Google Professional Cloud DevOps Engineer Question 200
Single answerGoogle Cloud PlatformYour organization manages multiple Google Kubernetes Engine (GKE) clusters across different regions for various teams. To ensure consistent security policies, resource quotas, and logging across all clusters, you need a solution that minimizes manual effort while adhering to enterprise compliance. Which approach should you take?
- A
Use Config Sync with a central Git repository to enforce policies and configurations across all GKE clusters.
- B
Manually apply Kubernetes manifests with security policies to each cluster using kubectl.
- C
Use Cloud Monitoring to automatically propagate security policies across all GKE clusters.
- D
Set up a per-cluster policy and configuration management workflow using Deployment Manager templates.
Show answer and explanation
Correct answer: A
Explanation
To manage GKE clusters across an enterprise efficiently, it's important to have a centralized and automated way of enforcing policies and configurations. Config Sync integrates with a Git repository to propagate and enforce consistent configurations across all clusters, ensuring compliance and scalability. This approach is superior to manual methods or tools not designed for policy enforcement.
- A. Correct.
This is the correct answer. Config Sync allows you to manage Kubernetes configurations centrally through a Git repository. It ensures consistent application of policies and configurations across multiple GKE clusters, reducing manual effort and ensuring compliance.
- B. Incorrect.
Manually applying configurations with kubectl is error-prone and does not scale well for managing multiple clusters. It also increases the risk of inconsistent configurations.
- C. Incorrect.
Cloud Monitoring is a tool for observability and monitoring but does not provide the capability to propagate security policies or configurations to GKE clusters.
- D. Incorrect.
Using Deployment Manager templates for each cluster creates significant manual overhead and does not provide a unified, centralized approach to policy management across clusters.