Linux Foundation CKA Exam - Topic 5 Question 36 Discussion

Actual exam question for Linux Foundation's CKA exam

Question #: 36
Topic #: 5

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

AExplanation:
Solution:
Task should be complete on node k8s -1 master, 2 worker for this connect use command
[student@node-1] > ssh k8s
kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets
kubectl create serviceaccount cicd-token --namespace=app-team1
kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

Show Suggested Answer

Suggested Answer: A

by Delisa at Dec 25, 2022, 11:10 AM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Francesco

6 months ago

I thought you couldn't bind a ClusterRole to a ServiceAccount in a specific namespace?

upvoted 0 times

...

Jeannine

6 months ago

Nice, this is exactly what I needed for my pipeline setup!

upvoted 0 times

...

Freida

7 months ago

Wait, why are we using a ClusterRole instead of a Role? Seems overkill!

upvoted 0 times

...

Olive

7 months ago

Totally agree, that’s a common mistake.

upvoted 0 times

...

Carmen

7 months ago

Just a heads up, the rolebinding command should reference the correct namespace for the ServiceAccount!

upvoted 0 times

...

Cecily

7 months ago

I definitely remember needing to use `kubectl create rolebinding`, but I hope I don't forget to reference the correct ServiceAccount in the command.

upvoted 0 times

...

Antione

7 months ago

I’m a bit confused about the namespace part. Do we need to specify the namespace for the ClusterRole too, or just for the ServiceAccount?

upvoted 0 times

...

Hui

7 months ago

I practiced something similar last week, but I feel like I might mix up the rolebinding command with the service account creation.

upvoted 0 times

...

Benedict

7 months ago

I think I remember that we need to create a ClusterRole first, but I'm not entirely sure about the exact syntax for the resource types.

upvoted 0 times

...

Elza

7 months ago

Alright, I've got this. The key is to focus on the fact that phone-only Jabber clients don't have the same issue, so the problem must be with the certificates used for the full Jabber clients. I'll go with the Cisco UCM tomcat certificate and the Cisco IM and Presence cup-xmpp certificate.

upvoted 0 times

...

Curt

7 months ago

This is a tricky one. I'm not 100% sure how the resolution change impacts things like minimum illumination and motion blur. I'll need to think it through carefully.

upvoted 0 times

...

Tabetha

7 months ago

I'm a bit confused by this question. I'll have to review my notes on DAST to make sure I'm answering correctly.

upvoted 0 times

...

Valda

7 months ago

I'm a little confused by the wording of the question. I'll have to re-read it a few times.

upvoted 0 times

...

Devorah

8 months ago

I vaguely remember that the aaaLogin method is often necessary before setting up an application profile. It might be A.

upvoted 0 times

...

Alpha

8 months ago

I think one of the commands is definitely at the spoke routers, maybe the ip nhrp shortcut command? That seems familiar.

upvoted 0 times

...