Google Professional Cloud DevOps Engineer Question 211
Select 2Google Cloud PlatformYour team is deploying a new application to Google Kubernetes Engine (GKE) and wants to ensure that deployments to the production cluster require manual approval from a senior engineer. You also need to automate the deployment process as much as possible for staging and testing environments. Which approach should you implement to meet these requirements?
- A
Use a CI/CD pipeline in Cloud Build with manual approval steps configured for the production deployment stage.
- B
Configure a separate GKE cluster for staging and testing, and use automated deployments in the CI/CD pipeline for these environments.
- C
Use Deployment Manager to enforce manual approvals for all changes in production.
- D
Set up Binary Authorization to require manual approval for container images before they are deployed to production.
- E
Leverage Infrastructure as Code (IaC) tools like Terraform to create approval workflows for all environments.
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements, you should use a CI/CD pipeline like Cloud Build to automate the deployment process while introducing manual approval steps for production. Using separate clusters for staging and testing ensures environment isolation and allows for automated deployments without impacting production. Tools like Deployment Manager or Terraform are not suitable for implementing manual approval workflows for application deployments.
- A. Correct.
This is correct because Cloud Build allows you to define manual approval steps in your CI/CD pipeline, ensuring that production deployments cannot proceed without review.
- B. Correct.
This is correct because using separate clusters for staging/testing and automating their deployments aligns with best practices for environment isolation and ease of testing.
- C. Incorrect.
This is incorrect because Deployment Manager is primarily used for managing GCP infrastructure as code, not for implementing approval workflows.
- D. Incorrect.
This is incorrect because Binary Authorization is used to enforce policies on container images but does not provide manual approval workflows for deployments.
- E. Incorrect.
This is incorrect because Terraform is an IaC tool and does not natively include manual approval workflows for application deployments.