MENU
SIMULATION
Given an existing Pod named test-web-pod running in the namespace test-system
Edit the existing Role bound to the Pod's Service Account named sa-backend to only allow performing get operations on endpoints.
Create a new Role named test-system-role-2 in the namespace test-system, which can perform patch operations, on resources of type statefulsets.
Create a new RoleBinding named test-system-role-2-binding binding the newly created Role to the Pod's ServiceAccount sa-backend.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
ST
Stephane
1 year ago
Is it really safe to bind that Role to the sa-backend?
IV
Ivette
1 year ago
I thought we needed more permissions for that.
AL
Alecia
1 year ago
Wait, we can patch statefulsets now? That's awesome!
AH
Ahmed
1 year ago
Sounds good, but why only get? Seems limiting.
DE
Delsie
1 year ago
Just edited the Role for get operations on endpoints.
RO
Rodolfo
1 year ago
I feel a bit confused about the difference between Role and RoleBinding; I hope I can remember the steps to bind them correctly.
GO
Goldie
1 year ago
I think I need to look up how to specify resource types when creating a Role, especially for statefulsets.
LO
Loreta
1 year ago
This question seems similar to one we did on RoleBindings, but I can't recall the exact syntax for creating a new Role.
LY
Lynelle
1 year ago
I remember we practiced editing Roles in our last session, but I'm not entirely sure how to limit permissions to just get operations.
LO
Lorriane
1 year ago
Okay, I think I know the answer to this one. Let me double-check the Snowflake documentation to confirm before I submit my response.
NO
Norah
1 year ago
Hmm, I'm a bit confused on this one. I know Fault Tolerance is related to redundancy, but I'm not sure which specific feature needs to be enabled.
TA
Tayna
1 year ago
I'm a little confused by this question. The message could mean different things, and I'm not sure which of the options is the correct interpretation. I'll need to re-read the question and the options carefully to try to figure this out.