2V0-71.23 Question 85
Select 3Your organization is deploying a Kubernetes cluster using VMware Tanzu and needs to enable automatic management of TLS certificates for secure communication between services. The team is considering cert-manager to handle this requirement. Which of the following functions does cert-manager provide in this scenario?
- A
Automatically provisions TLS certificates by integrating with external certificate authorities (CAs).
- B
Handles Kubernetes namespace-level network policies for secure communication.
- C
Renews TLS certificates before they expire to ensure uninterrupted service.
- D
Provides an API for requesting and managing certificates within Kubernetes clusters.
- E
Manages role-based access control (RBAC) policies for Kubernetes users.
Show answer and explanation
Correct answers: A, C, D
Explanation
cert-manager is a Kubernetes-native solution designed to automate TLS certificate management. It integrates with external certificate authorities to provision certificates, ensures certificates are renewed before expiration, and provides an API for certificate operations. These features are crucial for maintaining secure communication in Kubernetes environments but do not extend to unrelated functionalities like network policies or RBAC management.
- A. Correct.
Correct. cert-manager integrates with external CAs to provision TLS certificates automatically, ensuring services have secure communication.
- B. Incorrect.
Incorrect. Managing network policies is not a function of cert-manager; this is typically handled by tools like Calico or Kubernetes network policy.
- C. Correct.
Correct. cert-manager ensures that TLS certificates are renewed before they expire, avoiding potential downtime or security issues.
- D. Correct.
Correct. cert-manager provides an API that developers and operators can use to request and manage certificates within Kubernetes clusters.
- E. Incorrect.
Incorrect. Managing RBAC policies is outside the scope of cert-manager and is handled by Kubernetes natively.