GKE Ingress with Load Balancer in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of an Ingress in GKE?

An Ingress in GKE manages external access to services in a cluster, typically HTTP and HTTPS, by routing traffic to the right service based on rules.

beginner

Which GCP resource does GKE Ingress create to expose services externally?

GKE Ingress creates a Google Cloud HTTP(S) Load Balancer to expose services outside the cluster.

intermediate

What is the role of the Ingress controller in GKE?

The Ingress controller watches Ingress resources and configures the cloud load balancer to route traffic according to the Ingress rules.

intermediate

Name one key annotation used in GKE Ingress to specify backend service timeout.

The annotation 'ingress.gcp.kubernetes.io/backend-config' is used to specify backend service settings like timeout.

intermediate

How does GKE Ingress handle SSL/TLS termination?

GKE Ingress can terminate SSL/TLS at the load balancer by specifying TLS certificates in the Ingress resource, so encrypted traffic is decrypted before reaching services.

What type of load balancer does GKE Ingress create by default?

A Network Load Balancer

B TCP Load Balancer

C Internal Load Balancer

D HTTP(S) Load Balancer

GKE Ingress creates an HTTP(S) Load Balancer to route web traffic based on Ingress rules.

Which Kubernetes resource defines routing rules for GKE Ingress?

A Ingress

B Pod

C Service

D ConfigMap

The Ingress resource defines how external traffic is routed to services.

How do you specify TLS certificates in GKE Ingress?

A Using a Secret referenced in the Ingress TLS section

B In the Service resource

C Directly in the Pod spec

D In the ConfigMap

TLS certificates are stored in Secrets and referenced in the Ingress resource's TLS section.

What happens if you create an Ingress without any backend service?

A Ingress controller returns an error

B Traffic is routed to default backend

C No external access is configured

D Load balancer routes traffic to all pods

If no specific backend is defined, traffic goes to the default backend if configured.

Which annotation would you use to enable Cloud Armor security policies on GKE Ingress?

A ingress.kubernetes.io/enable-cloud-armor

B ingress.gcp.kubernetes.io/pre-shared-cert

C ingress.gcp.kubernetes.io/security-policy

D ingress.kubernetes.io/ssl-redirect

The annotation 'ingress.gcp.kubernetes.io/security-policy' attaches Cloud Armor policies to the load balancer.

Explain how GKE Ingress uses a Load Balancer to route external traffic to services inside the cluster.

Think about how external users reach your app through the cloud load balancer.

Describe the steps to enable HTTPS traffic using GKE Ingress with a TLS certificate.

Focus on how certificates are stored and linked to Ingress.