Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a…

Question

Options

• AUse Container Registry to create a registry in each development team's project.
• BCreate a separate project for the operations team that has Container Registry configured.
• CCreate a separate project for the operations team that has Container Registry configured.
• DCreate a separate project for the operations team that has the open source Docker Registry

• A
  15% (4)
• B
  73% (19)
• C
  8% (2)
• D
  4% (1)

Explanation

The correct approach is to create a separate project owned by the operations team with Container Registry configured in that project. Development teams' Cloud Build jobs are then granted permission to push images to this centralized registry in the ops project. This keeps image management under the operations team's control, provides a single source of truth for all Docker images, and enforces security policies centrally. Option A creates per-project registries which defeats the goal of centralization. Option D (open-source Docker Registry) forfeits Google Cloud's managed security features. Note: Options B and C appear identical in the question - both describe the same correct solution.

No community discussion yet for this question.