SUMMARY.md

Table of contents

• Overview
• FAQs
• Product Updates
• Getting Started with DuploCloud
  • What DuploCloud Does
  • DuploCloud Onboarding
  • Application Focused Interface: DuploCloud Architecture
    • DuploCloud Tenancy Models
    • DuploCloud Common Components
      • Infrastructure
      • Plan
      • Tenant
      • Hosts
      • Services
      • Diagnostics
  • User Logins
  • Okta Identity Management
  • Public Cloud Tutorials
  • Getting Help with DuploCloud
• Container Orchestrators
  • Terminologies in Container Orchestration
• AWS User Guide
  • Prerequisites
    • Route 53 Hosted Zone
    • ACM Certificate
    • Shell Access for Containers
    • VPN Setup
    • Connect to the VPN
  • AWS Quick Start
    • Step 1: Create Infrastructure and Plan
    • Step 2: Create a Tenant
    • Step 3: Create an RDS Database (Optional)
    • Creating an EKS Service
      • Step 4: Create a Host
      • Step 5: Create a Service
      • Step 6: Create a Load Balancer
      • Step 7: Enable Additional Load Balancer Options (Optional)
      • Step 8: Create a Custom DNS Name (Optional)
      • Step 9: Test the Application
    • Creating an ECS Service
      • Step 4: Create a Task Definition for an Application
      • Step 5: Create the ECS Service and Load Balancer
      • Step 6: Test the Application
    • Creating a Native Docker Service
      • Step 4: Create an EC2 Host
      • Step 5: Create a Service
      • Step 6: Create a Load Balancer
      • Step 7: Test the Application
  • AWS Use Cases
    • Creating an Infrastructure and Plan for AWS
      • EKS Setup
        • Enable EKS endpoints
        • Enable EKS logs
        • Enable Cluster Autoscaler
      • ECS Setup
        • Enable ECS logging
      • Add VPC endpoints
      • Security Group rules
      • Upgrading the EKS version
    • Creating a Tenant (Environment)
      • Setting Tenant session duration
      • Setting Tenant expiration
      • Tenant Config settings
    • Hosts (VMs)
      • Adding Hosts
      • Connect EC2 instance
      • Adding Shared Hosts
      • Adding Dedicated Hosts
      • Autoscaling Hosts
        • Autoscaling Groups (ASG)
          • Scale to or from Zero
          • Spot Instances for AWS
        • ECS Autoscaling
        • Autoscaling in Kubernetes
      • Configure Auto-reboot
      • Create Amazon Machine Image (AMI)
      • Hibernate an EC2 Host
      • Snapshots
      • Display Tainted EC2 Hosts
      • Disable Source Destination Check
    • Auditing
    • Logs
      • Set up central logging
      • Display logs
      • Create custom logs
    • Diagnostics and Metrics
      • Metrics Setup
      • Metrics Dashboard
      • Kubernetes Administrator dashboard
    • Faults and Alerts
      • Alert notifications
      • Automatic alert creation
      • Automatic fault healing
      • SNS Topic Alerts
      • System Settings Flags
    • AWS Console link
    • Just-in-Time (JIT) Access
    • Billing and Cost management
      • Enable billing data
      • View billing data
      • Apply cost allocation tags
      • DuploCloud License Usage
      • Configure Billing Alerts
    • Resource Quotas
    • Big Data and ETL
    • Custom Resource tags
  • AWS Services
    • Containers and Services
      • EKS Containers and Services
      • ECS Containers and Task Definitions
      • Passing Configs and Secrets
      • Docker Registry credentials
    • Load Balancers
      • EKS Load Balancers
      • ECS Services and Load Balancers
      • Native Docker Load Balancers
    • Storage
      • Storage Class and PVCs
      • GP3 Storage Class
    • API Gateway
    • Batch
    • CloudFront
    • Databases
      • Amazon ElastiCache
      • AWS DynamoDB database
      • AWS Timestream database
      • RDS database
        • IAM authentication
        • Backup and restore
        • Sharing encrypted database
        • Manage RDS Snapshots
        • Add and manage RDS read replicas
          • Add Aurora RDS replicas
        • Add monitoring interval
        • Enable or disable RDS logging
        • Restrict RDS instance size
        • Add parameters in Parameter Groups
    • Data Pipeline
    • Elastic File System (EFS)
      • Mount an EFS in an EC2 instance
    • EMR Serverless
