2Building and implementing CI/CD pipelines, including continuous testing

• 2.1Designing CI/CD pipelines and deployment strategies

  Understand continuous integration (CI) with Cloud Build, continuous delivery (CD) with Cloud Deploy (Skaffold/Kustomize), artifact management with Artifact Registry, deployment to hybrid/multi-cloud (GKE), pipeline triggers and approval flows, and deployment strategies (canary/blue-green/rolling/traffic splitting/feature flags) with success metrics.

• 2.2Securing the deployment pipeline and managing secrets

  Understand auditing/tracking deployments (Artifact Registry, Cloud Build, Cloud Deploy, Cloud Audit Logs), key management (Cloud KMS), secret management (Secret Manager, Workload Identity Federation) with build/runtime injection, Artifact Analysis and vulnerability scanning, software supply-chain security (Binary Authorization, SLSA), and environment-based IAM policies.