2V0-71.23 Question 88
Single answerA company is using VMware Tanzu Kubernetes Grid (TKG) to manage their Kubernetes clusters. They need to ensure that their web applications running in the clusters use HTTPS with automatically renewing certificates. How does cert-manager help in this scenario?
- A
It automates the provisioning and renewal of TLS certificates for Kubernetes applications.
- B
It acts as a load balancer to distribute traffic across Kubernetes pods.
- C
It provides a built-in identity and access management (IAM) system for Kubernetes clusters.
- D
It integrates with certificate authorities (CAs) to manage certificates for Kubernetes resources.
Show answer and explanation
Correct answer: A
Explanation
cert-manager is a Kubernetes add-on that automates the management and renewal of TLS certificates for various Kubernetes resources. It integrates with certificate authorities (CAs) and ensures certificates are always valid and up to date, making it ideal for securing web applications with HTTPS in Kubernetes environments.
- A. Correct.
Correct: cert-manager is specifically designed to automate the issuance, renewal, and management of TLS certificates for Kubernetes resources such as Ingresses and custom resources.
- B. Incorrect.
Incorrect: cert-manager is not a load balancer; its purpose is focused on cert management, not traffic distribution.
- C. Incorrect.
Incorrect: cert-manager does not provide identity and access management. This is handled by other tools such as RBAC in Kubernetes.
- D. Incorrect.
Incorrect: While cert-manager integrates with CAs, its primary purpose is automating the certificate lifecycle, not just integration.