Exam Professional Cloud Developer topic 1 question 39 discussion

I think the correct answer is B) Container Registry is a good choice to store containers in a secure manageable way. It is possible to have ContainerRegistry in One project and push to it from Cloud Build of another project by adding appropriate service account as a member of a Cloud Storage Bucket used to host containers with the role Cloud Build Service Account.

B. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry. This approach aligns with best practices for managing access and centralizing the storage of Docker images while maintaining a high level of security and control

I would go with B.

The option B is the best solution because it provides a centralized, securely managed Docker registry for all development teams to use, and the Cloud Build service account can be granted the necessary permissions to push Docker images to the registry.

I think B is the correct one as well

B is the best choice because it allows the operations team to have control over the centralized, securely managed Docker registry while also allowing the development teams to use Cloud Build in their projects. In this option, the operations team can create a separate project with Container Registry configured and grant appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operations team's registry. This allows the development teams to build and push Docker images to the centralized registry while still following the operations team's requirements.

B is correct. No point deploying 1 CR per project.

B is correct

B is the suitable answer in this case

B is the best way to store and share images between different projects. Furthermore use of SA is a choice that match with GCP recommendations

"centralized, securely managed Docker registry" B is the answer

My answer is C , using service account to give permissions and storing it in a secured variable is a proper way