2V0-71.23 Question 108
Select 3Your organization manages multiple Kubernetes clusters using VMware Tanzu. You are tasked with configuring External DNS to dynamically update DNS records for services exposed through an Ingress resource in one of the clusters. Which of the following statements correctly describe the role and functionality of External DNS in this scenario?
- A
External DNS automatically updates DNS records in the configured DNS provider based on Kubernetes Service or Ingress resources.
- B
External DNS replaces the need for Ingress controllers by directly exposing services to the internet.
- C
External DNS supports multiple DNS providers, such as AWS Route 53, Google Cloud DNS, and Azure DNS.
- D
External DNS ensures that the DNS records are continually synchronized with changes in the cluster.
- E
External DNS automatically creates SSL/TLS certificates for exposed services.
Show answer and explanation
Correct answers: A, C, D
Explanation
External DNS is a key component in automating DNS record management for Kubernetes clusters. It dynamically updates DNS records in the configured DNS provider based on Kubernetes Service or Ingress resources and ensures synchronization with cluster changes. It works alongside Ingress controllers and does not manage certificates, focusing solely on DNS record management. Its support for multiple DNS providers makes it a versatile tool for hybrid and multi-cloud environments.
- A. Correct.
Correct. External DNS integrates with Kubernetes to dynamically update DNS records in the configured DNS provider based on Kubernetes Service or Ingress resources.
- B. Incorrect.
Incorrect. External DNS does not replace Ingress controllers; instead, it works alongside them to manage DNS records for exposed services.
- C. Correct.
Correct. External DNS supports integration with multiple DNS providers, making it a flexible solution for different cloud and on-prem environments.
- D. Correct.
Correct. External DNS continuously monitors the cluster and ensures that DNS records are kept in sync with changes, such as scaling or service updates.
- E. Incorrect.
Incorrect. External DNS does not handle SSL/TLS certificate creation; this is typically managed by tools like cert-manager or other certificate management solutions.