Deployment Advising

Bundled into the existing Professional Cloud Architect premium course — no separate purchase.

Included in this chapter:

Strategy	How traffic moves to the new version	Downtime	Rollback speed	Cost / complexity	Native support
Recreate	Stop all old, start all new	Yes, during the swap	Redeploy the old version	Lowest; one environment	Plain Deployment (Recreate)
Rolling update	Replace instances incrementally, old and new coexist	No	Roll the update backward	Low; one environment	GKE / Kubernetes default
Blue-green	Cut all traffic over in one switch to a parallel environment	No	Fastest; flip back to blue	High; two full environments	Cloud Run traffic split; manual on GKE
Canary	Small percentage first, verify, then widen progressively	No	Shift the percentage back	Highest; needs traffic split and verification	Cloud Deploy canary; Cloud Run percentages

Cheat sheet

Deploy infrastructure, application, and API on three separate tracks
Cloud Build builds and tests the artifact, then stops at the registry image
Cloud Deploy promotes one release through a defined target sequence
Gate production with a Cloud Deploy approval and keep rollback one command away
Ship infrastructure with Infrastructure Manager, the managed Terraform service
Pick the deployment strategy by risk tolerance against cost and complexity
Recreate is the simplest strategy but takes downtime during the swap
Rolling update keeps the service up with no second environment
Blue-green gives the fastest rollback at the cost of two environments
Canary limits blast radius by sending a small traffic slice first
Cloud Deploy ships two strategies: standard and canary
On Cloud Run, do canary and blue-green by splitting traffic across revisions
Front a managed API with an Apigee API proxy, not the raw backend
Apigee manages the API lifecycle; a load balancer only routes traffic
Use Gemini Cloud Assist as an assistant across the deployment lifecycle
Binary Authorization is the deploy-time gate that blocks unsigned images
Gate a Cloud Build trigger with --require-approval and the Cloud Build Approver role
Fire Cloud Build on an image push with a Pub/Sub trigger on the gcr topic
Reuse one cloudbuild.yaml across environments with trigger-specific substitutions
Use GKE blue-green node-pool upgrades with a soak duration for quick rollback
Protect availability during node upgrades with a PodDisruptionBudget

Unlock with Premium — includes all practice exams and the complete study guide.

Cheat sheet