This paper represents "Cloudlab", a comprehensive, cloud - native laboratory designed to support network security research and training. Built on Google Cloud and adhering to GitOps methodologies, Cloudlab facilitates the the creation, testing, and deployment of secure, containerized workloads using Kubernetes and serverless architectures. The lab integrates tools like Palo Alto Networks firewalls, Bridgecrew for "Security as Code," and automated GitHub workflows to establish a robust Continuous Integration/Continuous Machine Learning pipeline. By providing an adaptive and scalable environment, Cloudlab supports advanced security concepts such as role-based access control, Policy as Code, and container security. This initiative enables data scientists and engineers to explore cutting-edge practices in a dynamic cloud-native ecosystem, fostering innovation and improving operational resilience in modern IT infrastructures.
翻译:本文介绍了"Cloudlab",一个旨在支持网络安全研究与培训的综合性云原生实验室。该实验室基于Google Cloud平台构建,遵循GitOps方法论,利用Kubernetes和无服务器架构,为安全容器化工作负载的创建、测试与部署提供便利。实验室集成了Palo Alto Networks防火墙、实现"安全即代码"的Bridgecrew工具以及自动化GitHub工作流,构建了稳健的持续集成/持续机器学习管道。通过提供自适应且可扩展的环境,Cloudlab支持基于角色的访问控制、策略即代码和容器安全等高级安全概念。该平台使数据科学家和工程师能够在动态的云原生生态系统中探索前沿实践,促进创新并提升现代IT基础设施的运营韧性。