You are planning to deploy hundreds of microservices in your Google Kubernetes Engine (GKE) cluster. How should you secure communication between the microservices on GKE using a managed service?
A.
Use global HTTP(S) Load Balancing with managed SSL certificates to protect your services
B.
Deploy open source Istio in your GKE cluster, and enable mTLS in your Service Mesh
C.
Install cert-manager on GKE to automatically renew the SSL certificates.
D.
Install Anthos Service Mesh, and enable mTLS in your Service Mesh.
Google Cloud provides a service called Istio on GKE, that simplifies the management, scaling and automatic upgrades of Istio on GKE clusters, giving you the flexibility of Istio with the ease of a managed service.
Anthos Service Mesh is a service mesh built on top of Istio, and is designed to be used in conjunction with Google Cloud's Anthos platform. It provides many of the same features as Istio, but it also includes some additional features that are specific to Anthos, such as support for hybrid and multi-cloud environments.
Warning: Istio on GKE is deprecated. After December 31, 2021, the UI no longer supports this feature during the creation of new clusters. After September 30, 2022, Istio on GKE will no longer be supported in existing clusters. You can migrate Istio on GKE to Anthos Service Mesh to continue using your service meshes. For more information, see the migration FAQ.
D is the answer.
https://cloud.google.com/service-mesh/docs/overview#security_benefits
- Ensures encryption in transit. Using mTLS for authentication also ensures that all TCP communications are encrypted in transit.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
JonathanSJ
9 months agoXoxoo
10 months, 1 week ago__rajan__
1 year, 1 month agopurushi
1 year, 2 months agomrvergara
1 year, 9 months agoTNT87
1 year, 9 months agomrvergara
1 year, 8 months agoTNT87
1 year, 10 months agoTNT87
1 year, 10 months agosharath25
1 year, 10 months agozellck
1 year, 10 months ago