Linux Foundation CKS Exam - Topic 3 Question 64 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 64
Topic #: 3

You can switch the cluster/configuration context using the following command: [desk@cli] $kubectl config use-context prod-account

Context: A Role bound to a Pod's ServiceAccount grants overly permissive permissions. Complete the following tasks to reduce the set of permissions. Task: Given an existing Pod namedweb-podrunning in the namespacedatabase. 1. Edit the existing Role bound to the Pod's ServiceAccounttest-sato only allow performing get operations, only on resources of type Pods. 2. Create a new Role namedtest-role-2in the namespacedatabase, which only allows performingupdateoperations, only on resources of typestatuefulsets. 3. Create a new RoleBinding namedtest-role-2-bindbinding the newly created Role to the Pod's ServiceAccount. Note: Don't delete the existing RoleBinding.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Brigette at Sep 14, 2024, 04:06 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lelia

5 months ago

I thought RoleBindings were only for ClusterRoles.

upvoted 0 times

...

Alishia

5 months ago

Wait, can we really bind a Role to a ServiceAccount like that?

upvoted 0 times

...

Willie

6 months ago

Totally agree, less is more with permissions!

upvoted 0 times

...

Graciela

6 months ago

Sounds straightforward, but why not just create a new Role?

upvoted 0 times

...

Amie

6 months ago

Just need to edit the Role for get permissions on Pods.

upvoted 0 times

...

Owen

6 months ago

I think I can handle the first task, but the part about creating the new Role for StatefulSets feels a bit tricky. I hope I can recall the right resource type.

upvoted 0 times

...

Sabra

6 months ago

I feel a bit confused about the difference between Roles and RoleBindings. I hope I can remember how to create the new Role without making mistakes.

upvoted 0 times

...

Elena

7 months ago

This seems similar to that practice question where we had to create a RoleBinding. I think I need to recall how to bind the new Role to the ServiceAccount correctly.

upvoted 0 times

...

Tran

7 months ago

I remember we practiced editing Roles before, but I'm not entirely sure about the exact syntax for restricting permissions to just "get" operations.

upvoted 0 times

...

Ronna

7 months ago

No problem, I've done similar tasks before. I'll start by using the `kubectl config use-context` command to switch to the right context, then work through the tasks one by one.

upvoted 0 times

...

Stephanie

7 months ago

I'm a bit confused by the wording of the tasks. I'll need to double-check the Kubernetes documentation to make sure I'm interpreting everything correctly.

upvoted 0 times

...

Nieves

7 months ago

Hmm, this seems straightforward enough. I think I can handle this - just need to edit the existing Role and create a new Role and RoleBinding as specified.

upvoted 0 times

...

Pansy

7 months ago

Okay, this looks like a tricky one. I'll need to carefully read through the tasks and make sure I understand exactly what I need to do.

upvoted 0 times

...

Delfina

7 months ago

Okay, let me think this through. Forecasting is definitely more than just looking at past revenue and expenses - it involves evaluating market conditions and economic indicators too. I'm leaning towards option C.

upvoted 0 times

...

Kimi

2 years ago

Haha, I bet the exam writers are really testing our attention to detail with this one. Gotta make sure I don't miss any of those specific requirements!

upvoted 0 times