Google Cloud Professional Cloud Developer PCD — Topic 1 Question 207

Question

Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

Accepted Answer

Correct answer: D. Create a new namespace in the existing cluster and use Kubernetes role-based access control (RBAC) to grant the other team the admin role scoped to that namespace (D). This lets them deploy their integration in their own namespace while preventing changes to your application's namespace. Project-level IAM Editor/Viewer roles (A, B, C) are too broad or too restrictive and don't provide namespace-level isolation.

Google Cloud Professional Cloud Developer PCD — Question 207