}/providers/Microsoft.Authorization/policyAssignments/${gitOpsAssignmentId}'

Monitor a connected cluster with Azure Monitor for containers

See :

https://aka.ms/arc-k8s-ci-onboarding

Pre-req

See the doc

To enable and access the features in Azure Monitor for containers, at a minimum you need to be a member of the Azure Contributor role in the Azure subscription, and a member of the Log Analytics Contributor role of the Log Analytics workspace configured with Azure Monitor for containers.
You are a member of the Contributor role on the Azure Arc cluster resource.
To view the monitoring data, you are a member of the Log Analytics reader role permission with the Log Analytics workspace configured with Azure Monitor for containers.

Setup

/!\ IMPORTANT : The same analytics workspace is shared for all k8s clusters, do not recreate it if it was already created in previous use case.

az monitor log-analytics workspace list
az monitor log-analytics workspace create -n $analytics_workspace_name --location $location -g $gke_rg_name --verbose
az monitor log-analytics workspace list
az monitor log-analytics workspace show -n $analytics_workspace_name -g $gke_rg_name --verbose

export analytics_workspace_id=$(az monitor log-analytics workspace show -n $analytics_workspace_name -g $gke_rg_name -o tsv --query id)
echo "analytics_workspace_id:" $analytics_workspace_id

# https://github.com/Azure/azure-cli/issues/8401 --query id ==> -o tsv is NECESSARY
export azureArc_gke_ClusterResourceId=$(az connectedk8s show -g $gke_rg_name --name $azure_arc_gke --query id -o tsv)

k config view --minify
k config get-contexts
export kubeContext="gke_"$GKE_PROJECT"_"$GKE_ZONE"_"$GKE_PROJECT #"<kubeContext name of your k8s cluster>"

# curl -o enable-monitoring.sh -L https://aka.ms/enable-monitoring-bash-script
# bash enable-monitoring.sh --resource-id $azureArc_gke_ClusterResourceId --workspace-id $analytics_workspace_id --kube-context $kubeContext

az k8s-extension create --name azuremonitor-containers --cluster-name $azure_arc_gke --resource-group $gke_rg_name --cluster-type connectedClusters --extension-type Microsoft.AzureMonitor.Containers --configuration-settings logAnalyticsWorkspaceResourceID=$analytics_workspace_id omsagent.resources.daemonset.limits.cpu=150m omsagent.resources.daemonset.limits.memory=600Mi omsagent.resources.deployment.limits.cpu=1 omsagent.resources.deployment.limits.memory=750Mi

az k8s-extension list --cluster-name $azure_arc_gke --resource-group $gke_rg_name --cluster-type connectedClusters 
azmon_extension_state=$(az k8s-extension show --name azuremonitor-containers --cluster-name $azure_arc_gke --resource-group $gke_rg_name --cluster-type connectedClusters --query 'installState')
echo "Azure Monitor extension state: " $azmon_extension_state

Verify :

After you've enabled monitoring, it might take about 15 minutes before you can view health metrics for the cluster.
By default, the containerized agent collects the stdout/ stderr container logs of all the containers running in all the namespaces except kube-system. To configure container log collection specific to particular namespace or namespaces, review Container Insights agent configuration to configure desired data collection settings to your ConfigMap configurations file.
To learn how to stop monitoring your Arc enabled Kubernetes cluster with Azure Monitor for containers, see How to stop monitoring your hybrid cluster.

Manage Kubernetes policy within a connected cluster with Azure Policy for Kubernetes

Enforce threat protection using Azure Defender

See Defend Azure Arc enabled Kubernetes clusters running in on-premises and multi-cloud environments

Limitations Azure Arc enabled Kubernetes and the Azure Defender extension don't support managed Kubernetes offerings like Google Kubernetes Engine and Elastic Kubernetes Service

az k8s-extension create --name microsoft.azuredefender.kubernetes --cluster-type connectedClusters --cluster-name $azure_arc_gke -g $gke_rg_name --extension-type microsoft.azuredefender.kubernetes --config logAnalyticsWorkspaceResourceID=$analytics_workspace_id --config auditLogPath=/var/log/kube-apiserver/audit.log

# verify
az k8s-extension show --cluster-type connectedClusters --cluster-name $azure_arc_gke -g $gke_rg_name --name microsoft.azuredefender.kubernetes

kubectl get pods -n azuredefender

#test: he expected response is "No resource found".
# Within 30 minutes, Azure Defender will detect this activity and trigger a security alert.
kubectl get pods --namespace=asc-alerttest-662jfi039n

Deploy Arc enabled Open Service Mesh

See Azure Arc-enabled Open Service Mesh

Following Kubernetes distributions are currently supported

AKS Engine
Cluster API Azure
Google Kubernetes Engine
Canonical Kubernetes Distribution
Rancher Kubernetes Engine
OpenShift Kubernetes Distribution
Amazon Elastic Kubernetes Service

Azure Monitor integration with Azure Arc enabled Open Service Mesh is available with limited support.

export VERSION=0.8.4
export $CLUSTER_NAME=<arc-cluster-name>
export $RESOURCE_GROUP=<resource-group-name>

az k8s-extension create --cluster-name $CLUSTER_NAME --resource-group $RESOURCE_GROUP --cluster-type connectedClusters --extension-type Microsoft.openservicemesh --scope cluster --release-train pilot --name osm --version $VERSION

