nerdexam
Google

PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #55

You are creating a CI/CD pipeline to perform Terraform deployments of Google Cloud resources. Your CI/CD tooling is running in Google Kubernetes Engine (GKE) and uses an ephemeral Pod for each…

The correct answer is A. Create a new Kubernetes service account, and assign the service account to the Pods. Use C. Create a new Google service account, and assign the appropriate IAM permissions. Workload Identity is the recommended way to authenticate to Google Cloud services from GKE. https://cloud.google.com/kubernetes-engine/docs/tutorials/authenticating-to-cloud-platform

Submitted by manish99· Apr 18, 2026Building and implementing CI/CD pipelines for a service

Question

You are creating a CI/CD pipeline to perform Terraform deployments of Google Cloud resources. Your CI/CD tooling is running in Google Kubernetes Engine (GKE) and uses an ephemeral Pod for each pipeline run. You must ensure that the pipelines that run in the Pods have the appropriate Identity and Access Management (IAM) permissions to perform the Terraform deployments. You want to follow Google-recommended practices for identity management. What should you do? (Choose two.)

Options

  • ACreate a new Kubernetes service account, and assign the service account to the Pods. Use
  • BCreate a new JSON service account key for the Google service account, store the key as a
  • CCreate a new Google service account, and assign the appropriate IAM permissions.
  • DCreate a new JSON service account key for the Google service account, store the key in the
  • EAssign the appropriate IAM permissions to the Google service account associated with the

How the community answered

(28 responses)
  • A
    79% (22)
  • B
    11% (3)
  • D
    7% (2)
  • E
    4% (1)

Explanation

Workload Identity is the recommended way to authenticate to Google Cloud services from GKE. https://cloud.google.com/kubernetes-engine/docs/tutorials/authenticating-to-cloud-platform

Topics

#CI/CD#GKE#IAM#Workload Identity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice