VCP-VCF Administrator 2024 Question 79
Select 3An administrator is enabling Tanzu on a VMware Cloud Foundation workload domain. As part of the configuration, they must ensure that the network settings for ingress and egress traffic are properly defined. Which of the following network requirements must be met to enable Tanzu on a workload domain?
- A
A dedicated Load Balancer IP range must be configured for ingress traffic.
- B
The workload domain must have a minimum of two vSphere Distributed Switches to handle Tanzu traffic.
- C
The Supervisor Cluster must have a routable CIDR range for Pod and Service networks.
- D
The egress traffic must allow outbound internet access for container images and updates.
- E
A dedicated physical NIC must be assigned for Tanzu traffic on each ESXi host in the workload domain.
Show answer and explanation
Correct answers: A, C, D
Explanation
When enabling Tanzu on a VMware Cloud Foundation workload domain, specific network configurations are required to ensure proper ingress and egress traffic handling. The Load Balancer IP range is necessary for routing external traffic, while the Supervisor Cluster requires a routable CIDR range for Pod and Service networks. Additionally, egress traffic must allow outbound internet access to pull container images and updates. It is not mandatory to have a dedicated physical NIC or multiple vSphere Distributed Switches for Tanzu traffic.
- A. Correct.
A dedicated Load Balancer IP range is required for handling ingress traffic, as it is used to route external traffic to the applications running on Tanzu Kubernetes clusters.
- B. Incorrect.
While multiple vSphere Distributed Switches can be used in a workload domain, it is not a strict requirement for enabling Tanzu. Tanzu traffic can be handled on a single vSphere Distributed Switch.
- C. Correct.
The Supervisor Cluster requires a routable CIDR range for Pod and Service networks to ensure proper communication and network isolation for Kubernetes workloads.
- D. Correct.
Egress traffic must allow outbound internet access to pull container images from registries and download updates for Tanzu components.
- E. Incorrect.
A dedicated physical NIC is not mandatory for Tanzu traffic. Network traffic can be handled via existing NICs through proper configuration of vSphere Distributed Switches and VLANs.