Pass the VMware VMware Certified Specialist - vSphere with Tanzu 2022 5V0-23.20 Questions and answers with CertsForce

Graphical user interface Description automatically generated

VMware Tanzu Mission Control™ is a centralized management platform for consistently operating and securing your Kubernetes infrastructure and modern applications across multiple teams and clouds.

A user can have permissions on multiple namespaces. The kubectl commands are typically actioned against the current active namespace.

View the list of available namespaces:

kubectl config get-contexts

Change the current active namespace:

kubectl config use-context

Graphical user interface, application Description automatically generated

Permissions for programmers should be assign at the Namespace level, typically using groups and roles.

You assign roles for the Namespace to Active Directory groups. You can later assign access to users by adding them to these groups. You assign access to separate Active Directory groups for the edit and view roles in the Namespace.

As a vSphere administrator, you can enable the Workload Management platform on a vSphere cluster by configuring the vSphere networking stack to provide connectivity to workloads. A Supervisor Cluster that is configured with vSphere networking supports the deployment of Tanzu Kubernetes clusters created by using the Tanzu Kubernetes Grid Service. It does not support running vSphere Pod or using the embedded Harbor Registry.

Create an example pod spec with the details about the private registry.

apiVersion: v1

kind: Pod

metadata:

name:

namespace:

spec:

containers:

- name: private-reg-container

image: //:

imagePullSecrets:

- name:

Replace  with the name of the pod workload.

Replace  with the Kubernetes namespace in the cluster where the pod will be created. This must be the same Kubernetes namespace where the Registry Service image pull secret is stored in the Tanzu Kubernetes cluster (such as the default namespace).

Replace  with the IP address for the embedded Harbor Registry instance running on the Supervisor Cluster.

Replace with the vSphere Namespace where the target Tanzu Kubernetes is provisioned.

Replace  with an image name of your choice.

Replace  with an appropriate version of the image, such as "latest".

Replace  with the name of the Registry Service image pull secret that you created previously.

The Workload Network, such as TKGS-VLAN1000, is where the Tanzu Kubernetes clusters run.

A workload network is a network construct that is used by supervisor control plane VMs and vSphere namespaces:

• The workload network is supported by a vSphere Distributed Switch port group.

• An IP range is defined to allocate an IP address for VMs attached to the workload network.

• A primary workload network must be selected.

• The supervisor control plane VMs attach to the primary workload networks port group.

A workload network can be used by multiple namespaces. A namespace can be assigned only one workload network.

https://docs.docker.com/docker-hub/repos/

Graphical user interface, text, application Description automatically generated

• Registry Service: Developers can store and manage Docker and OCI images using Harbor. Harbor is an open-source container image registry that secures images with role-based access control.

Procedure

Login to Harbor Registry with the vSphere Docker Credential Helper.

docker-credential-vsphere login --user username@domain.com

Note:While providing --user username is acceptable for login, you should use the UserPrincipalName (UPN) syntax ( --user username@domain.com) to login and use docker push commands.

Tag the image that you want to push to the project in Harbor Registry with same name as the namespace, where you want to use it:

docker tag [:TAG] //[:TAG]

For example:

docker tag hello-world:latest 10.179.145.77/tkgs-cluster-ns/hello-world:latest

docker images

REPOSITORY TAG IMAGE ID CREATED SIZE

10.179.145.77/tkgs-cluster-ns/hello-world latest bf756fb1ae65 10 months ago 13.3kB

hello-world latest bf756fb1ae65 10 months ago 13.3kB

To push an image to a project in Harbor, run the following command:Syntax:

docker push //

For example:

docker push 10.179.145.77/tkgs-cluster-ns/hello-world:latest

Expected result.

The push refers to repository [10.179.145.77/tkgs-cluster-ns/hello-world]

9c27e219663c: Pushed

latest: digest: sha256:90659bf80b44ce6be8234e6ff90a1ac34acbeb826903b02cfa0da11c82cbc042 size: 525