2V0-71.23 Question 17
Select 3A system administrator is responsible for managing a Kubernetes cluster deployed using VMware Tanzu Kubernetes Grid (TKG). They need to ensure that application workloads are isolated for different departments while maintaining centralized control over resource quotas and policies. Which combination of Kubernetes concepts should they use to achieve this?
- A
Namespaces
- B
Resource Quotas
- C
ClusterRoles
- D
Persistent Volumes
- E
Network Policies
Show answer and explanation
Correct answers: A, B, E
Explanation
To isolate application workloads for different departments while maintaining centralized control, the administrator should use Namespaces for logical separation, Resource Quotas to enforce resource usage limits, and Network Policies to control communication between workloads. These concepts together provide isolation, resource control, and security within the Kubernetes cluster.
- A. Correct.
Namespaces are used to logically isolate workloads within the same Kubernetes cluster, making them essential for separating departmental workloads.
- B. Correct.
Resource Quotas allow administrators to define limits on resource usage (e.g., CPU and memory) within a namespace, ensuring fair usage and avoiding resource exhaustion.
- C. Incorrect.
ClusterRoles are used to define permissions at the cluster level but do not directly help with isolating application workloads or managing resource quotas.
- D. Incorrect.
Persistent Volumes are used for managing storage but do not directly contribute to workload isolation or centralized resource control.
- E. Correct.
Network Policies allow administrators to control traffic flow between pods, which can enhance isolation between workloads in different namespaces.