Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ41

Designing for security and compliance

An organization uses Google Kubernetes Engine (GKE) and Amazon Elastic Kubernetes Service (EKS) to manage a complex Kubernetes environment across multiple cloud providers. You need to deploy a solution that streamlines configuration management, enforces security policies, and ensures consistent application deployment throughout all environments. You want to follow Google-recommended practices. What should you do?

  • A Leverage Argo CD for GitOps-based continuous delivery and Open Policy Agent (OPA) for policy enforcement, and develop a controller for multi-cluster configuration management.
  • B Deploy Crossplane for managing cloud resources as Kubernetes objects, FluxCD for GitOps-based configuration synchronization, and Kyverno for policy enforcement.
  • C Deploy Kustomize for configuration customization, Config Sync with multiple Git repositories, and a script to enforce security policies.
  • D Utilize Config Sync as part of GKE to synchronize configurations from a centralized repository, and utilize Policy Controller to enforce policies using OPA Gatekeeper.
Explanation

Config Sync synchronizes Kubernetes configurations from a centralized source of truth across a fleet of clusters, helping prevent configuration drift and consistently deploy configurations, policies, and workloads. Policy Controller is Google’s integrated policy engine, based on OPA Gatekeeper, for enforcing programmable security, compliance, and best-practice guardrails across clusters. Google documents this combination for enforcing common configuration across infrastructure, including GKE on AWS.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!