    • EventBridge
    • IoT (Internet of Things)
    • Kafka Cluster
    • Kinesis Stream
    • Lambda Functions
      • Configure Lambda with Container Images
      • Lambda Layers
    • Managed Airflow
    • NAT Gateway for HA
    • OpenSearch
    • Probes and Health Check
    • S3 Bucket
    • SNS Topic
    • SQS Queue
    • Virtual Private Cloud (VPC) Peering
    • Web App Firewall (WAF)
  • AWS FAQ
  • Security Configuration Settings
    • Tenant Security settings
    • Infrastructure Security settings
    • System Security settings
    • AWS Account Security settings
    • Vanta Compliance Controls
  • AWS Infrastructure Settings
• GCP User Guide
  • Container deployments
    • Container orchestration features
    • Key DuploCloud concepts
  • Initial Setup
    • Docker Registry
    • Service Account Setup
    • Cloud DNS Zone
    • Certificates for Load Balancer and Ingress
    • Initial Infrastructure Setup
    • Tools Tenant
      • Enable Kubectl Shell
    • Docker
      • Docker Registry Credentials (Optional)
      • Shell Access for Docker (Optional)
    • VPN
      • VPN Setup
      • Connect to the VPN
    • Managed SSL Certificates with Certificate Manager (Optional)
  • GCP Quick Start
    • Step 1: Create Infrastructure and Plan
    • Step 2: Create a Tenant
    • Create a Service with GKE Autopilot
      • Step 3: Create a Service
      • Step 4: Create a Load Balancer
      • Step 5: Test the Application
    • Create a Service with GKE Standard
      • Step 3: Create a Node Pool
      • Step 4: Create a Service
      • Step 5: Create a Load Balancer
      • Step 6: Test the Application
  • GCP Use Cases
    • Creating an Infrastructure and Plan for GCP
      • Creating a GKE Autopilot Cluster
      • Creating GKE Standard Cluster
      • Kubectl token and config
      • Upgrading the GKE version
    • Creating a Tenant (Environment)
      • Tenant expiry
      • Tenant Config settings
    • Hosts (VMs)
    • Cost management for billing
      • Export Billing to BigQuery
      • Manage cross project billing in GCP
  • GCP Services
    • Containers and Services
    • GKE Containers and Services
      • Docker Registry credentials
      • Passing Config and Secrets
    • Load Balancers
    • Cloud Armour
    • Cloud Credentials
    • Cloud Functions
    • Cloud Scheduler
    • Cloud SQL
    • Cloud Storage
    • Firestore Database
    • Managed Redis
    • Node Pools
    • Pub/Sub
  • GCP FAQs
  • GCP Infrastructure Settings
• Azure User Guide
  • Container deployments
    • Container orchestration features
    • Key DuploCloud concepts
  • Prerequisites
    • Program DNS entries
    • Set the AKS cluster version
    • Import SSL certificates
    • Provision the VPN
    • Connect to the VPN
  • Azure Quick Start
    • Step 1: Create Infrastructure and Plan
    • Step 2: Create a Tenant
    • Step 3: Create Agent Pools
    • Step 4: Create a Service
    • Step 5: Create a Load Balancer
    • Step 6: Test your application
  • Azure Use Cases
    • Creating an Infrastructure and Plan for Azure
      • AKS initial setup
      • Kubectl token and config
      • Encrypted storage account
      • Upgrading the AKS version
    • Creating a Tenant (Environment)
      • Tenant expiry
      • Tenant Config settings
    • Hosts (VMs)
      • Autoscaling for Hosts
        • Autoscaling Azure Agent Pools
      • Snapshots
    • Logs
    • Metrics
    • Faults and alerts
      • Alert notifications
    • Azure Portal link
    • Billing and Cost management
      • Enable billing data
      • Viewing billing data
  • Azure Services
    • Containers and Services
      • AKS Containers and Services
      • Docker Registry Credentials
      • Passing Configs and Secrets
    • Agent Pools
      • Spot Instances for AKS Agent Pools
    • Databases
      • MSSQL Server database
      • PostgreSQL database
      • PostgreSQL Flexible Server
      • MySQL Server database
      • MySQL Flexible Server
      • Redis database
      • Azure Managed Instance
    • Docker Web Application
    • Functions
    • Key vault
    • Load Balancers
    • Public IP Address Prefix
    • Serverless Web Applications
    • Service Bus
    • Storage Account
    • Subscription
    • VM Scale Sets
