A software engineering team is establishing an automated deployment validation procedure for microservices running on a private Google Kubernetes Engine (GKE) cluster. During pipeline execution, automated test runners operating inside a separate management Virtual Private Cloud (VPC) attempt to execute verification scripts against the cluster master endpoint, but all connection attempts time out. Which procedure should the cloud architect implement to enable successful automated validation testing of the technical solution?
- Configure master authorized networks on the private GKE cluster to explicitly allow the CIDR range of the management VPC test runners.Cevap
- BGrant the Service Account Admin role to the test runner service account to bypass control plane endpoint access controls.
- CStore the test environment infrastructure state files in unversioned local storage on the runner to avoid state locks during validation.
- DDisable VPC Service Controls during test execution, relying strictly on IAM roles to secure the test endpoint.
Cevap
Configure master authorized networks on the private GKE cluster to explicitly allow the CIDR range of the management VPC test runners.
In private GKE clusters, master authorized networks provide network-level access control to the Kubernetes control plane. To allow automated test runners from another VPC to execute validation commands against the API server, their specific IP subnet range must be included in the authorized networks list.
Adım Adım Çözüm
Anahtar Kavram
Validating private cluster endpoints and master authorized network configurations
Tahmini Süre:1m 0s