Google Professional Cloud Developer Question 370
Select 3Google Cloud PlatformYou are tasked with deploying a containerized application to a Google Kubernetes Engine (GKE) cluster. The application requires a stable domain name and needs to be accessible via HTTPS. Which steps should you perform to ensure the application is deployed correctly and meets the requirements?
- A
Create a Kubernetes Deployment for your application and expose it using a Kubernetes Service of type LoadBalancer.
- B
Configure an Ingress resource to manage HTTPS traffic and associate it with a valid SSL certificate.
- C
Use kubectl to expose the Deployment with a NodePort service and manually set up a DNS record for the cluster nodes' external IP.
- D
Deploy a Google-managed SSL certificate by creating a ManagedCertificate resource and referencing it in the Ingress configuration.
- E
Configure the GKE cluster with a custom VPC and enable private clusters to secure external access.
Show answer and explanation
Correct answers: A, B, D
Explanation
To deploy a containerized application to GKE with HTTPS and a stable domain name, you need to expose the application using a Service of type LoadBalancer, configure an Ingress resource for HTTPS traffic, and use a Google-managed SSL certificate for simplified and secure certificate management. A NodePort service or private cluster configuration is not required to meet the specific requirements of the scenario.
- A. Correct.
Correct. Creating a Kubernetes Deployment and exposing it using a Service of type LoadBalancer is necessary to make the application accessible externally.
- B. Correct.
Correct. An Ingress resource is needed to handle HTTPS traffic, and it must be configured with a valid SSL certificate for secure access.
- C. Incorrect.
Incorrect. Exposing the Deployment with a NodePort service is not suitable for production environments and does not provide HTTPS or stable domain name management.
- D. Correct.
Correct. A Google-managed SSL certificate (using a ManagedCertificate resource) simplifies the process of providing HTTPS by automating SSL certificate provisioning and renewal.
- E. Incorrect.
Incorrect. While configuring private clusters and custom VPCs can enhance security, they are not directly required for deploying a containerized application with HTTPS and stable domain access.