Topic 1 Question 207
Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?
Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.
Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.
ユーザの投票
コメント(3)
- 正解だと思う選択肢: D
D is the answer.
👍 2zellck2022/12/12 - 👍 1TNT872022/12/19
- 正解だと思う選択肢: D
D: You define permissions within a Role or ClusterRole object. A Role defines access to resources within a single Namespace, while a ClusterRole defines access to resources in the entire cluster.
https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control
👍 1Pime132023/02/20
シャッフルモード