QuestionQ15

VerifiedSection 4 - Install, Configure, Administrate the VMware Solution

An administrator is modernizing the internal HR and payroll applications with vSphere Kubernetes Services. The applications comprise multiple microservices deployed across Kubernetes Clusters and are fronted by Ingress controllers that route user traffic through AVI Kubernetes Operator. During testing, the team finds that manually creating and renewing TLS certificates for every Ingress resource is error-prone and causes periodic outages when certificates expire. The requirements also mandate that every application endpoint use trusted certificates issued by the corporate certificate authority (CA), with automatic renewal and rotation.

Which requirement can be satisfied by using cert-manager?

Explanation

cert-manager adds Kubernetes custom resource types such as Certificate, Issuer, and ClusterIssuer. A Certificate resource references an issuer, including one representing a corporate CA, and cert-manager automatically renews certificates before they expire.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!