Google Associate Cloud Engineer Question 279
Select 2Google Cloud PlatformA company has set up a private GKE cluster in Google Cloud. The cluster nodes do not have public IP addresses, and the company needs to ensure that these nodes can access external APIs over the internet for updates and telemetry. Which of the following configurations should be used to achieve this requirement?
- A
A. Configure Cloud NAT for the VPC network where the GKE cluster resides.
- B
B. Assign public IP addresses to the GKE cluster nodes.
- C
C. Use Cloud DNS to create a private DNS zone for the cluster.
- D
D. Enable Private Google Access for the subnet where the GKE cluster nodes are deployed.
- E
E. Create a custom route to direct traffic from the cluster nodes to the internet.
Show answer and explanation
Correct answers: A, D
Explanation
To allow GKE cluster nodes without public IP addresses to access the internet, Cloud NAT should be configured to provide outbound internet access. Additionally, enabling Private Google Access ensures that the nodes can reach Google APIs and services without needing public IPs. These configurations together meet the requirement to access external APIs for updates and telemetry.
- A. Correct.
A. Configure Cloud NAT for the VPC network where the GKE cluster resides. - This is correct because Cloud NAT allows instances without external IP addresses to access the internet, which is necessary for the GKE nodes to reach external APIs.
- B. Incorrect.
B. Assign public IP addresses to the GKE cluster nodes. - This is incorrect because the requirement specifies that the nodes should not have public IP addresses.
- C. Incorrect.
C. Use Cloud DNS to create a private DNS zone for the cluster. - This is incorrect as private DNS zones are used for internal DNS resolution and do not facilitate internet access.
- D. Correct.
D. Enable Private Google Access for the subnet where the GKE cluster nodes are deployed. - This is correct because Private Google Access allows instances without external IP addresses to reach Google APIs and services, which can be necessary for telemetry and updates.
- E. Incorrect.
E. Create a custom route to direct traffic from the cluster nodes to the internet. - This is incorrect because a custom route alone does not enable instances without external IPs to access the internet; NAT is required for IP translation.