2V0-71.23 Question 102
Select 3Your organization is deploying a modern application on a Kubernetes cluster managed by VMware Tanzu Kubernetes Grid. The application requires external HTTP/HTTPS traffic to be routed to specific services running within the cluster. They decide to use the Contour ingress controller. What are key roles of the Contour ingress controller in this scenario?
- A
Providing a high-performance Layer 7 load balancing mechanism for HTTP/HTTPS traffic.
- B
Enabling automatic scaling of Kubernetes pods based on incoming traffic load.
- C
Managing Ingress resources and translating them into Envoy configurations.
- D
Handling mutual TLS (mTLS) for communication between services within the cluster.
- E
Providing advanced traffic management features such as path-based routing and header manipulation.
Show answer and explanation
Correct answers: A, C, E
Explanation
The Contour ingress controller is a key component for managing external HTTP/HTTPS traffic in Kubernetes clusters. It works with Envoy to provide Layer 7 load balancing, advanced traffic management, and Ingress resource processing. These capabilities make it valuable for modern application deployments requiring fine-grained traffic control. However, Contour does not manage pod scaling or internal service-to-service communication security, as these are outside its scope.
- A. Correct.
Contour acts as an ingress controller, working with Envoy to provide Layer 7 load balancing for HTTP/HTTPS traffic.
- B. Incorrect.
Contour does not handle pod scaling; Kubernetes Horizontal Pod Autoscaler (HPA) is responsible for scaling pods based on metrics.
- C. Correct.
Contour translates Kubernetes Ingress resources into configurations for the Envoy proxy, enabling traffic routing.
- D. Incorrect.
Handling mutual TLS (mTLS) between services is not a primary function of Contour; this is typically managed by service meshes like Istio or Linkerd.
- E. Correct.
Contour supports advanced traffic management features such as path-based routing, virtual host configurations, and header manipulation, making it flexible for complex application routing needs.