diff --git a/en/google/dataproc/dataproc-cluster-labels-added.md b/en/google/dataproc/dataproc-cluster-labels-added.md new file mode 100644 index 000000000..b75e12eb1 --- /dev/null +++ b/en/google/dataproc/dataproc-cluster-labels-added.md @@ -0,0 +1,25 @@ +[![CloudSploit](https://cloudsploit.com/img/logo-new-big-text-100.png "CloudSploit")](https://cloudsploit.com) + +# GOOGLE / Dataproc / Dataproc Cluster Labels Added + +## Quick Info + +| | | +|-|-| +| **Plugin Title** | Dataproc Cluster Labels Added | +| **Cloud** | GOOGLE | +| **Category** | Dataproc | +| **Description** | Ensure that all Dataproc clusters have labels added. | +| **More Info** | Labels are a lightweight way to group resources together that are related to or associated with each other. It is a best practice to label cloud resources to better organize and gain visibility into their usage. | +| **GOOGLE Link** | https://cloud.google.com/dataproc/docs/guides/creating-managing-labels | +| **Recommended Action** | Ensure labels are added to all Dataproc clusters. | + +## Detailed Remediation Steps +1. Log into the Google Cloud Platform Console. +2. Scroll down the left navigation panel and choose "Dataproc" to select the "Clusters" option.
+3. On the "Clusters" page, select the cluster which needs to be verified whether it has labels added or not by clicking on the checkbox next to its name.
+4. From the panel on the right side, select "Labels" and check if there are any labels shown. If not, the cluster does not have labels added.
+5. Repeat steps number 3-4 to check other clusters in the project.
+6. Navigate to "Dataproc" and select "Clusters". From the panel on the right side, click on "Labels" and then click on the checkbox next to the name of the "Cluster" which needs to have labels added.
+7. Click on "Add Label", and add key and value for the label. Add as many labels as you want and then click "Save".
+8. Repeat steps number 7-8 to add labels to all other clusters in the project.
diff --git a/en/google/dataproc/hadoop-secure-mode-enabled.md b/en/google/dataproc/hadoop-secure-mode-enabled.md new file mode 100644 index 000000000..278bc5fd4 --- /dev/null +++ b/en/google/dataproc/hadoop-secure-mode-enabled.md @@ -0,0 +1,33 @@ +[![CloudSploit](https://cloudsploit.com/img/logo-new-big-text-100.png "CloudSploit")](https://cloudsploit.com) + +# Google / Dataproc / Hadoop Secure Mode Enabled + +## Quick Info + +| | | +|-|-| +| **Plugin Title** | Hadoop Secure Mode Enabled | +| **Cloud** | Google | +| **Category** | Dataproc | +| **Description** | Ensure that all Dataproc clusters have hadoop secure mode enabled. | +| **More Info** | Enabling Hadoop secure mode will allow multi-tenancy with security features like isolation, encryption, and user authentication within the cluster. It also enforces all Hadoop services and users to be authenticated via Kerberos Key distribution. | +| **Google Link** | https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/security | +| **Recommended Action** | Enable hadoop secure mode for all dataproc clusters. | + +## Detailed Remediation Steps +1. Log into the Google Cloud Platform Console. +2. Scroll down the left navigation panel and choose "Dataproc" to select the "Clusters" option.
+3. On the "Clusters" page, select the cluster which needs to be verified whether it has Hadoop Secure Mode enabled or not by clicking on its name.
+4. On the "Cluster details" page, click on the "Configuration" tab.
+5. Scroll down and check the value of "Advanced security". If "Advanced security" is "disabled" then the cluster does not have Hadoop Secure Mode enabled.
+6. Repeat step number 2 - 5 to verify other "Clusters" in the project.
+7. Navigate to "Dataproc" and choose "Clusters", and click on the name of the "Cluster" that needs to have Hadoop Secure Mode enabled to go to the "Cluster details" page.
+8. From the "Cluster details" page, collect all the configuration information for the cluster.
+9. Go back to the "Clusters" page and click the "Create Cluster" button at top.
+10. On the "Create Cluster" page, add all the configuration information of the old cluster and then click on "Manage Security" tab on the left-side.
+11. Under "Kerberos and Hadoop Secure Mode", click on the slider next to "Enable" to enable Hadoop Secure Mode for the cluster.
+12. Click the "Create" button on left side to create a new dataproc cluster with Hadoop Secure Mode enabled.
+13. Once the new "Cluster" is created, delete the old cluster by clicking on the checkbox next to its name and then clicking on the "Delete" button at the top.
+14. Confirm the deleteion by clicking on the "Confirm" button in the "Confirm deletion" popup.
+15. Repeat steps number 7 - 14 to recreate all the Dataproc "Clusters" in the project with Hadoop Secure Mode enabled.
+ diff --git a/resources/google/dataproc/dataproc-cluster-labels-added/step2.png b/resources/google/dataproc/dataproc-cluster-labels-added/step2.png new file mode 100644 index 000000000..27f4cdd0f Binary files /dev/null and b/resources/google/dataproc/dataproc-cluster-labels-added/step2.png differ diff --git a/resources/google/dataproc/dataproc-cluster-labels-added/step3.png b/resources/google/dataproc/dataproc-cluster-labels-added/step3.png new file mode 100644 index 000000000..fa3a7c365 Binary files /dev/null and b/resources/google/dataproc/dataproc-cluster-labels-added/step3.png differ diff --git a/resources/google/dataproc/dataproc-cluster-labels-added/step4.png b/resources/google/dataproc/dataproc-cluster-labels-added/step4.png new file mode 100644 index 000000000..b9248372e Binary files /dev/null and b/resources/google/dataproc/dataproc-cluster-labels-added/step4.png differ diff --git a/resources/google/dataproc/dataproc-cluster-labels-added/step7.png b/resources/google/dataproc/dataproc-cluster-labels-added/step7.png new file mode 100644 index 000000000..7403746cc Binary files /dev/null and b/resources/google/dataproc/dataproc-cluster-labels-added/step7.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step10.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step10.png new file mode 100644 index 000000000..b71e88749 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step10.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step11.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step11.png new file mode 100644 index 000000000..2d050d4a5 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step11.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step13.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step13.png new file mode 100644 index 000000000..6b082e754 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step13.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step14.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step14.png new file mode 100644 index 000000000..f0477b322 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step14.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step2.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step2.png new file mode 100644 index 000000000..27f4cdd0f Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step2.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step3.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step3.png new file mode 100644 index 000000000..3ef6275b7 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step3.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step4.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step4.png new file mode 100644 index 000000000..8af28d7e1 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step4.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step5.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step5.png new file mode 100644 index 000000000..c678b0082 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step5.png differ diff --git a/resources/google/dataproc/hadoop-secure-mode-enabled/step9.png b/resources/google/dataproc/hadoop-secure-mode-enabled/step9.png new file mode 100644 index 000000000..a4fa85097 Binary files /dev/null and b/resources/google/dataproc/hadoop-secure-mode-enabled/step9.png differ