Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 24 Discussion

Cluster: devMaster node:master1Worker node:worker1You can switch the cluster/configuration context using the following command:[desk@cli] $kubectl config use-context devTask:Retrieve the content of the existing secret namedadamin thesafenamespace.Store the username field in a file names/home/cert-masters/username.txt, and the password field in a file named/home/cert-masters/password.txt.1. You must create both files; they don't exist yet.2. Do not use/modify the created files in the following steps, create new temporary files if needed.Create a new secret namesnewsecretin thesafenamespace, with the following content:Username:dbadminPassword:moresecurepasFinally, create a new Pod that has access to the secretnewsecretvia a volume:Namespace: safePod name: mysecret-podContainer name: db-containerImage: redisVolume name: secret-volMount path: /etc/mysecret
A) Explanation: 1. Get the secret, decrypt it & save in files k get secret adam -n safe -o yaml 2. Create new secret using --from-literal [desk@cli] $k create secret generic newsecret -n safe --from-literal=username=dbadmin --from-literal=password=moresecurepass 3. Mount it as volume of db-container of mysecret-pod Explanation [desk@cli] $k create secret generic newsecret -n safe --from-literal=username=dbadmin --from-literal=password=moresecurepass secret/newsecret created [desk@cli] $vim /home/certs_masters/secret-pod.yaml apiVersion: v1 kind: Pod metadata: name: mysecret-pod namespace: safe labels: run: mysecret-pod spec: containers: - name: db-container image: redis volumeMounts: - name: secret-vol mountPath: /etc/mysecret readOnly: true volumes: - name: secret-vol secret: secretName: newsecret [desk@cli] $k apply -f /home/certs_masters/secret-pod.yaml pod/mysecret-pod created [desk@cli] $k exec -it mysecret-pod -n safe -- cat /etc/mysecret/username dbadmin [desk@cli] $k exec -it mysecret-pod -n safe -- cat /etc/mysecret/password moresecurepas

Linux Foundation CKS Exam - Topic 1 Question 24 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 24
Topic #: 1
[All CKS Questions]

Cluster: dev

Master node:master1

Worker node:worker1

You can switch the cluster/configuration context using the following command:

[desk@cli] $kubectl config use-context dev

Task:

Retrieve the content of the existing secret namedadamin thesafenamespace.

Store the username field in a file names/home/cert-masters/username.txt, and the password field in a file named/home/cert-masters/password.txt.

1. You must create both files; they don't exist yet.

2. Do not use/modify the created files in the following steps, create new temporary files if needed.

Create a new secret namesnewsecretin thesafenamespace, with the following content:

Username:dbadmin

Password:moresecurepas

Finally, create a new Pod that has access to the secretnewsecretvia a volume:

Namespace: safe

Pod name: mysecret-pod

Container name: db-container

Image: redis

Volume name: secret-vol

Mount path: /etc/mysecret

Show Suggested Answer Hide Answer
Suggested Answer: A

by Lonna at Jun 01, 2022, 03:38 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lynna
9 months ago
Is it necessary to create new temporary files for each step? Seems unnecessary.
upvoted 0 times
...
Cheryll
9 months ago
Remember to create the files before running the commands!
upvoted 0 times
...
Ahmed
9 months ago
Wait, did they really use "moresecurepas" as a password? Sounds sketchy.
upvoted 0 times
...
Dion
9 months ago
Totally agree, double-check the secret names!
upvoted 0 times
...
Julene
10 months ago
Just a heads up, the secret name is "newsecret" not "adam".
upvoted 0 times
...
Maxima
10 months ago
I recall that the pod needs to reference the secret in its volume configuration, but I can't remember if I need to specify the namespace again in the pod definition.
upvoted 0 times
...
Glendora
10 months ago
I practiced a similar question where I had to create a secret and mount it to a pod. I think I used `--from-literal` for the username and password.
upvoted 0 times
...
Lina
10 months ago
I think I remember needing to use `kubectl get secret` to retrieve the existing secret, but I'm not entirely sure about the exact command syntax.
upvoted 0 times
...
Willie
10 months ago
I feel a bit uncertain about the file paths for storing the username and password. Was it `/home/cert-masters/` or something else?
upvoted 0 times
...
Willie
10 months ago
Okay, I think I've got this. The key is that the customer requires the orders to be shipped from Warehouse2, even though the item is usually stocked in Warehouse1. So I'll need to set the customer default to Warehouse2 and the item default order settings to Warehouse1.
upvoted 0 times
...
Lynsey
10 months ago
Okay, let's see. I know internal auditing is about evaluating an organization's internal controls and processes, while quality assurance is more focused on ensuring products or services meet certain standards. I'll try to apply that knowledge here.
upvoted 0 times
...
Alesia
10 months ago
I think the key here is to identify the information that is not required, which seems to be the tax return. The other options all seem like relevant due diligence items.
upvoted 0 times
...
Tamar
10 months ago
This is a pretty straightforward question. I'm confident I can identify the key differences between hard disks and solid state disks.
upvoted 0 times
...

Save Cancel