medium10 pts · first answer countsdevsecopscloud-securitykubernetes

Cloud access without key files

A GKE workload needs to read a Cloud Storage bucket. The team plans to download a service account JSON key and mount it as a Secret. What is the better approach?

A.Commit the JSON key to a private repositoryB.Use Workload Identity to map the Kubernetes SA to a cloud identityC.Base64 encode the key twice before mountingD.Use the node's default service account for every Pod

Discussion 0

Join free to post in the discussion.

Cloud access without key files

Discussion 0

Related questions