Ultimate access to all questions.
Upgrade Now 🚀
Sign in to unlock AI tutor
How should you configure authentication for microservices running on Google Kubernetes Engine (GKE) that require access to Google Cloud APIs, adhering to Google's recommended best practices? (Select two correct approaches.)
A
Use the service account attached to the GKE node.
B
Enable Workload Identity in the cluster via the gcloud command-line tool.
C
Access the Google service account keys from a secret management service.
D
Store the Google service account keys in a central secret management service.
E
Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.