Google Professional Cloud Developer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You are developing a microservice-based application for deployment on Google Kubernetes Engine (GKE). The application requires read/write access to a Cloud Spanner database. Following security best practices while minimizing code changes, how should you configure your application to obtain Spanner credentials?
A
Configure the appropriate service accounts, and use Workload Identity to run the pods.
B
Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
C
Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
D
Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.