Google Professional Cloud DevOps Engineer Question 201
Select 3Google Cloud PlatformYour organization runs a web application on Google Kubernetes Engine (GKE) with multiple clusters in different regions. To ensure compliance and security, you need to implement a safe and secure patching process for the application and the underlying infrastructure while minimizing downtime. Which of the following practices should you follow?
- A
Enable node auto-upgrades on GKE clusters to ensure the latest security patches are applied automatically.
- B
Perform rolling updates for application deployments to ensure zero downtime during patching.
- C
Use a canary deployment strategy to test patches with a small portion of traffic before full rollout.
- D
Manually upgrade all nodes in the cluster to retain control over the patching process.
- E
Disable cluster auto-scaling during patching to avoid unintended scaling events.
Show answer and explanation
Correct answers: A, B, C
Explanation
Safe and secure patching practices prioritize automation, incremental updates, and testing to minimize downtime and risk. Enabling node auto-upgrades ensures infrastructure is patched automatically, while rolling updates and canary deployments allow for controlled and low-risk application updates. Manual upgrades and disabling auto-scaling are unnecessary and can introduce operational risks.
- A. Correct.
Correct: Enabling node auto-upgrades ensures that the GKE cluster nodes automatically receive important security patches and updates, reducing manual effort and ensuring compliance.
- B. Correct.
Correct: Rolling updates allow patches or updates to be applied incrementally across instances, maintaining availability and minimizing downtime.
- C. Correct.
Correct: Canary deployments test updates with a small subset of traffic, reducing the risk of introducing issues to all users at once.
- D. Incorrect.
Incorrect: Manually upgrading all nodes can be error-prone and time-consuming, especially with multiple clusters, and is not the recommended practice when automated solutions like node auto-upgrades are available.
- E. Incorrect.
Incorrect: Disabling cluster auto-scaling during patching is not necessary and could negatively impact your application's ability to handle load, especially in production environments.