Câu 66: Google Cloud Associate Cloud Engineer

You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a GoogleKubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

1. A. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes. — đáp án hiện tại
2. B. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under 'Access scopes'.
3. C. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
4. D. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.