2V0-71.23 Question 87
Select 3Your organization is deploying a Kubernetes application on VMware Tanzu and requires HTTPS communication for its services. You plan to use cert-manager for automated certificate management. Which of the following are roles of cert-manager in this scenario?
- A
Issuing certificates for Kubernetes Ingress resources
- B
Automatically renewing TLS certificates before expiration
- C
Managing RBAC policies for Kubernetes users
- D
Integrating with external certificate authorities to issue certificates
- E
Monitoring pod resource utilization in the cluster
Show answer and explanation
Correct answers: A, B, D
Explanation
cert-manager is a Kubernetes-native tool designed for automating the issuance and renewal of TLS certificates. It plays a crucial role in managing certificates for Kubernetes Ingress, automating certificate lifecycle management, and integrating with external certificate authorities. However, cert-manager does not handle unrelated tasks such as RBAC management or resource monitoring, which are outside its scope.
- A. Correct.
Correct. cert-manager is often used to issue certificates for Ingress resources, enabling secure HTTPS communication.
- B. Correct.
Correct. cert-manager automatically renews TLS certificates before they expire to ensure uninterrupted secure communication.
- C. Incorrect.
Incorrect. cert-manager does not manage RBAC policies; it focuses on certificate management and automation.
- D. Correct.
Correct. cert-manager can integrate with external certificate authorities, such as Let's Encrypt, to issue certificates.
- E. Incorrect.
Incorrect. cert-manager does not monitor pod resource utilization; this is the responsibility of other tools like Prometheus or Kubernetes itself.