2V0-71.23 Question 93
Select 3An organization is deploying VMware Tanzu Kubernetes Grid (TKG) and plans to use Harbor as its container image registry. Which of the following are the key roles Harbor provides in this deployment?
- A
Serving as a container image registry with role-based access control (RBAC) for managing image access.
- B
Providing vulnerability scanning for container images to enhance security.
- C
Enabling the automatic deployment of containerized applications to Kubernetes clusters.
- D
Acting as a trusted registry by signing images to ensure their integrity.
- E
Replacing Kubernetes' built-in container runtime for workload execution.
Show answer and explanation
Correct answers: A, B, D
Explanation
Harbor is an open-source, cloud-native registry that plays a critical role in managing container images in VMware Tanzu Kubernetes environments. Its primary roles include serving as a container image registry with advanced security features such as RBAC, vulnerability scanning, and image signing. It does not handle application deployment or replace Kubernetes' container runtime.
- A. Correct.
Correct: Harbor serves as a container image registry and supports RBAC to manage access to images and projects, making it a key feature for enterprise use.
- B. Correct.
Correct: Harbor provides built-in vulnerability scanning for container images, helping to enhance the security posture of the deployment.
- C. Incorrect.
Incorrect: Harbor does not handle the deployment of containerized applications to Kubernetes. This is managed by Kubernetes or external deployment tools.
- D. Correct.
Correct: Harbor can sign container images using Content Trust to ensure their integrity and prevent tampering, making it a trusted registry.
- E. Incorrect.
Incorrect: Harbor does not replace Kubernetes' container runtime. It is a registry and security solution for container images.