VMware 5V0-23.20 Exam Dumps

If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), then you might consider using Kubernetes NetworkPolicies for particular applications in your cluster. NetworkPolicies are an application-centric construct which allow you to specify how apodis allowed to communicate with various network 'entities' (we use the word 'entity' here to avoid overloading the more common terms such as 'endpoints' and 'services', which have specific Kubernetes connotations) over the network. NetworkPolicies apply to a connection with a pod on one or both ends, and are not relevant to other connections.

NSX Container Plugin (NCP) runs as a pod on the control plane VMs. It listens for requests for network objects to the API server and interfaces with the NSX Manager to create, update, or delete those objects:

* A request to create a namespace results in a new NSX segment.

* A request to deploy a pod results in a segment port request and IP assignment.

* A request to create a service results in a new virtual server.

* A request to create a network policy results in a new distributed firewall rule.

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.

Prerequisites

Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.

Procedure

In the vSphere Client, navigate to the Supervisor Cluster.

ClickConfigurethen underNamespacesselectCertificates.

In theWorkload platform MTGpane, selectActions > Generate CSR.

Provide the details for the certificate.

Once the CSR is generated, clickCopy.

Sign the certificate with a CA.

From theWorkload platform MTGpane, selectActions > Replace Certificate.

Upload the signed certificate file and clickReplace Certificate.

Validate the certificate on the IP address of the Kubernetes control plane.

The storage policy would become a storage class in Kubernetes.

The vSphere administrator defines and assigns VM storage policies to a namespace:

* VM storage policies are translated into Kubernetes storage classes.

* Developers can access all assigned VM storage policies in the form of storage classes.

* Developers cannot manage storage classes.

Developers can list the available storage classes in their namespace by running the kubectl describe ns <namespace-name> command.