Deploy an Azure ML model to an Arc connected cluster

See

Create an App Service App on Azure Arc

See the docs :

https://docs.microsoft.com/en-us/azure/app-service/quickstart-arc#3-create-an-app
https://docs.microsoft.com/en-us/azure/app-service/manage-create-arc-environment#add-azure-cli-extensions

Create and manage custom locations

az extension add --upgrade --yes --name customlocation
az extension remove --name appservice-kube
az extension add --yes --source "https://aka.ms/appsvc/appservice_kube-latest-py2.py3-none-any.whl"

# https://github.com/Azure/actions-workflow-samples/blob/master/assets/create-secrets-for-GitHub-workflows.md
az ad sp create-for-rbac --name $appName-appsvc --role "contributor" --scopes "/subscriptions/${subId}/resourceGroups/${gke_rg_name}" --query password --output tsv


# create an App.
az webapp create \
    --resource-group myResourceGroup \
    --name <app-name> \
    --custom-location $customLocationId \
    --runtime 'NODE|12-lts'

# Deploy a dummy App.
git clone https://github.com/Azure-Samples/nodejs-docs-hello-world
cd nodejs-docs-hello-world
zip -r package.zip .
az webapp deployment source config-zip --resource-group myResourceGroup --name <app-name> --src package.zip

# Get diagnostic logs using Log Analytics
let StartTime = ago(72h);
let EndTime = now();
AppServiceConsoleLogs_CL
| where TimeGenerated between (StartTime .. EndTime)
| where AppName_s =~ "<app-name>"

# Deploy a custom container
az webapp create 
    --resource-group myResourceGroup \
    --name <app-name> \
    --custom-location $customLocationId \
    --deployment-container-image-name mcr.microsoft.com/appsvc/node:12-lts

IoT Edge workloads integration

See https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/deploy-azure-iot-edge-workloads

Troubleshooting

See Azure Arc doc

Clean-Up

export KUBECONFIG=gke-config
k config view --minify
k config get-contexts

export kubeContext="gke_"$GKE_PROJECT_ID"_"$GKE_ZONE"_"$GKE_PROJECT
k config use-context $kubeContext

helm uninstall azure-policy-addon

# curl -o disable-monitoring.sh -L https://aka.ms/disable-monitoring-bash-script
# bash disable-monitoring.sh --resource-id $azureArc_gke_ClusterResourceId --kube-context $kubeContext
# az monitor log-analytics workspace delete --workspace-name $analytics_workspace_name -g $gke_rg_name
az k8s-extension delete --name azuremonitor-containers --cluster-type connectedClusters --cluster-name $gke_cluster_name  -g $gke_rg_name

az k8s-configuration delete --name "$arc_config_name_gke-azure-voting-app" --cluster-name $azure_arc_gke --cluster-type connectedClusters -g $gke_rg_name -y
az k8s-configuration delete --name $arc_config_name_gke --cluster-name $azure_arc_gke --cluster-type connectedClusters -g $gke_rg_name -y

az policy definition delete --name "gke-gitops-enforcement" -g $gke_rg_name
az policy assignment delete --name xxx -g $gke_rg_name

az connectedk8s delete --name $azure_arc_gke -g $gke_rg_name -y

gcloud container clusters delete $GKE_PROJECT --project $GKE_PROJECT_ID --zone=$GKE_ZONE -Y # --node-locations=$GKE_ZONE 
gcloud projects delete $GKE_PROJECT_ID --name $GKE_PROJECT --verbosity=info -Y

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

setup-gke.md

setup-gke.md

pre-requisites

Setup GKE Cluster

Register to Azure Arc.

Enable GitOps on a connected cluster

Create Config for GitOps workflow

Config Private repo

Validate the Kubernetes configuration

Deploy applications using Helm and GitOps

Use Azure Policy to enable GitOps on clusters at scale

Monitor a connected cluster with Azure Monitor for containers

Pre-req

Setup

Manage Kubernetes policy within a connected cluster with Azure Policy for Kubernetes

Enforce threat protection using Azure Defender

Deploy Arc enabled Open Service Mesh

Deploy an Azure ML model to an Arc connected cluster

Create an App Service App on Azure Arc

Create and manage custom locations

IoT Edge workloads integration

Troubleshooting

Clean-Up

Files

setup-gke.md

Latest commit

History

setup-gke.md

File metadata and controls

pre-requisites

Setup GKE Cluster

Register to Azure Arc.

Enable GitOps on a connected cluster

Create Config for GitOps workflow

Config Private repo

Validate the Kubernetes configuration

Deploy applications using Helm and GitOps

Use Azure Policy to enable GitOps on clusters at scale

Monitor a connected cluster with Azure Monitor for containers

Pre-req

Setup

Manage Kubernetes policy within a connected cluster with Azure Policy for Kubernetes

Enforce threat protection using Azure Defender

Deploy Arc enabled Open Service Mesh

Deploy an Azure ML model to an Arc connected cluster

Create an App Service App on Azure Arc

Create and manage custom locations

IoT Edge workloads integration

Troubleshooting

Clean-Up