Google Professional Cloud Network Engineer Question 568
Select 4Google Cloud PlatformYou are managing a Google Kubernetes Engine (GKE) cluster that hosts multiple applications. You want to configure Cloud DNS to dynamically manage DNS records for services in GKE using the external-dns operator. Which of the following steps must you perform to correctly set up this configuration?
- A
Grant the external-dns service account the 'roles/dns.admin' IAM role to access Cloud DNS.
- B
Install the external-dns operator in your GKE cluster using a Helm chart or Kubernetes manifest.
- C
Configure a Cloud DNS policy to redirect all DNS queries to your on-premises DNS server.
- D
Create a Cloud DNS managed zone and ensure it matches the domain names used by your GKE services.
- E
Update the external-dns configuration to specify the Cloud DNS managed zone and project ID.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To integrate GKE services with Cloud DNS using the external-dns operator, you must ensure proper permissions are granted (roles/dns.admin), install the operator, and configure it to work with a Cloud DNS managed zone and project ID. Creating a managed zone is necessary to provide a namespace for DNS records. Redirecting queries to an on-premises DNS server is not relevant to this setup.
- A. Correct.
Correct: The external-dns operator requires appropriate permissions to manage DNS records in Cloud DNS. Assigning the 'roles/dns.admin' role allows it to perform necessary operations.
- B. Correct.
Correct: Installing the external-dns operator in your GKE cluster is a critical step, as it is responsible for automating DNS record management.
- C. Incorrect.
Incorrect: Configuring a Cloud DNS policy to redirect queries to an on-premises DNS server is not required for this setup and is unrelated to the external-dns operator.
- D. Correct.
Correct: You need to create a Cloud DNS managed zone that aligns with the domain names used by your GKE services. This is where the DNS records will be managed.
- E. Correct.
Correct: The external-dns configuration must be updated to include the Cloud DNS managed zone and project ID to ensure it knows where to create and manage DNS records.