VCP-VCF Administrator 2024 Question 80
Select 4An organization is planning to enable Tanzu on a VMware Cloud Foundation workload domain. As the Cloud Foundation Administrator, you are tasked with identifying the network requirements to ensure proper functionality of Tanzu. Which of the following are valid ingress and egress network requirements that must be met?
- A
Ingress and egress traffic must be allowed for the Supervisor Cluster API server.
- B
Egress traffic must be allowed to access external container registries.
- C
Ingress traffic must be restricted to only management VMs within the workload domain.
- D
Egress traffic must be allowed for DNS, NTP, and external load balancer endpoints.
- E
Ingress traffic must be allowed on TCP port 6443 for Kubernetes API access.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To enable Tanzu on a VMware Cloud Foundation workload domain, there are specific ingress and egress network requirements. Ingress traffic must include access to the Supervisor Cluster API server and Kubernetes API on port 6443 for cluster management. Egress traffic must allow access to DNS, NTP, external container registries, and load balancer endpoints to ensure proper functionality and connectivity for Kubernetes workloads. Restricting ingress traffic to only management VMs would block necessary access for Tanzu operations.
- A. Correct.
Correct. Ingress and egress traffic to the Supervisor Cluster API server is essential for managing Tanzu clusters and workloads.
- B. Correct.
Correct. Egress traffic to external container registries is required for pulling container images when deploying workloads.
- C. Incorrect.
Incorrect. Ingress traffic should not be restricted solely to management VMs; it also needs to accommodate Kubernetes API access and external services.
- D. Correct.
Correct. Egress traffic to DNS, NTP, and external load balancer endpoints ensures proper name resolution, time synchronization, and load balancing for Tanzu workloads.
- E. Correct.
Correct. Ingress traffic on TCP port 6443 is required for Kubernetes API access, which is critical for interacting with Tanzu clusters.