You want a third-party logging agent installed on every GKE node so your external logging tool receives cluster node logs. What should you do?

Deploying the third-party logging agent as a DaemonSet is the correct approach because a DaemonSet ensures that a copy of a Pod runs on every (or some) node in the cluster. This guarantees that the logging agent will be present on all GKE nodes to collect logs. Baking the software into your application container image is incorrect because it would only run with your application, not on every node. SSHing to each node and installing manually is impractical and not scalable in a dynamic Kubernetes environment. Provisioning with Terraform and running as a Deployment is incorrect because a Deployment doesn't guarantee a Pod on every node; it focuses on maintaining a desired number of replicas across the cluster.