An administrator was requested to create a pod with two interfaces to separate the application and management traffic for security reasons.
Which two packages have to be installed in VMware Tanzu Kubernetes Grid cluster to satisfy the requirement? (Choose two.)
To create a pod with two interfaces to separate the application and management traffic, the packages required are 'multus' and 'contour'. Multus is a CNI plugin for Kubernetes designed to enable attaching multiple network interfaces to pods, which is essential for managing distinct application and management traffic. Contour, an Ingress controller for Kubernetes, facilitates efficient traffic handling and routing for applications, complementing the use of multiple interfaces to ensure smooth and secure traffic management within the cluster.
A. multus: Multus is a CNI plugin for Kubernetes that allows you to attach multiple network interfaces to pods. E. contour: Contour is an Ingress controller for Kubernetes, and while it is not directly related to creating multiple interfaces for pods, it can be used in conjunction with other networking solutions like multus to manage the routing and traffic handling for your applications.
Answer is A and C. Multus-cni requires cert-manager to deploy. https://docs.vmware.com/en/VMware-Tanzu-Kubernetes-Grid/2.3/tkg-deploy-mc/workload-packages-index.html
Gnocchi is right. It's A and C.
https://docs.vmware.com/en/VMware-Tanzu-Packages/2023.11.21/tanzu-packages/packages-cert-mgr-super.html The Cert Manager package provides certificate management for the TKG cluster. Cert Manager is a prerequisite for all other Tanzu packages and therefore must be the first package you install.
As documentation, the prerequisites/installation steps for multus does not mention cert-manager as prerequisites. While for other packages like, harbor/promethues/grafana/fluent-bit, cert-manager is prereq and is mentioned under the installation steps of these individual components. However, for External DNS and Multus, cert manager is not shown as prereq or under installation step as required. As per question, ask is to isolate application and mgmt traffic and usually application is exposed using contour as ingress. Hence possibly, answer should be multus and contour