Discuss Google Professional Cloud DevOps Engineer Exam Topic 5 Question 75

Your company runs applications in Google Kubernetes Engine (GKE) that are deployed following a GitOps methodology.

Application developers frequently create cloud resources to support their applications. You want to give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices. You need to ensure that infrastructure as code reconciles periodically to avoid configuration drift. What should you do?

AInstall and configure Config Connector in Google Kubernetes Engine (GKE).

BConfigure Cloud Build with a Terraform builder to execute plan and apply commands.

CCreate a Pod resource with a Terraform docker image to execute terraform plan and terraform apply commands.

DCreate a Job resource with a Terraform docker image to execute terraforrm plan and terraform apply commands.

Suggested Answer: A

The best option to give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices, is to install and configure Config Connector in Google Kubernetes Engine (GKE).

Config Connector is a Kubernetes add-on that allows you to manage Google Cloud resources through Kubernetes. You can use Config Connector to create, update, and delete Google Cloud resources using Kubernetes manifests. Config Connector also reconciles the state of the Google Cloud resources with the desired state defined in the manifests, ensuring that there is no configuration drift1.

Config Connector follows the GitOps methodology, as it allows you to store your infrastructure configuration in a Git repository, and use tools such as Anthos Config Management or Cloud Source Repositories to sync the configuration to your GKE cluster. This way, you can use Git as the source of truth for your infrastructure, and enable reviewable and version-controlled workflows2.

Config Connector can be installed and configured in GKE using either the Google Cloud Console or the gcloud command-line tool. You need to enable the Config Connector add-on for your GKE cluster, and create a Google Cloud service account with the necessary permissions to manage the Google Cloud resources. You also need to create a Kubernetes namespace for each Google Cloud project that you want to manage with Config Connector3.

By using Config Connector in GKE, you can give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices. You can also benefit from the features and advantages of Kubernetes, such as declarative configuration, observability, and portability4.

1: Overview | Artifact Registry Documentation | Google Cloud

2: Deploy Anthos on GKE with Terraform part 1: GitOps with Config Sync | Google Cloud Blog

3: Installing Config Connector | Config Connector Documentation | Google Cloud

4: Why use Config Connector? | Config Connector Documentation | Google Cloud

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Leontine 11 months ago

Wait, can you really use Terraform in a Pod? That’s new to me!

Herman 11 months ago

D sounds interesting, but is it really the best practice?

Twana 11 months ago

C seems a bit off, using a Pod for this?

Nan 11 months ago

I think B is better for CI/CD workflows.

Narcisa 12 months ago

A is the way to go for GKE integration!

Helga 12 months ago

I’m leaning towards option A, but I’m a bit uncertain about how it handles drift compared to the others.

Virgilio 1 year ago

I feel like creating a Job resource with Terraform could work, but I’m not confident if that’s the recommended approach for reconciliation.

Wayne 1 year ago

I think using Cloud Build with Terraform sounds familiar. We practiced a similar question about CI/CD pipelines, right?

Carline 1 year ago

I remember we discussed Config Connector in our study group, but I'm not entirely sure if it's the best fit for this scenario.

Walton 1 year ago

I'm leaning towards option D. Creating a Job resource with a Terraform docker image to execute the plan and apply commands could be a good way to automate the infrastructure management process and avoid configuration drift.

Filiberto 1 year ago

Hmm, I'm a bit confused on the best approach here. I know we need to give developers the ability to manage infrastructure as code, but I'm not sure which of these options would be the most effective in ensuring we follow Google-recommended practices.

Ashleigh 1 year ago

This question seems straightforward. I think the key is to find a way to manage infrastructure as code while ensuring it reconciles periodically to avoid configuration drift, as the prompt states.

Shaniqua 1 year ago

Based on the details provided, I'd say option A is the way to go. Installing and configuring Config Connector in GKE seems like the best solution to meet the requirements of managing infrastructure as code and ensuring periodic reconciliation.

Dino 1 year ago

Okay, let me think this through step-by-step. The contract management process has pre-award, award, and post-award phases. Bid/no-bid and proposal prep are definitely seller activities, so they must be in the pre-award phase. I'll select A.

Kip 1 year ago

I'm not entirely sure about Mr. Dixon. On one hand, he's friends with staff, which might count, but does that really line up with ‘own use'?

Kanisha 2 years ago

You know, this question is making me hungry. I could really go for a nice terraform pie right about now.

Kizzy 2 years ago

Hmm, I'm torn between A and D. But I guess I'd go with A. Config Connector just sounds more 'Google-y', you know?

Jesse 2 years ago

C? Really? Manually running Terraform in a Pod? That's so 2010. Wake me up when you've got a real answer.

Dyan 2 years ago

↳ replying to Jesse

Yeah, using Config Connector or Cloud Build with Terraform integration would be a better approach.

Yolande 2 years ago

↳ replying to Jesse

D) Create a Job resource with a Terraform docker image to execute terraform plan and terraform apply commands.

Amber 2 years ago

↳ replying to Jesse

B) Configure Cloud Build with a Terraform builder to execute plan and apply commands.

Joseph 2 years ago

↳ replying to Jesse

A) Install and configure Config Connector in Google Kubernetes Engine (GKE).

Ma 2 years ago

D is the way to go! A Job resource with Terraform is the perfect solution to avoid configuration drift.

Zona 2 years ago

↳ replying to Ma

Cloud Build with a Terraform builder is another option to consider for executing plan and apply commands.

Lindsey 2 years ago

↳ replying to Ma

Config Connector in GKE can also be a useful tool for managing infrastructure as code.

Yuonne 2 years ago

↳ replying to Ma

It's important to follow Google-recommended practices when managing cloud resources for applications in GKE.

Margart 2 years ago

↳ replying to Ma

I agree, using a Job resource with Terraform is a great way to ensure infrastructure as code reconciles periodically.

Leatha 2 years ago

I think option D) Create a Job resource with a Terraform docker image might be a good alternative for periodic reconciliation.

Lavonda 2 years ago

I'm not sure, I think option B) Configure Cloud Build with Terraform builder could also work well.

Leslie 2 years ago

B sounds good to me. Cloud Build is super powerful, and using Terraform makes it easy to manage infrastructure as code.

Samira 2 years ago

↳ replying to Leslie

Yeah, I agree. It's a good choice to ensure infrastructure as code reconciles periodically.

Jannette 2 years ago

↳ replying to Leslie

B sounds good. Cloud Build is powerful and Terraform is great for managing infrastructure as code.

Ronnie 2 years ago

A, definitely! Config Connector is the way to go for GitOps on GKE. It's like having your own personal infrastructure butler.

Micaela 2 years ago

↳ replying to Ronnie

A, definitely! Config Connector is the way to go for GitOps on GKE. It's like having your own personal infrastructure butler.

Cathrine 2 years ago

↳ replying to Ronnie

A) Install and configure Config Connector in Google Kubernetes Engine (GKE).

Annabelle 2 years ago

I agree with Jacklyn, Config Connector seems like the best choice to avoid configuration drift.

Jacklyn 2 years ago

I think we should go with option A) Install and configure Config Connector in GKE.

Google Professional Cloud DevOps Engineer Exam - Topic 5 Question 75 Discussion