Google Cloud Professional Cloud DevOps Engineer — Question 126

You need to enforce several constraint templates across your Google Kubernetes Engine (GKE) clusters. The constraints include policy parameters, such as restricting the Kubernetes API. You must ensure that the policy parameters are stored in a GitHub repository and automatically applied when changes occur. What should you do?

Answer options

• A. Set up a GitHub action to trigger Cloud Build when there is a parameter change. In Cloud Build, run a gcloud CLI command to apply the change.
• B. When there is a change in GitHub. use a web hook to send a request to Anthos Service Mesh, and apply the change.
• C. Configure Anthos Config Management with the GitHub repository. When there is a change in the repository, use Anthos Config Management to apply the change.
• D. Configure Config Connector with the GitHub repository. When there is a change in the repository, use Config Connector to apply the change.

Correct answer: C

Explanation

The correct answer is C because Anthos Config Management is specifically designed to manage configurations and policies across GKE clusters using GitOps principles. The other options do not provide the same level of integration for policy management as Anthos Config Management does, making them less suitable for this requirement.