Linux Foundation CKS Exam - Topic 1 Question 24 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 24
Topic #: 1

[All CKS Questions]

Cluster: dev

Master node:master1

Worker node:worker1

You can switch the cluster/configuration context using the following command:

[desk@cli] $kubectl config use-context dev

Task:

Retrieve the content of the existing secret namedadamin thesafenamespace.

Store the username field in a file names/home/cert-masters/username.txt, and the password field in a file named/home/cert-masters/password.txt.

1. You must create both files; they don't exist yet.

2. Do not use/modify the created files in the following steps, create new temporary files if needed.

Create a new secret namesnewsecretin thesafenamespace, with the following content:

Username:dbadmin

Password:moresecurepas

Finally, create a new Pod that has access to the secretnewsecretvia a volume:

Namespace: safe

Pod name: mysecret-pod

Container name: db-container

Image: redis

Volume name: secret-vol

Mount path: /etc/mysecret

AExplanation:
1. Get the secret, decrypt it & save in files
k get secret adam -n safe -o yaml
2. Create new secret using --from-literal
[desk@cli] $k create secret generic newsecret -n safe --from-literal=username=dbadmin --from-literal=password=moresecurepass
3. Mount it as volume of db-container of mysecret-pod
Explanation

[desk@cli] $k create secret generic newsecret -n safe --from-literal=username=dbadmin --from-literal=password=moresecurepass
secret/newsecret created
[desk@cli] $vim /home/certs_masters/secret-pod.yaml
apiVersion: v1
kind: Pod
metadata:
name: mysecret-pod
namespace: safe
labels:
run: mysecret-pod
spec:
containers:
- name: db-container
image: redis
volumeMounts:
- name: secret-vol
mountPath: /etc/mysecret
readOnly: true
volumes:
- name: secret-vol
secret:
secretName: newsecret
[desk@cli] $k apply -f /home/certs_masters/secret-pod.yaml
pod/mysecret-pod created
[desk@cli] $k exec -it mysecret-pod -n safe -- cat /etc/mysecret/username
dbadmin

[desk@cli] $k exec -it mysecret-pod -n safe -- cat /etc/mysecret/password
moresecurepas

Show Suggested Answer

Suggested Answer: A

by Lonna at Jun 01, 2022, 03:38 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lynna

4 months ago

Is it necessary to create new temporary files for each step? Seems unnecessary.

upvoted 0 times

...

Cheryll

4 months ago

Remember to create the files before running the commands!

upvoted 0 times

...

Ahmed

4 months ago

Wait, did they really use "moresecurepas" as a password? Sounds sketchy.

upvoted 0 times

...

Dion

4 months ago

Totally agree, double-check the secret names!

upvoted 0 times

...

Julene

5 months ago

Just a heads up, the secret name is "newsecret" not "adam".

upvoted 0 times

...

Maxima

5 months ago

I recall that the pod needs to reference the secret in its volume configuration, but I can't remember if I need to specify the namespace again in the pod definition.

upvoted 0 times

...

Glendora

5 months ago

I practiced a similar question where I had to create a secret and mount it to a pod. I think I used `--from-literal` for the username and password.

upvoted 0 times

...

Lina

5 months ago

I think I remember needing to use `kubectl get secret` to retrieve the existing secret, but I'm not entirely sure about the exact command syntax.

upvoted 0 times

...

Willie

5 months ago

I feel a bit uncertain about the file paths for storing the username and password. Was it `/home/cert-masters/` or something else?

upvoted 0 times

...

Willie

5 months ago

Okay, I think I've got this. The key is that the customer requires the orders to be shipped from Warehouse2, even though the item is usually stocked in Warehouse1. So I'll need to set the customer default to Warehouse2 and the item default order settings to Warehouse1.

upvoted 0 times

...

Lynsey

5 months ago

Okay, let's see. I know internal auditing is about evaluating an organization's internal controls and processes, while quality assurance is more focused on ensuring products or services meet certain standards. I'll try to apply that knowledge here.

upvoted 0 times

...

Alesia

5 months ago

I think the key here is to identify the information that is not required, which seems to be the tax return. The other options all seem like relevant due diligence items.

upvoted 0 times

...

Tamar

5 months ago

This is a pretty straightforward question. I'm confident I can identify the key differences between hard disks and solid state disks.

upvoted 0 times

...