What should you do?

Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort.

What should you do?
A . Assign the Container Developer role to the Cloud Build service account.
B . Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
C . Create a new service account with the Container Developer role and use it to run Cloud Build.
D . Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.

Answer: A

Explanation:

https://cloud.google.com/build/docs/deploying-builds/deploy-gke

https://cloud.google.com/build/docs/securing-builds/configure-user-specified-service-accounts