Closing
Readiness checklist
32 / 32

Is this pipeline actually production-ready?

The minimum signals — not just "it's technically wired together."

Dedicated tooling project, scoped cross-project IAM per target
Remote Terraform state (GCS backend), IaC reviewed before apply
CI fails fast — cheapest checks first, images tagged by commit SHA
CD has approval gates on prod and automated retry/rollback
Secrets injected at runtime, never build time
Binary Authorization defaults to deny, dual attestation on prod
This course covered PCDE sections 1-2 in full. GCP SRE & Observability (course 3 of 6) picks up the remaining sections next — SRE practices, observability, performance and cost.