This is a dedicated watch page for a single video.
You are setting up a CI/CD pipeline for Terraform deployments of Google Cloud resources. Your CI/CD tooling runs within Google Kubernetes Engine (GKE) and utilizes an ephemeral Pod for each pipeline run. Your goal is to ensure that the pipelines running in these Pods have the necessary Identity and Access Management (IAM) permissions to execute Terraform deployments. You want to adhere to Google-recommended practices for identity management. What steps should you take? (Choose two options.)