Google Cloud Professional Cloud Developer — Question 178

Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

Answer options

• A. Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.
• B. Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• C. Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• D. Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

Correct answer: D

Explanation

The correct answer is D because creating a new namespace and granting the Admin role through Kubernetes RBAC allows the other team to deploy their integration without modifying the existing application. Options A and B do not provide the necessary permissions for deployment while restricting changes to the application. Option C does not use RBAC, which is essential for controlling access within the namespace effectively.