A city permitting API must present TLS credentials the ops team can rotate for that service alone. The shared ingress still uses a platform default certificate nobody on the app team can replace. Which configuration choice satisfies an application-specific SSL requirement?
Select an answer to reveal the explanation.
Short Explanation
Think of a storefront needing its own lock, not a master key shared with every other shop. Application-specific SSL means this service presents a cert the team can rotate for that hostname.
Full Explanation
DEVCOR tasking on application-specific SSL expects the app (or its dedicated ingress) to use a certificate issued for that service. A shared platform default the app team cannot replace fails when the scenario wants an app-owned identity. Campus VPN termination or password-in-URL schemes do not meet the application HTTPS identity requirement.