Question

[Building and implementing CI/CD pipelines for a service] You are configuring your CI/CD pipeline natively on Google Cloud. You want builds in a pre- production Google Kubernetes Engine (GKE) environment to be automatically load-tested before being promoted to the production GKE environment. You need to ensure that only builds that have passed this test are deployed to production. You want to follow Google-recommended practices. How should you configure this pipeline with Binary Authorization?

Accepted Answer

Create an attestation for the builds that pass the load test by using a private key stored in Cloud Key Management Service (Cloud KMS) authenticated through Workload Identity.

Answer

Create an attestation for the builds that pass the load test by requiring the lead quality assurance engineer to sign the attestation by using a key stored in Cloud Key Management Service (Cloud KMS).

Answer

Create an attestation for the builds that pass the load test by using a private key stored in Cloud Key Management Service (Cloud KMS) with a service account JSON key stored as a Kubernetes Secret.

Answer

Create an attestation for the builds that pass the load test by requiring the lead quality assurance engineer to sign the attestation by using their personal private key.

[Building and implementing CI/CD pipelines for a service] You are configuring your CI/CD pipeline natively on Google Cloud. You want builds in a pre-…

Take the free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER practice test

Other PROFESSIONAL-CLOUD-DEVOPS-ENGINEER practice questions