2V0-71.23 Question 35
Select 3You are managing a Kubernetes cluster within a VMware Tanzu environment. A developer reports that their application is unable to connect to a database service running in a different namespace. Upon investigation, you notice that the service is defined correctly, and the database pod is running. Which of the following Kubernetes networking or storage configurations should you review to resolve the issue?
- A
Ensure that a NetworkPolicy allows traffic between the application and the database namespaces.
- B
Verify that the PersistentVolumeClaim (PVC) for the database pod is bound to a PersistentVolume (PV).
- C
Check if the database service has an appropriate ClusterIP or ExternalName configured.
- D
Confirm that the application pod's serviceAccount has the necessary RBAC permissions to access the database service.
- E
Validate that the DNS resolution is working properly in the Kubernetes cluster.
Show answer and explanation
Correct answers: A, C, E
Explanation
To resolve the connectivity issue, you should check the relevant Kubernetes networking configurations. NetworkPolicies may restrict communication between namespaces, so they must allow traffic between the application and database pods. The database service must also be correctly configured with a valid ClusterIP or ExternalName to ensure connectivity. Additionally, DNS resolution must be functioning properly to allow the application pod to discover the database service. Storage configurations (PVCs/PVs) and RBAC permissions are unrelated to the described scenario.
- A. Correct.
NetworkPolicies in Kubernetes control network traffic between pods and namespaces. If a restrictive NetworkPolicy is applied, the application pod may be unable to communicate with the database pod.
- B. Incorrect.
PersistentVolumeClaims (PVCs) and PersistentVolumes (PVs) are related to storage and do not affect network communication. This option is not relevant to the issue described.
- C. Correct.
The ClusterIP or ExternalName configuration of the service determines how pods can connect to it. A misconfigured service could prevent the application pod from connecting to the database.
- D. Incorrect.
RBAC permissions control API access, not network traffic between pods or services. This is unrelated to the connectivity issue described.
- E. Correct.
DNS resolution within the Kubernetes cluster is essential for service discovery. If DNS is not functioning properly, the application pod may fail to resolve the database service's name.