ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 167 - Professional Cloud Developer discussion

Report
Export

You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

A.
Use the service account attached to the GKE node.
Answers
A.
Use the service account attached to the GKE node.
B.
Enable Workload Identity in the cluster via the gcloud command-line tool.
Answers
B.
Enable Workload Identity in the cluster via the gcloud command-line tool.
C.
Access the Google service account keys from a secret management service.
Answers
C.
Access the Google service account keys from a secret management service.
D.
Store the Google service account keys in a central secret management service.
Answers
D.
Store the Google service account keys in a central secret management service.
E.
Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.
Answers
E.
Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.
Suggested answer: B, E

Explanation:

https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

asked 18/09/2024
Barret Tan
25 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first