2V0-71.23 Question 216
Select 3You are managing a Tanzu Kubernetes Cluster and need to configure user authentication and authorization to restrict access to resources based on roles. Which of the following are valid authentication and authorization methods for Tanzu Kubernetes Clusters?
- A
Integrating with an external identity provider using OpenID Connect (OIDC)
- B
Using Kubernetes' built-in service account tokens for user authentication
- C
Configuring Role-Based Access Control (RBAC) policies on the cluster
- D
Enabling Basic Authentication with usernames and passwords in the Kubernetes API server
- E
Using VMware Tanzu Mission Control (TMC) to manage access control across multiple clusters
Show answer and explanation
Correct answers: A, C, E
Explanation
Authentication and authorization in Tanzu Kubernetes Clusters involve integrating external identity providers using OIDC for authentication, configuring RBAC for fine-grained authorization, and optionally using tools like VMware Tanzu Mission Control for centralized management. Service account tokens are not suitable for user authentication, and Basic Authentication is insecure and deprecated.
- A. Correct.
Integrating with an external identity provider using OpenID Connect (OIDC) is a recommended authentication method for Tanzu Kubernetes Clusters. It allows users to authenticate with external systems like Active Directory or other SSO providers.
- B. Incorrect.
Kubernetes' built-in service account tokens are designed for applications and workloads, not for human user authentication. This is not a recommended method for user authentication.
- C. Correct.
Role-Based Access Control (RBAC) is a standard Kubernetes feature and is used for defining fine-grained authorization policies in Tanzu Kubernetes Clusters.
- D. Incorrect.
Basic Authentication with usernames and passwords is deprecated in Kubernetes and is not recommended due to security concerns.
- E. Correct.
VMware Tanzu Mission Control (TMC) provides centralized access management, including authentication and authorization across multiple Tanzu Kubernetes Clusters.