Exam Professional Cloud Developer topic 1 question 240 discussion

correct answer D

key word- "optimal performance of each team’s work"

D: Creating a new namespace for each team within the existing cluster and defining resource quotas is a good way to provide isolation, manage resources, and maintain security without incurring the cost of additional clusters. Rejected: A: While RBAC can help manage access control, it doesn't provide the same level of resource isolation and management as using namespaces. B: Creating a namespace for each environment doesn't account for multiple teams working in the same environment. C: Creating a new GKE cluster for each team could lead to higher costs and complexity. It's more efficient to use namespaces within a single cluster for team isolation.

I'd like to say A, but namespacing is too important to be left aside. I say D.

I will go with D.

B is correct

I go with A. Because of Security, low cost and Google-recommended best practices. I hope there is no need to create additional namespaces since several application teams are already use the same namespace to develop microservices for the cluster.

Option B is the only one which addresses the part of the question that says 'You need to configure multiple environments'

I worried A or D. I judged these teams are creating a microservice for each function on a learge same application by the explain of "to develop microservices for the cluster" . If it's true, you don't need to separate using namespace. I think the thing you should protect is resources, for example the spanner for develop environment, the spanner for release environment and forbidden other team's the spanner access. In the case I think like that, I think this Q's answer is A.

security

for each team, hence need namespaces and quota

To configure more granular access to Kubernetes resources at the cluster level or within Kubernetes namespaces, you use Role-Based Access Control (RBAC). RBAC allows you to create detailed policies that define which operations and resources you allow users and service accounts to access. With RBAC, you can control access for Google Accounts, Google Cloud service accounts, and Kubernetes service accounts. T

https://cloud.google.com/kubernetes-engine/docs/best-practices/rbac