A DevOps engineer needs to manage an existing Cloud Run service named `report-generator-service` deployed in the `europe-west1` region. To optimize performance during morning peak hours, the engineer must ensure that at least 5 container instances remain warm and ready to serve requests immediately. Additionally, to enforce security policy, access must be limited exclusively to a dedicated worker service account named `[email protected]`. Which TWO `gcloud` commands should the engineer execute to achieve this configuration?
- gcloud run services update report-generator-service --min-instances=5 --region=europe-west1Cevap
- gcloud run services add-iam-policy-binding report-generator-service --member="serviceAccount:[email protected]" --role="roles/run.invoker" --region=europe-west1Cevap
- Cgcloud functions deploy report-generator-service --min-instances=5 --region=europe-west1
- Dgcloud run services add-iam-policy-binding report-generator-service --member="serviceAccount:[email protected]" --role="roles/editor" --region=europe-west1
Cevap
To configure warm instances for Cloud Run and grant invocation permissions securely, execute `gcloud run services update` with `--min-instances=5` and `gcloud run services add-iam-policy-binding` assigning the predefined role `roles/run.invoker`.
To maintain pre-warmed containers on Cloud Run, the service update command with `--min-instances` must be used. To allow a service account to invoke the Cloud Run service securely, the predefined role `roles/run.invoker` must be assigned via IAM policy binding.
Adım Adım Çözüm
Anahtar Kavram
Cloud Run Resource Management and IAM Security Policy