Discuss Linux Foundation CKA Exam Topic 5 Question 36

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

AExplanation:
Solution:
Task should be complete on node k8s -1 master, 2 worker for this connect use command
[student@node-1] > ssh k8s
kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets
kubectl create serviceaccount cicd-token --namespace=app-team1
kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

Suggested Answer: A

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Francesco 12 months ago

I thought you couldn't bind a ClusterRole to a ServiceAccount in a specific namespace?

Jeannine 1 year ago

Nice, this is exactly what I needed for my pipeline setup!

Freida 1 year ago

Wait, why are we using a ClusterRole instead of a Role? Seems overkill!

Olive 1 year ago

Totally agree, that’s a common mistake.

Carmen 1 year ago

Just a heads up, the rolebinding command should reference the correct namespace for the ServiceAccount!

Cecily 1 year ago

I definitely remember needing to use `kubectl create rolebinding`, but I hope I don't forget to reference the correct ServiceAccount in the command.

Antione 1 year ago

I’m a bit confused about the namespace part. Do we need to specify the namespace for the ClusterRole too, or just for the ServiceAccount?

Hui 1 year ago

I practiced something similar last week, but I feel like I might mix up the rolebinding command with the service account creation.

Benedict 1 year ago

I think I remember that we need to create a ClusterRole first, but I'm not entirely sure about the exact syntax for the resource types.

Elza 1 year ago

Alright, I've got this. The key is to focus on the fact that phone-only Jabber clients don't have the same issue, so the problem must be with the certificates used for the full Jabber clients. I'll go with the Cisco UCM tomcat certificate and the Cisco IM and Presence cup-xmpp certificate.

Curt 1 year ago

This is a tricky one. I'm not 100% sure how the resolution change impacts things like minimum illumination and motion blur. I'll need to think it through carefully.

Tabetha 1 year ago

I'm a bit confused by this question. I'll have to review my notes on DAST to make sure I'm answering correctly.

Valda 1 year ago

I'm a little confused by the wording of the question. I'll have to re-read it a few times.

Devorah 1 year ago

I vaguely remember that the aaaLogin method is often necessary before setting up an application profile. It might be A.

Alpha 1 year ago

I think one of the commands is definitely at the spoke routers, maybe the ip nhrp shortcut command? That seems familiar.

Linux Foundation CKA Exam - Topic 5 Question 36 Discussion