Topic 1 Question 214

Professional Cloud Developer

Topic 1 Question 214
You are a developer at a large organization. You have an application written in Go running in a production Google Kubernetes Engine (GKE) cluster. You need to add a new feature that requires access to BigQuery. You want to grant BigQuery access to your GKE cluster following Google-recommended best practices. What should you do?
- Create a Google service account with BigQuery access. Add the JSON key to Secret Manager, and use the Go client library to access the JSON key.
- Create a Google service account with BigQuery access. Add the Google service account JSON key as a Kubernetes secret, and configure the application to use this secret.
- Create a Google service account with BigQuery access. Add the Google service account JSON key to Secret Manager, and use an init container to access the secret for the application to use.
- Create a Google service account and a Kubernetes service account. Configure Workload Identity on the GKE cluster, and reference the Kubernetes service account on the application Deployment.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: A
  vote A because the type of auth supported by bq and the recommended way of auth which is use go libraries
  
  https://cloud.google.com/bigquery/docs/authorization https://pkg.go.dev/golang.org/x/oauth2/google?utm_source=cloud.google.com&utm_medium=referral#JWTAccessTokenSourceFromJSON
  
  👍 1
  melisargh2022/12/11
- 正解だと思う選択肢: D
  D is the answer.
  
  https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity#what_is Applications running on GKE might need access to Google Cloud APIs such as Compute Engine API, BigQuery Storage API, or Machine Learning APIs.
  
  Workload Identity allows a Kubernetes service account in your GKE cluster to act as an IAM service account. Pods that use the configured Kubernetes service account automatically authenticate as the IAM service account when accessing Google Cloud APIs. Using Workload Identity allows you to assign distinct, fine-grained identities and authorization for each application in your cluster.
  
  👍 1
  zellck2022/12/12
- 正解だと思う選択肢: D
  a go???? no!! D is correct
  
  👍 1
  jcataluna2022/12/13
シャッフルモード

ユーザの投票

コメント(8)