2V0-71.23 Question 127
Select 2An organization is using VMware Tanzu Mission Control (TMC) to manage their Kubernetes clusters across multiple cloud providers. The operations team wants to enable consistent policy enforcement across all clusters while allowing individual development teams to manage their specific namespaces. Which combination of TMC features should the operations team use to achieve this goal?
- A
Use Workspaces to group namespaces and apply policies at the workspace level.
- B
Enable Cluster Inspections to enforce security policies and best practices across clusters.
- C
Use Cluster Groups to apply cluster-wide policies and separate namespaces by teams.
- D
Assign each team its own TMC organization to isolate their namespace management.
- E
Leverage Role-Based Access Control (RBAC) in TMC to delegate namespace management to teams.
Show answer and explanation
Correct answers: A, E
Explanation
To achieve consistent policy enforcement and allow individual teams to manage their namespaces, the combination of Workspaces and TMC's RBAC is the most effective solution. Workspaces enable policy enforcement across namespaces regardless of the cluster they belong to, while RBAC allows for precise delegation of namespace management to specific teams.
- A. Correct.
Workspaces in TMC allow grouping of namespaces across clusters, enabling consistent policy enforcement at the workspace level. This is essential for applying governance without conflicting with team-specific namespace management.
- B. Incorrect.
Cluster Inspections focus on security best practices and compliance but do not specifically address namespace management or team delegation.
- C. Incorrect.
Cluster Groups are used to organize clusters for applying cluster-wide policies, but they do not provide a mechanism for namespace-level management or delegation to teams.
- D. Incorrect.
Creating a separate TMC organization for each team is not a recommended approach and would unnecessarily complicate cluster and namespace management.
- E. Correct.
TMC's RBAC capabilities enable granular delegation, allowing teams to manage their namespaces while the operations team retains control over cluster-wide policies.