Getting Started with Google Cloud
Total Page:16
File Type:pdf, Size:1020Kb
<CloudOnBoard> Getting Started With Google Cloud </CloudOnBoard> Cloud OnBoard Welcome to Cloud OnBoard #GoogleCloudOnBoard ©Google Inc. or its affiliates. All rights reserved. Do not distribute. ©Google Inc. or its affiliates. All rights reserved. Do not distribute. May only be taught by Google Cloud Platform Authorized Trainers. Cloud OnBoard ©Google Inc. or its affiliates. All rights reserved. Do not distribute. ©Google Inc. or its affiliates. All rights reserved. Do not distribute. May only be taught by Google Cloud Platform Authorized Trainers. Page 1 Agenda Why choose Google Cloud Platform? Google Cloud Platform enables developers to build, test and 1 Introduction to Google Cloud Platform deploy applications on Google’s highly-scalable, secure, and reliable infrastructure. 2 Quiz Choose from computing, storage, big data/machine learning, and application services for your web, mobile, analytics, and backend solutions. ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 3 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 5 The Future of Cloud Computing GCP is organized into regions and zones Now Next ● Regions: collections of zones ○ Specific geographical locations where you can run resources ○ Regions are interconnected using Google’s global, meshed backbone network Storage Processing Memory Network Storage Processing Memory Network ● Zones: isolated deployment areas in a region Physical/Colo Virtualized Serverless/No-Ops ● Your resources can be regional, zonal, or in some cases multi-regional User-configured, managed, and maintained Fully automated ©Google Inc. or its affiliates. All rights reserved. Do not distribute. Page 2 Page 3 Google’s infrastructure: the most powerful on earth Google’s commitment to environmental responsibility Belgium 2 Finland London 3 3 Tokyo (2016) Developing our infrastructure while respecting Oregon 2 3 Iowa 4 Frankfurt 3 N Virginia 3 3 our ecosystem Taiwan S Carolina 3 3 Mumbai • Pioneering data center efficiency 2 Singapore • Largest private investor in renewables (wind, solar) Network path 3 São Paulo • First data centers to receive ISO 14001 certification Sydney 3 Current regions # and number of zones • 100% carbon neutral since 2007 Committed regions for 2017 # and number of zones https://peering.google.com https://cloud.google.com/compute/docs/regions-zones/regions-zones Image by Connie Zhou ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 9 Google’s network: Innovative, Customer-Friendly Pricing the world’s largest software-defined network Belgium 2 Finland ● Billing in sub-hour increments London 3 3 Tokyo (2016) Oregon 2 3 Iowa 4 Frankfurt 3 N Virginia 3 3 ● Discounts for sustained-use Taiwan S Carolina 3 3 Mumbai ○ Automatically reward users who run virtual machines for 2 Singapore over 25% of any calendar month Network path 3 São Paulo Points of presence ● Custom virtual-machine types Sydney 3 Current regions # and number of zones ○ Pay only for the resources you need for your application Committed regions for 2017 # and number of zones https://peering.google.com https://cloud.google.com/compute/docs/regions-zones/regions-zones Image by Connie Zhou ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 10 Page 4 Page 5 Google Cloud Platform Google’s commitment to open APIs and open source Compute Storage Cloud Cloud Compute Container App Engine Cloud Bigtable Cloud Cloud SQL Spanner Datastore Engine Engine Functions Storage Beta Beta Big Data Machine Learning Customers should use us because they love us, BigQuery Pub/Sub Dataflow Dataproc Datalab Natural Vision API Machine Speech Translate API not because they are unable to migrate Language API Learning API ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 11 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 13 GCP offers a range of compute architectures Stackdriver helps engineers keep their cloud-powered applications fast and available. Compute Container App Cloud Managed Engine Engine Engine Functions Beta services Monitoring Logging Debug IaaS Hybrid PaaS Serverless Automated logic elastic resources Error Reporting Trace Toward managed infrastructure Toward dynamic infrastructure ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 12 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. Page 6 Page 7 Agenda Resources ● Why Google Cloud Platform? https://cloud.google.com/why-google/ 1 Introduction to Google Cloud Platform ● Pricing philosophy https://cloud.google.com/pricing/philosophy/ 2 Quiz ● Data Centers https://www.google.com/about/datacenters/ ● Google Cloud Platform product overview http://cloud.google.com/products/ ● Google Cloud Platform solutions http://cloud.google.com/solutions/ ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 15 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 17 Quiz Cloud OnBoard Name 3 pricing innovations that make Google Cloud Platform the most cost-effective public cloud. Sub-hour billing, sustained-use discounts, Compute Engine custom machine types In addition to innovative pricing, name 3 benefits of using Google Cloud Platform. Commitment to environmental responsibility, commitment to open source technologies, robust infrastructure ©Google Inc. or its affiliates. All rights reserved. Do not distribute. ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 16 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. May only be taught by Google Cloud Platform Authorized Trainers. Page 8 Page 9 Agenda Projects are uniquely named ● Projects use three identifying attributes: 1 Google Cloud Platform Projects ○ Project Name ○ Project Number 2 Identity and Access Management (IAM) ○ Project ID ■ Also known as Application ID 3 Interacting with Google Cloud Platform ● Interact with projects using the Cloud Console 4 Quiz or the Cloud Resource Manager API ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 19 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 21 Projects organize resources Agenda ● All Google Cloud Platform services are associated with a project that is 1 Google Cloud Platform Projects used to: 2 ○ Track resource and quota usage Identity and Access Management (IAM) ○ Enable billing ○ Manage permissions and credentials 3 Interacting with Google Cloud Platform ○ Enable services and APIs 4 Quiz & Lab ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 20 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 22 Page 10 Page 11 Identity and Access Management You can define “curated roles” List of Permissions Google Group ✔ compute.instances.delete ✔ compute.instances.get ✔ InstanceAdmin compute.instances.list ✔ Role compute.instances.setMachineType Who can do what on which resource ✔ compute.instances.start ✔ compute.instances.stop project_a . ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 23 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 25 IAM predefines “primitive roles” IAM Resource Hierarchy ● A policy is set on a resource example.com ○ Each policy Organization contains: Set of roles, role members Owner Editor Viewer Billing administrator ● Resources inherit Project bookshelf static-assets stream-ingest policies from parent Invite members Deploy applications Read-only Manage billing Policy Inheritance Remove members Modify code ○ Resource policies access Add administrators are a union of Can delete project Configure services Remove parent and resource Compute App Cloud Cloud Cloud BigQuery Includes Editor rights Includes Viewer rights administrators Engine Engine Storage Storage Pub/Sub ● If parent policy less restrictive, overrides Resources more restrictive A project can have multiple owners, editors, viewers and billing administrators. resource policy instance_a queue_a bucket_a bucket_b topic_a dataset_a ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 24 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 26 Page 12 Page 13 Organization node organizes projects Service Accounts and IAM ● Organization node is root node Visibility ● Service accounts for Google Cloud resources Control authenticate with keys Identity IAM Role Resource ○ Can be managed via Cloud ○ Google manages keys, key Resource Manager API rotation for Compute Engine [email protected] example.com and App Engine Service Account InstanceAdmin Role Compute Instances Organization ● Can assign an IAM role to the ● 2 organization roles: Admin ○ Organization Admin - Control service account Create over all cloud resources ● Can also assign ○ Project Creator - Controls ServiceAccountActor role project_1 project_2 project creation [email protected] User/Group ServiceAccountActor Role Service Account Project Creator to users/groups ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 27 ©Google Inc. or its affiliates. All rights reserved. Do not distribute. 29 Service Accounts Example: Service Accounts and IAM project_a project_b ● Provide an identity for carrying out server-to-server ● VMs running component_1 are granted Editor access to interactions in a project project_b using Service Account 1 component_1 Service Account 1 ● Used to authenticate from one service to another ● VMs running component_2 are Editor objectViewer ● Can be used with primitive and curated roles granted access to bucket_1