1Z0-1123-25 Question 85
Select 2Your organization is migrating a suite of container-based microservices from an on-premises environment to Oracle Cloud Infrastructure (OCI). As part of the migration, you plan to use Oracle Container Engine for Kubernetes (OKE) to orchestrate the containers. You need to ensure that the container images can be securely made available to your OKE cluster with minimal downtime during cutover. Which TWO actions should you implement to meet these requirements?
- A
Push your container images to Oracle Cloud Infrastructure Container Registry (OCIR) and configure OKE to pull from this private registry.
- B
Store your container images exclusively on each worker node's local volume in OKE to eliminate the need for an external registry.
- C
Implement an automated deployment pipeline (for example, using Terraform or Helm) to roll out updated container images in a rolling fashion.
- D
Allow unauthenticated public access to the container images so the OKE cluster can retrieve them from a publicly accessible repository without credentials.
Show answer and explanation
Correct answers: A, C
Explanation
To migrate containerized applications securely and efficiently to OCI, leverage OCI Container Registry (OCIR) to store and manage container images, and configure your OKE cluster to pull from that private repo. Then, use a scripted or automated approach�such as Terraform or Helm charts�to deploy and update images in a controlled manner with minimal downtime. For official details, refer to Oracle� documentation on Container Engine for Kubernetes (OKE) and OCI Container Registry.
- A. Correct.
Correct. Pushing your images to OCIR and configuring OKE to pull from that registry is the recommended approach for secure and efficient image retrieval in OCI. This ensures that images are private by default and protected via proper credentials and policies.
- B. Incorrect.
Incorrect. Storing images on each node� local volume is impractical and not a best practice. It complicates updates, introduces security concerns, and can cause inconsistencies across nodes. Using a centralized registry (like OCIR) is the recommended approach.
- C. Correct.
Correct. Using an automated deployment pipeline (Terraform, Helm, etc.) to perform rolling updates on your OKE cluster ensures minimal downtime. It also allows for easy version control, repeatable deployments, and streamlined workflows.
- D. Incorrect.
Incorrect. Exposing your container images to the public is not a secure best practice and defeats the purpose of using a private registry. OKE supports secure authentication with OCIR, so public repositories are unnecessary unless you specifically want to share images publicly.