Google Professional Cloud DevOps Engineer Question 64
Select 2Google Cloud PlatformYour team is deploying a new feature for a critical application running on Google Kubernetes Engine (GKE). The deployment needs to include an approval process where a team lead must review and approve the changes before they are rolled out to production. Additionally, the deployment should prevent unapproved changes from being applied. Which combination of strategies can you use to implement this process effectively?
- A
Use a CI/CD pipeline with a manual approval step before deploying to production.
- B
Leverage Cloud Build triggers with a conditional check for approval metadata in the source repository.
- C
Apply Binary Authorization to ensure only approved images are deployed to production.
- D
Enable Kubernetes Admission Controller to block deployments without an approval annotation.
- E
Add a cron job in Kubernetes to periodically validate and approve deployments.
Show answer and explanation
Correct answers: A, C
Explanation
To configure a deployment process with an approval workflow, combining a CI/CD pipeline with a manual approval step ensures changes are reviewed before deployment. Additionally, Binary Authorization provides an extra layer of security by verifying that only approved container images are deployed to production. Together, these strategies enforce both process compliance and deployment security.
- A. Correct.
Correct. A CI/CD pipeline with a manual approval step is a common way to enforce approval workflows before deploying to production environments.
- B. Incorrect.
Incorrect. While Cloud Build triggers can automate deployments based on repository changes, they don't inherently enforce approvals unless integrated with additional manual steps.
- C. Correct.
Correct. Binary Authorization ensures that only approved container images, signed with the necessary attestation, are deployed to production clusters.
- D. Incorrect.
Incorrect. Kubernetes Admission Controllers can enforce certain policies but are not designed to handle manual approval workflows directly.
- E. Incorrect.
Incorrect. Using a cron job to validate or approve deployments is not a standard or reliable method for handling approval processes.