5V0-23.20 Exam Dumps - VMware Certified Specialist - vSphere with Tanzu 2022 Questions and Answers

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.

Prerequisites

Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.

Procedure

• In the vSphere Client, navigate to the Supervisor Cluster.
• Click Configure then under Namespaces select Certificates.
• In the Workload platform MTG pane, select Actions > Generate CSR.
• Provide the details for the certificate.
• Once the CSR is generated, click Copy.
• Sign the certificate with a CA.
• From the Workload platform MTG pane, select Actions > Replace Certificate.
• Upload the signed certificate file and click Replace Certificate.
• Validate the certificate on the IP address of the Kubernetes control plane.

Graphical user interface, application Description automatically generated

Permissions for programmers should be assign at the Namespace level, typically using groups and roles.

You assign roles for the Namespace to Active Directory groups. You can later assign access to users by adding them to these groups. You assign access to separate Active Directory groups for the edit and view roles in the Namespace.

VMware Harbor Registry

VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images. Harbor allows you to store and manage images for use with VMware Tanzu Kubernetes Grid Integrated Edition (TKGI).

Overview

Harbor extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity, and management. As an enterprise private registry, Harbor offers enhanced performance and security. Deploying a registry alongside the TKGI environment improves image management efficiency.

Print the client and server version information.

Synopsis

Print the client and server version information.

• kubectl version

This is the textbook answer, I know kubectl does give you some information.