  • Azure FAQ
  • Security Configuration
    • Tenant Settings
  • Azure Infrastructure Settings
• Kubernetes User Guide
  • Kubernetes Quick Start
  • Kubectl
    • Local Kubectl Setup
    • Kubectl Shell
      • Enable Kubectl Shell for GKE
      • Enable Kubectl Shell for AKS
    • Kubectl Tokens and Access Management
    • Read-only Access in Kubernetes
    • Mirantis Lens
  • Configs and Secrets
    • Setting Kubernetes Secrets
    • Setting Environment Variables (EVs) from a ConfigMap or Secret
    • Mounting ConfigMaps and Secrets as files
    • Using Kubernetes Secrets with Azure Storage connection data
    • Creating the SecretProviderClass Custom Resource to mount secrets
    • Managing Secret access for read-only users (AWS and GCP)
  • Jobs
  • CronJobs
  • DaemonSet
  • Ingress Loadbalancer
    • EKS Ingress
    • GKE Ingress
    • AKS Ingress
      • Using an Azure Application Gateway SSL policy with Ingress
  • HPA
  • Pod Toleration
  • Kubernetes Lifecycle Hooks
  • Kubernetes StorageClass and PVC
    • Native Azure Storage Classes
• Security and Compliance
  • Control Groups
  • Isolation and Firewall
    • Cloud Account
    • Network Segmentation
    • IAM
    • Security Groups
    • VPN
    • WAF
  • Access Management
    • Authentication Methods
    • Cloud Console, API and CLI
    • VM SSH
    • Container Shell
    • Kubernetes Access
  • Encryption
    • At Rest Encryption
    • In Transit encryption
  • Tags and Label
  • Security Monitoring
    • Agent Management
    • SIEM
    • Vulnerabilities
    • Hardening Standards (CIS)
    • File Integrity Monitoring
    • Access Monitoring
    • HIDS
    • NIDS
    • Inventory monitoring
    • Antivirus
    • VAPT (Pen Test)
    • AWS Security HUB
    • Alerting and Event Management
  • Compliance Frameworks
• Terraform User Guide
  • DuploCloud Terraform Provider
  • DuploCloud Terraform Exporter
    • Install Terraform Exporter
    • Generate Terraform
    • Using Generated Code
    • Troubleshooting Guide
  • Terraform FAQ
• Automation and Tools
  • DuploCtl CLI
  • Supported 3rd Party Tools
• CI/CD Overview
  • Service Accounts
  • GitHub Actions
    • Configure GitHub
    • Build a Docker image
    • Update a Kubernetes Service
    • Update an ECS Service
    • Update a Lambda function
    • Update CloudFront
    • Upload to S3 bucket
    • Execute Terraform
  • CircleCI
    • Configure CircleCI
    • Build and Push Docker Image
    • Update Service
  • GitLab CI/CD
    • Configure Gitlab
    • Build a Docker image
    • Update a service
  • Bitbucket Pipelines
    • Configure Bitbucket
    • Build a Docker image
    • Update the Service with Deploy Pipe
  • Azure Pipelines
    • Configure Azure DevOps
    • Build a Docker image from Azure DevOps
    • Update a Service
    • Troubleshooting
  • Katkit
    • Environments
    • Link repository
    • Phases
    • Katkit config
    • Advanced functions
• User Administration
  • User access to DuploCloud
  • Tenant Access for Users
    • Add Tenant access over a VPN
    • Read-only access to a Tenant
    • Cross-tenant Access
    • Deleting a Tenant
  • VPN access for users
  • Database access for users
  • Resolving DNS failures
  • API tokens
  • SSO Configuration
    • Azure SSO Configuration
• Observability
  • Metrics
    • Metrics Setup
    • Metrics Dashboard
    • Kubernetes Administrator dashboard
  • Faults and Alerts
    • Alert notifications
    • Automatic alert creation
  • Logs
  • Auditing
  • Web App Firewall (WAF)
• Runbooks
  • Configuring Egress and Ingress for AKS Ingress Controllers in Private Networks
  • Configuring Retool to SSH into a DuploCloud Host with a Static IP Address for Secure Remote Database
• Extras
  • FluxCD
  • Helm Charts
  • Login Banner/Button Customization
  • Setting up SCPs (Service Control Policies) for DuploCloud
  • Managed Service Accounts (RBAC)
  • Video Transcripts
    • DuploCloud AWS Product Demo
    • DuploCloud Azure Product Demo
    • DuploCloud GCP Product Demo
    • DevOps Deep Dive - Abstracting Cloud Complexity
    • DuploCloud Uses Infrastructure-as-Code to Stitch Together DevOps Lifecycle
  • BYOH
  • Allocation Tagging
  • Import an External Kubernetes Cluster
  • Delegate Subdomains