Google Compute Engine Contd
- VMS in GCP can be standard or Spot VMS
- Standard VMs continue to run until you shutdown or delete. If standard vm fails, it will be migrated to another server by default
- Spot VMs are available at discount of 60 to 91 %
- Now lets understand Pricing Refer Here for compute engine pricing and also use a calculator Refer Here
- In addition to standard vms we have commitment based vms (1 year or 3 years)
Other types of Vms
- Sole-Tenant VMs: If you need to ensure that your vms run only on physical servers with other vms from the same project, you can select sole-tenancy
- Shielded Vms:
- These are VMs with enhance security controls, such as
- Secure boot
- vTPM
- Integrity Monitoring
- Secure boot runs only software i.e verified by digital signatures of components using UEFI firmware features
- These are VMs with enhance security controls, such as
- Confidential VMs:
- They encrypt data in use
- This complements encryption of data in transit and rest
- They run on hosts based on AMD EPYC processors which encrypts memory
Lifecyle of VM Instance
- Refer Here for vm instance lifecycle
- Comparision table Refer Here
Attaching SSH keys to VM Instances
- Refer Here for gcp docs
- Project wide ssh keys
- Attaching SSH Key while creation
- Lets add ssh key to the project
- Now lets try creating a linux vm
GCE Management
- Once the instance is created and is in running state and we have certain management operations which we can perform
- Details: We can observe main information
- Observability: Initial monitoring inforamation such as CPU Utilization and Network traffic can be viewed here. It is possible to collect and visualize even more metrics by installing Ops agent
- OS Info: This is part of VM Manager (suite of tools used to manage Operating systems at scale). It requires OS config Agent and VM manager API enablement to be installed on machines, once enabled it displays information about available patchs, vulnerabilities and installed packages
- Screenshot: This is screenshot of the instance in the Cloud Console
Management tab while creating instance
- This is part of Advanced Options => Management
- We can set the startup scripts Refer Here
