ASSOCIATE-CLOUD-ENGINEER · Question #398
You are deploying an application to Google Kubernetes Engine (GKE) that needs to call an external third-party API. You need to provide the external API vendor with a list of IP addresses for their…
The correct answer is B. Configure your GKE cluster with private nodes. Configure a Cloud NAT instance with static IP. Private GKE nodes enhance security by not exposing the nodes to the public internet. Cloud NAT with static IP addresses ensures all egress traffic from the cluster uses a consistent, known set of IPs, which you can safely provide to the third-party API vendor. This approach…
Question
Options
- AConfigure your GKE cluster with one node, and set the node to have a static external IP address.
- BConfigure your GKE cluster with private nodes. Configure a Cloud NAT instance with static IP
- CConfigure your GKE cluster with private nodes. Configure a Cloud NAT instance with dynamic IP
- DConfigure your GKE cluster with public nodes. Write a Cloud Run function that pulls the public IP
How the community answered
(24 responses)- A8% (2)
- B75% (18)
- C13% (3)
- D4% (1)
Explanation
Private GKE nodes enhance security by not exposing the nodes to the public internet. Cloud NAT with static IP addresses ensures all egress traffic from the cluster uses a consistent, known set of IPs, which you can safely provide to the third-party API vendor. This approach aligns with Google-recommended practices for secure and reliable egress traffic from GKE clusters.
Topics
Community Discussion
No community discussion yet for this question.