nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DEVELOPER · Question #257

PROFESSIONAL-CLOUD-DEVELOPER Question #257: Real Exam Question with Answer & Explanation

The correct answer is A: Create new role-based access controls (RBAC) for each team in the existing cluster, and define. To configure more granular access to Kubernetes resources at the cluster level or within Kubernetes namespaces, you use Role-Based Access Control (RBAC). RBAC allows you to create detailed policies that define which operations and resources you allow users and service accounts to

GKE Resource and Access Management

Question

Your team manages a large Google Kubernetes Engine (GKE) cluster. Several application teams currently use the same namespace to develop microservices for the cluster. Your organization plans to onboard additional teams to create microservices. You need to configure multiple environments while ensuring the security and optimal performance of each team's work. You want to minimize cost and follow Google-recommended best practices. What should you do?

Options

  • ACreate new role-based access controls (RBAC) for each team in the existing cluster, and define
  • BCreate a new namespace for each environment in the existing cluster, and define resource
  • CCreate a new GKE cluster for each team.
  • DCreate a new namespace for each team in the existing cluster, and define resource quotas.

Explanation

To configure more granular access to Kubernetes resources at the cluster level or within Kubernetes namespaces, you use Role-Based Access Control (RBAC). RBAC allows you to create detailed policies that define which operations and resources you allow users and service accounts to access. With RBAC, you can control access for Google Accounts, Google Cloud service accounts, and Kubernetes service accounts.

Topics

#GKE Multi-tenancy#Kubernetes RBAC#Resource Quotas#Namespace Management

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER PracticeBrowse All PROFESSIONAL-CLOUD-DEVELOPER Questions