U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 43 Discussion

Given an existing Pod named nginx-pod running in the namespace test-system, fetch the service-account-name used and put the content in /candidate/KSC00124.txtCreate a new Role named dev-test-role in the namespace test-system, which can perform update operations, on resources of type namespaces.Create a new RoleBinding named dev-test-role-binding, which binds the newly created Role to the Pod's ServiceAccount ( found in the Nginx pod running in namespace test-system).
A) Explanation:

Linux Foundation CKS Exam - Topic 1 Question 43 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 43
Topic #: 1
[All CKS Questions]

Given an existing Pod named nginx-pod running in the namespace test-system, fetch the service-account-name used and put the content in /candidate/KSC00124.txt

Create a new Role named dev-test-role in the namespace test-system, which can perform update operations, on resources of type namespaces.

Create a new RoleBinding named dev-test-role-binding, which binds the newly created Role to the Pod's ServiceAccount ( found in the Nginx pod running in namespace test-system).

Show Suggested Answer Hide Answer
Suggested Answer: A

by Jerry at Oct 22, 2023, 11:34 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Mila
7 months ago
Don't forget to check the permissions on the Role, super important!
upvoted 0 times
...
Alecia
7 months ago
Just did this yesterday, works like a charm!
upvoted 0 times
...
Ronny
7 months ago
Wait, can you really bind a Role to a Pod's ServiceAccount like that? Seems risky.
upvoted 0 times
...
Karan
7 months ago
Totally agree, that's the right command!
upvoted 0 times
...
Gussie
8 months ago
The service account name can be found using `kubectl get pod nginx-pod -n test-system -o=jsonpath='{.spec.serviceAccountName}'`.
upvoted 0 times
...
Elise
8 months ago
I feel like I’ve seen a question like this before, but I’m worried I might mix up the namespace and the service account details.
upvoted 0 times
...
Douglass
8 months ago
For the Role creation, I think we need to specify the verbs and resources, but I’m a bit confused about the exact format for the YAML file.
upvoted 0 times
...
Jettie
8 months ago
This question seems similar to one we practiced where we had to create a Role and RoleBinding. I hope I can recall the syntax correctly.
upvoted 0 times
...
Freeman
8 months ago
I think I remember how to fetch the service account name from the pod, but I'm not entirely sure about the exact command to use.
upvoted 0 times
...
Dyan
8 months ago
Wait, what's the namespace for the nginx-pod again? I need to make sure I create the Role and RoleBinding in the correct namespace. Let me double-check that detail.
upvoted 0 times
...
Vi
8 months ago
No problem, I've got this. First, I'll use the `kubectl get pod` command to find the service-account-name for the nginx-pod. Then, I'll create the new Role and RoleBinding using the `kubectl create role` and `kubectl create rolebinding` commands.
upvoted 0 times
...
Carman
8 months ago
Hmm, I'm a bit unsure about the second part. Creating a new Role and RoleBinding seems a bit tricky. I'll need to review my notes on RBAC to make sure I do this correctly.
upvoted 0 times
...
Christiane
8 months ago
Okay, this looks like a straightforward Kubernetes question. I'll start by fetching the service-account-name used by the nginx-pod and saving it to the specified file.
upvoted 0 times
...
Quentin
9 months ago
I'm feeling pretty confident about this one. Contracts are what define an agent's capabilities and responsibilities, so that's the core connection.
upvoted 0 times
...
Dottie
9 months ago
Hmm, this seems like a tricky one. I'll need to think through the relationships carefully to make sure I get the right approach.
upvoted 0 times
...
Tawanna
9 months ago
Okay, let me think this through step-by-step. The Copy/Monitor tool is used for, well, copying and monitoring elements. The options given are Grids, Levels, Walls, and Windows. I know Grids, Levels, and Windows are all common element categories, but I'm not sure about Walls. I'll have to go with my best guess on this one.
upvoted 0 times
...
Bev
9 months ago
I think the requirement for User Group 1 was pretty high, possibly closer to 512 GB of RAM based on what I studied.
upvoted 0 times
...
Katie
1 year ago
I bet the exam writers are feeling pretty clever with this one. But I'm not going to fall for their tricks! Bring it on!
upvoted 0 times
Socorro
12 months ago
User 3
upvoted 0 times
...
Christoper
1 year ago
User 2
upvoted 0 times
...
Garry
1 year ago
User 1
upvoted 0 times
...
Coleen
1 year ago
User 3
upvoted 0 times
...
Elly
1 year ago
User 2
upvoted 0 times
...
Rolande
1 year ago
User 1
upvoted 0 times
...
...
Rueben
1 year ago
Eve
upvoted 0 times
Edison
1 year ago
Make sure to bind the Role to the Pod's ServiceAccount in the namespace test-system.
upvoted 0 times
...
Gerald
1 year ago
After that, we can create a new RoleBinding named dev-test-role-binding.
upvoted 0 times
...
Lonny
1 year ago
Yes, we should create a new Role named dev-test-role next.
upvoted 0 times
...
Precious
1 year ago
I think we need to fetch the service-account-name used in the nginx-pod first.
upvoted 0 times
...
...
Evelynn
1 year ago
I'm going to start by examining the existing Pod and service account.
upvoted 0 times
...
Selma
1 year ago
I agree, but I believe with the right approach we can figure it out.
upvoted 0 times
...
Evelynn
1 year ago
I think the question is quite challenging.
upvoted 0 times
...

Save Cancel