1Z0-1123-25 Question 89
Select 2Your organization is migrating a containerized microservices application from an on-premises Kubernetes cluster to Oracle Cloud Infrastructure (OCI). You need to store container images in OCI and deploy them to Container Engine for Kubernetes (OKE). You already created an OKE cluster and want to ensure your images can be pulled successfully during deployment. Which TWO actions should you include in your migration plan?
- A
Generate an OCI Auth Token in the Console and use it with the Docker login command for Oracle Cloud Infrastructure Registry (OCIR).
- B
Attach an OCI Block Volume to your OKE cluster and manually copy container images to the volume for direct consumption.
- C
Tag your container images with the appropriate regional OCIR repository path and push them to your OCIR namespace.
- D
Use the same local registry credentials that you used on-premises for authentication against OCIR, skipping the Docker login command.
Show answer and explanation
Correct answers: A, C
Explanation
To migrate containerized applications to OKE, you need to securely store your container images in OCIR and configure OKE to pull them. Generating an OCI Auth Token and tagging images with your region-specific OCIR path are critical steps. After creating the token, you run 'docker login' against your regional OCIR endpoint using your Oracle Cloud username and the token. You then build and tag images with the correct repository name and push them to OCIR. For more information, refer to Oracle� documentation on pushing images to Container Registry: https://docs.oracle.com/en-us/iaas/Content/Registry/Concepts/registryoverview.htm
- A. Correct.
Correct. OCIR requires an OCI Auth Token for Docker login to authenticate your pushes/pulls. You must generate this token in the OCI Console (under your user profile > Auth Tokens) and then run 'docker login' with your username and the token.
- B. Incorrect.
Incorrect. Container images must reside in a registry accessible to OKE. Simply attaching a block volume to the cluster and manually copying images is not a supported practice for container deployment on OCI.
- C. Correct.
Correct. When pushing images to OCIR, they must be tagged with the appropriate region prefix (e.g., iad.ocir.io/tenancy-namespace/repo:tag) to ensure OKE can pull them. This step is essential for OKE to locate the images in the correct region and repository.
- D. Incorrect.
Incorrect. Even if the local credentials worked on-premises, you must authenticate to OCIR specifically. Using the same local credentials without generating an OCI Auth Token will fail because OCIR requires your Oracle Cloud username and the generated token for authentication.