Linux Foundation CKA Exam - Topic 1 Question 100 Discussion

Actual exam question for Linux Foundation's CKA exam

Question #: 100
Topic #: 1

SIMULATION

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

ASee the solution below

Show Suggested Answer

Suggested Answer: A

Solution:

Task should be complete on node k8s -1 master, 2 worker for this connect use command

[student@node-1] > ssh k8s

kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets

kubectl create serviceaccount cicd-token --namespace=app-team1

kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

by Iraida at May 29, 2026, 03:03 PM

Limited Time Offer

25%

1 month ago

I remember we practiced creating ClusterRoles, but I’m not sure about the exact syntax for binding it to a ServiceAccount.

upvoted 0 times

...