Google Professional Cloud DevOps Engineer Question 41
Single answerGoogle Cloud PlatformYour organization manages multiple Google Kubernetes Engine (GKE) clusters spread across different regions to support a global application. As part of a new initiative, you need to ensure consistent policies, configurations, and security settings across all clusters while allowing individual teams some level of autonomy. Which solution should you implement to achieve this goal?
- A
Use Config Sync with a central Git repository to enforce configurations across all clusters.
- B
Manually apply Kubernetes manifests to each cluster using kubectl to ensure consistency.
- C
Use Google Cloud Console to configure each cluster individually with the desired settings.
- D
Leverage Anthos Config Management to centrally manage policies and configurations across clusters.
Show answer and explanation
Correct answer: D
Explanation
Managing multiple GKE clusters across an enterprise requires a scalable and consistent approach. Anthos Config Management is specifically designed for this purpose, offering a centralized way to enforce policies and configurations using tools like Config Sync and Policy Controller. This ensures all clusters adhere to organizational standards while allowing teams to manage their workloads within defined boundaries. Other options either lack scalability or fail to provide the necessary automation and policy enforcement.
- A. Incorrect.
This is not the best solution because while Config Sync can enforce configurations from a Git repository, it is part of Anthos Config Management, which provides additional features like policy enforcement and audit capabilities. This option is incomplete.
- B. Incorrect.
Manually applying configurations is error-prone, time-intensive, and not scalable, especially when managing multiple clusters across regions.
- C. Incorrect.
Configuring each cluster individually using the Google Cloud Console is inefficient and does not ensure consistency at scale. It also increases the risk of misconfigurations.
- D. Correct.
Anthos Config Management provides a comprehensive solution for managing policies, configurations, and security across multiple GKE clusters. It allows you to use Config Sync for GitOps-based configuration management and Policy Controller for enforcing security policies, ensuring consistency while allowing autonomy for individual teams.