PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #28
You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In one of your instances you notice the master is not responding, even though the cluster…
The correct answer is D. Create the appropriate master authorized network entries to allow the instance to communicate to. Private clusters run nodes that only have internal IP addresses, and do not allow public IPs over the internet to access the control plane endpoint. Additionally, private clusters do not allow Google Cloud IP addresses to access the control plane endpoint by default. Using…
Question
Options
- AAssign a public IP address to the instance.
- BCreate a route to reach the Master, pointing to the default internet gateway.
- CCreate the appropriate firewall policy in the VPC to allow traffic from Master node IP address to
- DCreate the appropriate master authorized network entries to allow the instance to communicate to
How the community answered
(63 responses)- A6% (4)
- B16% (10)
- C5% (3)
- D73% (46)
Explanation
Private clusters run nodes that only have internal IP addresses, and do not allow public IPs over the internet to access the control plane endpoint. Additionally, private clusters do not allow Google Cloud IP addresses to access the control plane endpoint by default. Using authorized networks in private clusters makes your control plane reachable only by allowed CIDRs, by nodes and Pods within your cluster's VPC, and by Google's internal production jobs that manage your https://cloud.google.com/kubernetes-engine/docs/how-to/authorized-networks
Topics
Community Discussion
No community discussion yet for this question.