[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-07-31 (世界標準時間)。"],[],[],null,["*** ** * ** ***\n\nGKE has a rich ecosystem of features and products that help you\ndeploy, run, and manage your containerized applications at scale. However, this\nalso means there's a lot of documentation. Each documentation set in the\nGKE family contains guides, tutorials, reference material,\nrelease notes, examples, and more. This quick guide will help you find your way\naround.\n\nIf you're brand new to GKE, we recommend that you start your\nexploration with [Start learning about\nGKE](/kubernetes-engine/docs/learn).\n\nThe big picture\n\nThe GKE documentation is organized into several documentation\nsets, reflecting the structure of the wider GKE ecosystem and\nfamilies of features. Most users won't need to read beyond the core\nGKE documentation. Platform admins and operators might need to\nexplore the documentation more broadly.\n\n- **Core GKE documentation**, which introduces GKE and covers core features that are available to all GKE users.\n- **GKE networking documentation**, for network administrators or anyone else who needs to dive deeper into GKE and Kubernetes networking.\n- **GKE security documentation** (this documentation set), for security practitioners who want to configure security features and maintain your platform security.\n- **Fleet management documentation** , for when you want to manage groups of GKE clusters together as a *fleet*.\n- **Config Sync documentation**, for when you want to centralize your configuration files in a single source of truth, such as a Git repository.\n- **Policy Controller documentation**, for when you want to enable the application and enforcement of programmable policies for your Kubernetes clusters.\n- **Config Controller documentation**, for when you want to create and manage Google Cloud resources with a declarative, Kubernetes model.\n- **GKE outside Google Cloud documentation** sets, for users who want to use GKE on-premises or on other public clouds.\n\nYou can read more about these documentation sets in the following sections.\n\nCore GKE documentation\n\nStart here. This documentation set covers core concepts and features that are available\nto all GKE users, with material for both IT administrators and\nDevelopers. It includes the following topics:\n\n- [Learn fundamentals](/kubernetes-engine/docs/learn): Kubernetes and GKE basics for new users. If you're new to Kubernetes, Google Cloud, or GKE, this section will help you learn the essentials.\n- [Get started](/kubernetes-engine/docs/get-started/cluster-lifecycle): Ready to create your first cluster? Here's what you need to know about.\n- Set up GKE clusters: Detailed instructions for creating and configuring [Autopilot](/kubernetes-engine/docs/how-to/creating-an-autopilot-cluster) and [Standard](/kubernetes-engine/docs/how-to/creating-a-zonal-cluster) clusters.\n- [Reduce and optimize\n costs](/kubernetes-engine/docs/how-to/cost-optimization-metrics): Learn how and why to use cost optimization features in GKE.\n- [Provision storage](/kubernetes-engine/docs/concepts/storage-overview): Learn about the supported storage options for GKE and how to use them.\n- [Configure cluster\n security](/kubernetes-engine/docs/concepts/security-overview): GKE provides many ways to secure your workloads. This section introduces you to GKE security features and how to use them.\n- Deploy workloads: Learn how to deploy different types of workloads on GKE, from simple [stateless\n apps](/kubernetes-engine/docs/how-to/stateless-apps) to [databases, caches,\n and data streaming\n workloads](/kubernetes-engine/docs/concepts/database-options).\n- [AI/ML workloads](/kubernetes-engine/docs/integrations/ai-infra): Deploy AI/ML workloads that use specialist Google Cloud hardware.\n- [Manage and optimize\n clusters](/kubernetes-engine/docs/how-to/managing-clusters): Learn about administering clusters, including upgrades, notifications, and recommendations, plus node pool management for Standard clusters.\n- [Observability for\n GKE](/kubernetes-engine/docs/concepts/observability): Use managed Prometheus, Cloud Monitoring, and Cloud Logging to observe your clusters and workloads.\n- [Troubleshoot](/kubernetes-engine/docs/troubleshooting/known-issues): Find troubleshooting guidance and known issues for all core features.\n\nThis documentation set also includes reference material for the [Kubernetes\nEngine (GKE) AP](/kubernetes-engine/docs/reference/rest).\n\nGKE networking\n\nFor network administrators (or anyone else who needs to dive deeper into\nGKE and Kubernetes networking), [GKE networking\ndocumentation](/kubernetes-engine/networking/docs) shows you how to configure\nand work with networking and traffic management features for your clusters. Topics range from\nplanning your networking infrastructure on Google Cloud to setting up load\nbalancers, exposing workloads as Services, and configuring cluster isolation.