2V0-71.23 Question 103
Select 3A platform team is deploying workloads on a Tanzu Kubernetes Grid cluster and needs to enable external access to HTTP and HTTPS services running within the cluster. They are considering using the Contour ingress controller to manage this functionality. What are the key roles that Contour plays in this scenario?
- A
Manages ingress resources to route external HTTP/HTTPS traffic to Kubernetes services.
- B
Acts as a load balancer for distributing traffic across multiple backend pods within the cluster.
- C
Supports advanced traffic management features like path-based routing and host-based routing.
- D
Provides a container runtime environment for running application workloads.
- E
Implements TLS termination to ensure secure communication for services exposed via ingress.
Show answer and explanation
Correct answers: A, C, E
Explanation
Contour is an ingress controller that works with the Envoy proxy to provide robust traffic management capabilities for Kubernetes clusters. Its primary roles include managing ingress resources, supporting advanced traffic routing (path-based and host-based), and enabling TLS termination for secure communications. These capabilities make it ideal for exposing HTTP/HTTPS services to external clients, while it relies on other components for load balancing and runtime environments.
- A. Correct.
Contour is designed to manage ingress resources and route external HTTP/HTTPS traffic to services running in the Kubernetes cluster.
- B. Incorrect.
While Contour integrates with a load balancer, it does not directly act as one. Instead, it works with Envoy as the data plane to handle traffic distribution.
- C. Correct.
Contour supports advanced traffic management features like path-based and host-based routing, which are critical for modern application architectures.
- D. Incorrect.
Contour does not provide a container runtime environment. Its primary function is related to ingress and traffic management.
- E. Correct.
Contour supports TLS termination, allowing it to handle secure HTTPS traffic and offload certificate management from application services.