Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

GCP > Containers > Flashcards

Containers Flashcards

1
Q

Binary Authorization

A

Ensures only trusted containers run in infrastructure (K8 and Cloud Run)
Requires images signed by trusted provider
Verifies signature before releasing image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Node affinity labels

A

Used to group nodes and schedule VMs on specific nodes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

K8 API Server

A

Apps make calls to master via API server

Handles intercluster interactions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

K8 scheduler

A

Determines where to run pods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

etcd

A

Distributed key value store for state info across a cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

K8 control plane components (4)

A

Controller Manager
API server
Scheduler
etcd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

kubelet

A

Agent in nodes that communicate with cluster master

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

kube-proxy

A

Network proxy on each node that implements rules for network communication inside and outside cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

GKE supported runtimes (4)

A

Docker *deprecated soon
containerd
CRI-O
Runtimes that implements K8 Container Runtime Interface (CRI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Components in nodes (3)

A

kubelet
kube-proxy
container runtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

PersistentVolumes

A

Persistent storage for pods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

StatefulSets

A

Pods that are stateful

Clients paired with pod

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Ingress Controller

A

Controller that controls external access to services in a cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Node pool

A

Set of clusters with the same config and node label

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

GKE modes of operation (2)

A

Standard

Autopilot - preconfigured, managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

GKE cluster zone and region options (3)

A

Zonal - 1 control plane in 1 zone, nodes and control in same zone

Multizonal - 1 control plane in 1 zone, nodes in multiple zones

Regional - replicas of control plane in multiple zones in 1 region, node pools replicated across 3 zones by default

17
Q

VPC native cluster

A

Uses alias IPs to route traffic between pods

18
Q

Routes-based cluster

A

Uses Google Cloud routes to route traffic between pods

19
Q

K8 supported IPs (3)

A

Cluster IP - fixed to a service

Pod IP - ephemeral IP for a pod

Node IP - IP of a node

20
Q

ClusterIP

A

Default service type

Internal clients send requests to stable internal IP

Makes service reachable from WITHIN the cluster

21
Q

NodePort

A

External clients sends request to IP of a node on static nodePort specified by the service

22
Q

LoadBalancer (service type)

A

Clients send requests to IP of a network load balancer

23
Q

Fleet

A

Group of multiple clusters (managed as one)

24
Q

All Anthos deployment types include…(2)

A

Anthos Service Mesh

Anthos Config Management

25
Q

Anthos Service Mesh features (4)

A

Traffic control for HTTPS
Metrics, logs, traces for HTTP traffic
Authentication and authorization with service level
Support for A/B testing and canary rollouts

26
Q

Anthos Config Management

A

Cluster configuration

Policy Controller - security and auditing rules across fleet

27
Q

Anthos Service Mesh deployment options (3)

A

In-cluster control plane
- Istiod service manages security, traffic, config, service discovery

Managed Anthos Service Mesh

  • Google managed control plane (upgrades, scaling, security)
  • Option to enable Google managed data plane by installing in-cluster controller that manages sidecar proxies

Anthos Service Mesh for Compute Engine VMs
- Observe, secure, manage traffic of MIGs in mesh

28
Q

Anthos deployment options (4)

A

GKE - GCP hosts control plan and manages nodes
On-Prem - Anthos clusters on VMware
Multi-Cloud - Anthos clusters in AWS or Azure
Attached Cluster - Anthos only manages Anthos services running in clusters (third party K8 distribution)

29
Q

Scaling GKE workloads

- Automatic options (3)

A

Horizontal pod autoscaler
Vertical pod autoscaler
Node auto-provisioning (scale underlying compute resources)

30
Q

GKE Usage Metering

A

Analyzes cluster usage by namespaces and labels

GCP (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions