Several teams in your company want to use Cloud Build to deploy to their own Google Kubernetes Engine (GKE) clusters. The clusters are in projects that are dedicated to each team. The teams only have

Question

Options

• ALimit each team member's access so that they only have access to their team's clusters. Ask
• BCreate a single project for Cloud Build that all the teams will use. List the service accounts in this
• CIn each team's project, list the service accounts and identify the one used by Cloud Build for each
• DIn each team's project, create a service account, download a JSON key for that service account,

• A
  3% (1)
• B
  10% (3)
• C
  81% (25)
• D
  6% (2)

Explanation

A is not correct because, even if you authenticated yourself with the gcloud CLI, Cloud Build runs with its own service account, and not your identity. B is not correct because this grants access to all the clusters, for all the teams. C is correct because this ensures that each team cannot execute builds that touch another team's D is not correct because this grants access to all the clusters, for all the teams. https://cloud.google.com/cloud-build/docs/securing-builds/configure-access-control

No community discussion yet for this question.