2V0-71.23 Question 86
Single answerYou are tasked with setting up automated certificate management for a Tanzu Kubernetes cluster. The organization requires support for issuing and renewing TLS certificates for internal and external services. How does cert-manager help in this scenario?
- A
It integrates with Kubernetes to automatically provision and renew TLS certificates using certificate issuers.
- B
It acts as a load balancer for Kubernetes services to distribute HTTPS traffic using TLS certificates.
- C
It provides a CLI tool for manually creating and managing TLS certificates across Kubernetes clusters.
- D
It integrates with Kubernetes Ingress controllers to enforce network policies for TLS traffic.
Show answer and explanation
Correct answer: A
Explanation
cert-manager is an open-source Kubernetes add-on designed to help manage TLS certificates automatically. It integrates with certificate issuers and Kubernetes resources like Ingress to provision and renew certificates, ensuring secure communication for Kubernetes workloads. This automation reduces the operational overhead of manually managing certificates.
- A. Correct.
Correct. cert-manager integrates with Kubernetes to automate the provisioning, management, and renewal of TLS certificates by leveraging certificate issuers like Let's Encrypt or private PKI.
- B. Incorrect.
Incorrect. cert-manager is not a load balancer. It focuses on certificate lifecycle management, not traffic distribution.
- C. Incorrect.
Incorrect. cert-manager does not provide a CLI for manual certificate management; its purpose is to automate certificate operations.
- D. Incorrect.
Incorrect. cert-manager does not enforce network policies. While it can work with Ingress resources, its role is limited to managing TLS certificates, not policy enforcement.