Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKA Exam - Topic 1 Question 53 Discussion

Score: 4%ContextYou have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.TaskCreate a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:* Deployment* StatefulSet* DaemonSetCreate a new ServiceAccount named cicd-token in the existing namespace app-team1.Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.
A) Explanation: Solution: Task should be complete on node k8s -1 master, 2 worker for this connect use command [student@node-1] > ssh k8s kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets kubectl create serviceaccount cicd-token --namespace=app-team1 kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

Linux Foundation CKA Exam - Topic 1 Question 53 Discussion

Actual exam question for Linux Foundation's CKA exam
Question #: 53
Topic #: 1
[All CKA Questions]

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Daniela at Jan 24, 2024, 09:02 AM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Carmen
10 months ago
I thought you could just use a Role instead of a ClusterRole for namespace-scoped permissions?
upvoted 0 times
...
Derick
10 months ago
Nice, I love how straightforward this is!
upvoted 0 times
...
Ranee
10 months ago
Wait, is it really necessary to create a ClusterRole for just those resources? Seems overkill.
upvoted 0 times
...
Yvette
10 months ago
Totally agree, that’s a common mistake!
upvoted 0 times
...
Chauncey
11 months ago
Just a heads up, the rolebinding command should reference the correct namespace for the ServiceAccount.
upvoted 0 times
...
Matilda
11 months ago
I’m a bit confused about the namespace part; I think we need to make sure the ServiceAccount is in the right namespace when binding it.
upvoted 0 times
...
Willis
11 months ago
I know we have to specify the resources correctly, but did we cover if we need to use "kubectl create rolebinding" or "kubectl create clusterrolebinding"?
upvoted 0 times
...
Vanna
11 months ago
I practiced something similar last week, but I feel like I mixed up the commands for ClusterRole and RoleBinding.
upvoted 0 times
...
Roselle
11 months ago
I think I remember that we need to create a ClusterRole with specific permissions, but I'm not sure about the exact syntax for binding it to the ServiceAccount.
upvoted 0 times
...
Wilford
11 months ago
I feel confident about this task. I've done similar things before, so I think I can knock this out quickly. I'll just need to be careful with the syntax and make sure I get the namespacing right.
upvoted 0 times
...
Carey
11 months ago
This seems pretty straightforward, but I want to make sure I understand the context and requirements fully before I start. I'll read through the question a few times to make sure I don't miss anything.
upvoted 0 times
...
Aliza
11 months ago
Okay, I think I've got a plan. I'll start by creating the ClusterRole, then the ServiceAccount, and finally the RoleBinding to connect them. As long as I follow the instructions carefully, I should be able to complete this task.
upvoted 0 times
...
Alexia
11 months ago
Hmm, I'm a bit unsure about the exact syntax for creating the ClusterRole and binding it to the ServiceAccount. I'll need to double-check the Kubernetes documentation to make sure I get the commands right.
upvoted 0 times
...
Rosio
11 months ago
This looks like a straightforward task, I should be able to handle it. I'll need to create the ClusterRole, ServiceAccount, and RoleBinding as specified.
upvoted 0 times
...
Dion
12 months ago
Ah, I see now. The key is to reference the device variable from the YANG model, as mentioned in option D. That should allow me to properly enter the device into the YANG model.
upvoted 0 times
...
Craig
12 months ago
Okay, let's see. If the label doesn't exist in the LFIB, the frame should be discarded, right? I'll mark that as my answer.
upvoted 0 times
...

Save Cancel