You are deploying an application to Google Kubernetes Engine (GKE). The application needs to make API calls to a private Cloud Storage bucket. You need to configure your application Pods to authentica

Question

Options

• ACreate the GKE cluster and deploy the application. Request a security exception to create a
• BCreate the GKE cluster and deploy the application. Request a security exception to create a
• CCreate the GKE cluster with Workload Identity Federation. Configure the default node service
• DCreate the GKE cluster with Workload Identity Federation. Create a Google service account and

• A
  14% (5)
• B
  8% (3)
• C
  28% (10)
• D
  50% (18)

Explanation

Creating the GKE cluster with Workload Identity Federation and configuring a Kubernetes ServiceAccount to use Workload Identity Federation is the recommended approach. This method avoids the use of service account keys while allowing the application Pods to authenticate to Google Cloud services securely. The Kubernetes ServiceAccount is mapped to a Google service account with the necessary IAM roles to access the Cloud Storage bucket, adhering to Google- recommended practices.

No community discussion yet for this question.