Question 56

Your engineers need to pass database credentials to a Kubernetes Pod. The YAML they're using looks similar to the following:
apiVersion: "extensions/v1beta1"
kind: "Deployment"
metadata:
name: "products-service"
namespace: "default"
labels:
app: "products-service"
spec:
replicas: 3
selector:
matchLabels:
app: "products-service"
template:
metadata:
labels:
app: "products-service"
spec:
containers:
- name: "products"
image: "gcr.io/find-seller-app-dev/products:latest"
env:
- name: "database_user"
value: "admin"
- name: "database_password"
value: "TheB3stP@ssW0rd"
What is Google's recommended best practice for working with sensitive information inside of Kubernetes?
  • Question 57

    You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?
  • Question 58

    Your engineers have asked you to set up a subnet with the largest IP address range possible. Which of the following ranges would work best?
  • Question 59

    You have one project called proj-sawhere you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm.
    What should you do?
  • Question 60

    You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?