To ensure applications in a GKE cluster can access required compute resources, which two actions should you take?

To ensure applications in a GKE cluster can access required compute resources, you should create a namespace for each team and attach resource quotas to each namespace. This allows you to restrict the total amount of CPU and memory that all pods in a namespace can consume, preventing one team's applications from monopolizing resources. Additionally, creating a LimitRange to set default compute resource requests and limits per namespace ensures that even if individual pod specs don't explicitly define requests and limits, they will still receive sensible defaults, preventing resource starvation or over-provisioning. Creating a Kubernetes service account for each application is important for authentication and authorization, but it doesn't directly manage compute resource access. Using Anthos Policy Controller with namespace labels and taints/tolerations is for advanced policy enforcement and node scheduling, not for guaranteeing basic application resource access within a namespace.