Answer-first summary for fast verification
Answer: Set up separate GKE clusters for Development and Production in distinct projects. Within each cluster, allocate a Kubernetes namespace per team and implement Kubernetes RBAC to restrict namespace access to the respective team.
This approach is optimal because it leverages separate GKE clusters in different projects for each team's development and production environments, ensuring isolation. By utilizing Kubernetes namespaces and RBAC, access is restricted to each team's namespace, preventing cross-team environment access while maintaining cost efficiency.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
What is the most effective strategy to minimize costs and ensure team environment isolation when deploying applications on Google Kubernetes Engine (GKE)?
A
Establish a single GCP Project for each team, featuring a cluster with dedicated Kubernetes namespaces for Development and Production. Assign IAM access to teams for their respective clusters.
B
Set up separate GKE clusters for Development and Production in distinct projects. Within each cluster, allocate a Kubernetes namespace per team and implement Kubernetes RBAC to restrict namespace access to the respective team.
C
Develop separate GKE clusters for Development and Production in different projects. Assign a Kubernetes namespace to each team in every cluster and use Identity Aware Proxy to limit access to their namespace.
D
For each team, create a GCP Project with individual clusters for Development and Production. Provide teams with IAM access to their clusters.
No comments yet.