5V0-23.20 Practice Exam Questions with Answers VMware vSphere with Tanzu Specialist Certification

Enabling Harbor Image Registry

The vSphere administrator uses the vSphere Client to enable Harbor. To enable this component, select a cluster, select Configure > Namespaces > Image Registry, and click ENABLE HARBOR:

• A VM Storage Policy is required to allocate storage for the Harbor pods.

• An IP Address, based on the ingress CIDR range, is allocated for the Harbor management interface.

• After a few minutes, Harbor is deployed and running. 184

Certain Kubernetes workloads require persistent storage to store data permanently. To provision persistent storage for Kubernetes workloads, vSphere with Tanzu integrates with Cloud Native Storage (CNS), a vCenter Server component that manages persistent volumes.

Persistent storage is used by vSphere Pods, Tanzu Kubernetes clusters, and VMs. The following example illustrates how persistent storage is used by a vSphere Pod.

vSphere Pods use different types of storage depending on the objects that are stored. The types of storage are ephemeral virtual machine disks (VMDKs), persistent volume VMDKs, and containers image VMDKs:

• Storage policies for container image and ephemeral disks are defined at the cluster level.

• Storage policies for persistent volumes are defined at the namespace level.

• Networking for vSphere Pods uses the topology provided by NSX.

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.

Prerequisites

Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.

Procedure

• In the vSphere Client, navigate to the Supervisor Cluster.
• Click Configure then under Namespaces select Certificates.
• In the Workload platform MTG pane, select Actions > Generate CSR.
• Provide the details for the certificate.
• Once the CSR is generated, click Copy.
• Sign the certificate with a CA.
• From the Workload platform MTG pane, select Actions > Replace Certificate.
• Upload the signed certificate file and click Replace Certificate.
• Validate the certificate on the IP address of the Kubernetes control plane.

• The HAProxy virtual IP range where external services and DevOps users connect. In this configuration, HAProxy is deployed with two virtual NICs (Default configuration), one connected to the management network, and a second one connected to the Primary Workload Network. You must plan for allocating Virtual IPs on a separate subnet from the Primary Workload Network.

https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-1F885AAE-92FF-41E6-BF04-0F0FD4173BD9.html

The Cloud Native Storage server resides in vCenter Server:

• Provisions and manages life cycle operations for container volumes

• Creates First Class Disks (FCDs) to support the container volumes

• First Class Disks exist as .vmdk and -flat.vmdk files on a vSphere datastore •

Integrates with storage policy based management (SPBM) for the placement of disks

A First Class Disk (FCD) is also called an improved virtual disk. It is a named virtual disk that is unassociated with a VM. These disks reside on a VMFS, NFS, or vSAN datastore and support container volumes.

Storage policy based management (SPBM) is a vCenter Server service that supports provisioning of persistent volumes according to specified storage requirements. After provisioning, the service monitors compliance of the volume with the required policy characteristics.

You can deploy an application on a namespace on a Supervisor Cluster. Once the application is deployed, the respective number of vSphere Pods are created on the Supervisor Cluster within the namespace.

Common kubectl commands include the apply, get, describe, and delete commands:

• The kubectl apply command applies the contents of a YAML file. Typically, this command is used to create a pod or deployment: —

kubectl apply -f /path/to/my.yaml

• The kubectl get command returns basic information about an object: — kubectl get pod