How are quotas and permissions guaranteed by vSphere with Tanzu for Tanzu Kubernetes (TKG) clusters...

By routing quota and permission API calls to vCenter Server via the Supervisor Cluster

By ensuring each TKG cluster has a quotas and permissions system built into it natively which enforces all requests

By having the Supervisor Cluster poll the TKG cluster periodically to ensure adherence to quotas and permissions

By deploying an external authentication solution