Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKA Exam - Topic 1 Question 53 Discussion

Actual exam question for Linux Foundation's CKA exam
Question #: 53
Topic #: 1
[All CKA Questions]

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Daniela at Jan 24, 2024, 09:02 AM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Carmen
3 months ago
I thought you could just use a Role instead of a ClusterRole for namespace-scoped permissions?
upvoted 0 times
...
Derick
4 months ago
Nice, I love how straightforward this is!
upvoted 0 times
...
Ranee
4 months ago
Wait, is it really necessary to create a ClusterRole for just those resources? Seems overkill.
upvoted 0 times
...
Yvette
4 months ago
Totally agree, that’s a common mistake!
upvoted 0 times
...
Chauncey
4 months ago
Just a heads up, the rolebinding command should reference the correct namespace for the ServiceAccount.
upvoted 0 times
...
Matilda
5 months ago
I’m a bit confused about the namespace part; I think we need to make sure the ServiceAccount is in the right namespace when binding it.
upvoted 0 times
...
Willis
5 months ago
I know we have to specify the resources correctly, but did we cover if we need to use "kubectl create rolebinding" or "kubectl create clusterrolebinding"?
upvoted 0 times
...
Vanna
5 months ago
I practiced something similar last week, but I feel like I mixed up the commands for ClusterRole and RoleBinding.
upvoted 0 times
...
Roselle
5 months ago
I think I remember that we need to create a ClusterRole with specific permissions, but I'm not sure about the exact syntax for binding it to the ServiceAccount.
upvoted 0 times
...
Wilford
5 months ago
I feel confident about this task. I've done similar things before, so I think I can knock this out quickly. I'll just need to be careful with the syntax and make sure I get the namespacing right.
upvoted 0 times
...
Carey
5 months ago
This seems pretty straightforward, but I want to make sure I understand the context and requirements fully before I start. I'll read through the question a few times to make sure I don't miss anything.
upvoted 0 times
...
Aliza
5 months ago
Okay, I think I've got a plan. I'll start by creating the ClusterRole, then the ServiceAccount, and finally the RoleBinding to connect them. As long as I follow the instructions carefully, I should be able to complete this task.
upvoted 0 times
...
Alexia
5 months ago
Hmm, I'm a bit unsure about the exact syntax for creating the ClusterRole and binding it to the ServiceAccount. I'll need to double-check the Kubernetes documentation to make sure I get the commands right.
upvoted 0 times
...
Rosio
5 months ago
This looks like a straightforward task, I should be able to handle it. I'll need to create the ClusterRole, ServiceAccount, and RoleBinding as specified.
upvoted 0 times
...
Dion
5 months ago
Ah, I see now. The key is to reference the device variable from the YANG model, as mentioned in option D. That should allow me to properly enter the device into the YANG model.
upvoted 0 times
...
Craig
6 months ago
Okay, let's see. If the label doesn't exist in the LFIB, the frame should be discarded, right? I'll mark that as my answer.
upvoted 0 times
...

Save Cancel