\nThis documentation set includes the following GKE topics (and\nmore), as well as links to useful sections in the Google Cloud\nVirtual Private Cloud and Compute Engine networking documentation.\n\n- [Networking overview](/kubernetes-engine/docs/concepts/network-overview): Get a high level view of networking features, including how GKE manages networking both inside and outside your clusters.\n- [Best practices for GKE\n networking](/kubernetes-engine/docs/best-practices/networking): Follow best practices and opinionated guidance for planning and designing your network.\n- [Network isolation](/kubernetes-engine/docs/concepts/network-isolation): Learn how to control network access to your clusters' control plane and nodes.\n- [Services in GKE](/kubernetes-engine/docs/concepts/service): Expose applications running on your clusters as Services, including setting up load balancers and using [multi-cluster\n Services](/kubernetes-engine/docs/concepts/multi-cluster-services).\n- [Enhance network security](/kubernetes-engine/docs/how-to/network-policy) with network policies.\n- [Observability](/kubernetes-engine/docs/concepts/about-dpv2-observability): Get metrics and insights about your network traffic.\n\nGKE fleet management\n\nIf you're a platform or cluster administrator who needs to work with multiple\nGKE clusters, possibly across multiple Google Cloud\nprojects, GKE uses the concept of a *fleet* to simplify managing\nmultiple clusters, regardless of which project they exist in and what workloads\nrun on them. The [fleet management\ndocumentation](/kubernetes-engine/fleet-management/docs) includes information\nabout:\n\n- [Planning\n fleets](/kubernetes-engine/fleet-management/docs/fleet-concepts/plan-fleets): Learn how fleets work, with practical guidance for grouping your organization's clusters into fleets and enabling fleet features.\n- [Create your\n fleet](/kubernetes-engine/fleet-management/docs/fleet-creation): How to add clusters to fleets.\n- [Work with fleet\n features](/kubernetes-engine/fleet-management/docs/fleet-concepts/fleet-features): Learn how to adopt, configure, and manage fleet-enabled features for your clusters and workloads.\n- [Fleet team\n management](/kubernetes-engine/fleet-management/docs/team-management): Simplify provisioning and managing GKE resources for multiple teams across multiple clusters.\n- [Observe your\n fleet](/kubernetes-engine/fleet-management/docs/enterprise-overview-dashboard): Get an at-a-glance view of your entire fleet and view fleet-scoped logs and metrics.\n\nThis documentation set also includes reference material for the\nGKE Hub (Fleet) API.\n\nConfig Sync\n\n[Config Sync](/kubernetes-engine/enterprise/config-sync/docs/overview)\nprovides a consistent way to manage GKE cluster configuration,\nwith configuration applied automatically from a single source of truth.\n\nPolicy Controller\n\n[Policy Controller](/kubernetes-engine/enterprise/policy-controller/docs/overview)\nlets you apply and enforce consistent policies on your GKE\nclusters.\n\nConfig Controller\n\n[Config Controller](/kubernetes-engine/enterprise/config-controller/docs/overview)\ncreates and manages Google Cloud resources with a declarative, Kubernetes model.\nConfig Controller is a hosted version of Config Connector that simplifies\ninstallation and maintenance.\n\nGKE outside Google Cloud\n\nMany organizations using Google Cloud also want or need to run workloads in\ntheir own data centers, factory floors, retail stores, and even in other public\nclouds -- but they don't want to build new container platforms themselves in all\nthese locations, or rethink how they configure, secure, monitor, and optimize\ncontainer workloads depending on where they're running. GKE Multi-Cloud\nand Google Distributed Cloud both extend GKE for use outside\nGoogle Cloud, letting you create and manage hybrid or entirely\non-premises deployments.\n\nGKE Multi-Cloud\n\n- [GKE on AWS](/kubernetes-engine/multi-cloud/docs/aws): Work with GKE clusters running on AWS infrastructure.\n- [GKE on Azure](/kubernetes-engine/multi-cloud/docs/azure): Work with GKE clusters running on Azure infrastructure.\n- [GKE attached clusters](/kubernetes-engine/multi-cloud/docs/attached): Add CNCF-conformant Kubernetes clusters to your fleet to view and manage along with your GKE clusters, with instructions for EKS, AKS, and other conformant cluster types.\n\nGoogle Distributed Cloud (on-premises)\n\n- [Google Distributed Cloud (software only) for\n VMware](/kubernetes-engine/distributed-cloud/vmware/docs): Run GKE clusters in a VMware VSphere environment.\n- [Google Distributed Cloud (software only) for bare\n metal](/kubernetes-engine/distributed-cloud/bare-metal/docs): Run GKE clusters directly on your own hardware.\n- [Google Distributed Cloud connected\n deployments](/distributed-cloud/edge/latest/docs/overview): Run GKE clusters on-premises on dedicated hardware provided and maintained by Google."]]
