Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ129

Integrating applications with Google Cloud services

You plan to deploy hundreds of microservices in your Google Kubernetes Engine (GKE) cluster. How should communication between the GKE microservices be secured by using a managed service?

  • A Use global HTTP(S) Load Balancing with managed SSL certificates to protect your services
  • B Deploy open source Istio in your GKE cluster, and enable mTLS in your Service Mesh
  • C Install cert-manager on GKE to automatically renew the SSL certificates.
  • D Install Anthos Service Mesh, and enable mTLS in your Service Mesh.
Explanation

Anthos Service Mesh—now called Cloud Service Mesh—is Google Cloud’s managed, Istio-based service mesh. It can enforce mutual TLS (mTLS) for service-to-service traffic, providing mesh-wide encryption and workload authentication without requiring each microservice to implement it. Open-source Istio is not the managed offering.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!