Examkin

Question

Difficulty: MediumConfigure Azure Kubernetes Service (AKS)

You are deploying a new Azure Kubernetes Service (AKS) cluster named `aks-finance` into an existing Azure virtual network. The deployment must meet the following requirements:

* The Kubernetes pods must receive IP addresses directly from a dedicated subnet in the virtual network, distinct from the subnet used by the cluster nodes.
* User application workloads must not run on the same virtual machines as the cluster's system pods.

Which two actions should you perform? (Select two.)

  1. Configure the cluster to use Azure CNI with dynamic pod IP allocation.Answer
  2. Apply the CriticalAddonsOnly=true:NoSchedule taint to the system node pool.Answer
  3. C
    Configure the cluster to use Azure CNI Overlay networking.
  4. D
    Configure the cluster to use Kubenet networking.
  5. E
    Set the mode of the application node pool to System.

Answer

Configure the cluster to use Azure CNI with dynamic pod IP allocation, and apply the CriticalAddonsOnly=true:NoSchedule taint to the system node pool.
Configuring Azure CNI with dynamic pod IP allocation allows pods to be assigned IP addresses from a dedicated subnet that is separate from the node subnet. Applying the CriticalAddonsOnly=true:NoSchedule taint to the system node pool ensures that only system pods, which have the appropriate tolerations, can be scheduled on the system nodes, thereby isolating user workloads.

Step-by-Step Solution

1
Select the appropriate network configuration to assign pod IPs from a separate subnet.
Identify that Azure CNI with dynamic pod IP allocation meets this requirement by separating node and pod subnets.
Standard Azure CNI and Kubenet do not support allocating pod IPs from a separate virtual network subnet without utilizing dynamic allocation.
2
Select the configuration to prevent user workloads from running on system nodes.
Identify that applying the CriticalAddonsOnly=true:NoSchedule taint to the system node pool isolates it.
Kubernetes uses taints and tolerations to restrict which pods can run on specific nodes. The CriticalAddonsOnly taint specifically targets user workloads.

Key Concept

Azure Kubernetes Service (AKS) networking options (Azure CNI with dynamic IP allocation) and workload isolation using taints.
Rate this question

Topics

Configure Azure Kubernetes Service (AKS)

More questions from this topic