Google Professional Cloud Network Engineer Question 565
Select 4Google Cloud PlatformYou are setting up a GKE cluster to use Cloud DNS for managing DNS records dynamically. You decide to use the external-DNS operator to automate this process. Which of the following steps are required to properly configure external-DNS to work with Cloud DNS?
- A
Grant the external-DNS service account the 'roles/dns.admin' role on the relevant Google Cloud project.
- B
Deploy the external-DNS operator to the GKE cluster using a Helm chart or YAML manifests.
- C
Enable the Compute Engine API to allow external-DNS to access Google Cloud DNS.
- D
Configure external-DNS with a service account key file that has permissions to manage DNS records.
- E
Create a Google Cloud DNS managed zone and specify the zone name in the external-DNS configuration.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To use external-DNS with GKE and Cloud DNS, you need to ensure proper authentication and configuration. This includes granting the external-DNS service account the correct permissions (roles/dns.admin), deploying the external-DNS operator to the cluster, and configuring it with a service account key file. Additionally, you must create a Cloud DNS managed zone and specify it in the external-DNS configuration to manage DNS records for that zone. Enabling the Compute Engine API is unrelated to this setup.
- A. Correct.
Correct. The external-DNS service account requires the 'roles/dns.admin' role to create, update, and delete DNS records in the managed zone.
- B. Correct.
Correct. Deploying the external-DNS operator to the GKE cluster is a necessary step to enable the automation of DNS record management.
- C. Incorrect.
Incorrect. Enabling the Compute Engine API is not required for external-DNS to function with Cloud DNS.
- D. Correct.
Correct. Configuring external-DNS with a service account key file that has the proper permissions is essential for authenticating with Google Cloud DNS.
- E. Correct.
Correct. You need to create a Cloud DNS managed zone and specify its details (e.g., zone name) in the external-DNS configuration to direct DNS record updates to the correct zone.