Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKA Exam - Topic 5 Question 36 Discussion

Score: 4%ContextYou have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.TaskCreate a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:* Deployment* StatefulSet* DaemonSetCreate a new ServiceAccount named cicd-token in the existing namespace app-team1.Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.
A) Explanation: Solution: Task should be complete on node k8s -1 master, 2 worker for this connect use command [student@node-1] > ssh k8s kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets kubectl create serviceaccount cicd-token --namespace=app-team1 kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

Linux Foundation CKA Exam - Topic 5 Question 36 Discussion

Actual exam question for Linux Foundation's CKA exam
Question #: 36
Topic #: 5
[All CKA Questions]

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Delisa at Dec 25, 2022, 11:10 AM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Francesco
8 months ago
I thought you couldn't bind a ClusterRole to a ServiceAccount in a specific namespace?
upvoted 0 times
...
Jeannine
8 months ago
Nice, this is exactly what I needed for my pipeline setup!
upvoted 0 times
...
Freida
9 months ago
Wait, why are we using a ClusterRole instead of a Role? Seems overkill!
upvoted 0 times
...
Olive
9 months ago
Totally agree, that’s a common mistake.
upvoted 0 times
...
Carmen
9 months ago
Just a heads up, the rolebinding command should reference the correct namespace for the ServiceAccount!
upvoted 0 times
...
Cecily
9 months ago
I definitely remember needing to use `kubectl create rolebinding`, but I hope I don't forget to reference the correct ServiceAccount in the command.
upvoted 0 times
...
Antione
9 months ago
I’m a bit confused about the namespace part. Do we need to specify the namespace for the ClusterRole too, or just for the ServiceAccount?
upvoted 0 times
...
Hui
9 months ago
I practiced something similar last week, but I feel like I might mix up the rolebinding command with the service account creation.
upvoted 0 times
...
Benedict
9 months ago
I think I remember that we need to create a ClusterRole first, but I'm not entirely sure about the exact syntax for the resource types.
upvoted 0 times
...
Elza
9 months ago
Alright, I've got this. The key is to focus on the fact that phone-only Jabber clients don't have the same issue, so the problem must be with the certificates used for the full Jabber clients. I'll go with the Cisco UCM tomcat certificate and the Cisco IM and Presence cup-xmpp certificate.
upvoted 0 times
...
Curt
9 months ago
This is a tricky one. I'm not 100% sure how the resolution change impacts things like minimum illumination and motion blur. I'll need to think it through carefully.
upvoted 0 times
...
Tabetha
9 months ago
I'm a bit confused by this question. I'll have to review my notes on DAST to make sure I'm answering correctly.
upvoted 0 times
...
Valda
9 months ago
I'm a little confused by the wording of the question. I'll have to re-read it a few times.
upvoted 0 times
...
Devorah
10 months ago
I vaguely remember that the aaaLogin method is often necessary before setting up an application profile. It might be A.
upvoted 0 times
...
Alpha
10 months ago
I think one of the commands is definitely at the spoke routers, maybe the ip nhrp shortcut command? That seems familiar.
upvoted 0 times
...

Save Cancel