U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 3 Question 64 Discussion

You can switch the cluster/configuration context using the following command: [desk@cli] $kubectl config use-context prod-accountContext: A Role bound to a Pod's ServiceAccount grants overly permissive permissions. Complete the following tasks to reduce the set of permissions. Task: Given an existing Pod namedweb-podrunning in the namespacedatabase. 1. Edit the existing Role bound to the Pod's ServiceAccounttest-sato only allow performing get operations, only on resources of type Pods. 2. Create a new Role namedtest-role-2in the namespacedatabase, which only allows performingupdateoperations, only on resources of typestatuefulsets. 3. Create a new RoleBinding namedtest-role-2-bindbinding the newly created Role to the Pod's ServiceAccount. Note: Don't delete the existing RoleBinding.
A) Explanation:

Linux Foundation CKS Exam - Topic 3 Question 64 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 64
Topic #: 3
[All CKS Questions]

You can switch the cluster/configuration context using the following command: [desk@cli] $kubectl config use-context prod-account

Context: A Role bound to a Pod's ServiceAccount grants overly permissive permissions. Complete the following tasks to reduce the set of permissions. Task: Given an existing Pod namedweb-podrunning in the namespacedatabase. 1. Edit the existing Role bound to the Pod's ServiceAccounttest-sato only allow performing get operations, only on resources of type Pods. 2. Create a new Role namedtest-role-2in the namespacedatabase, which only allows performingupdateoperations, only on resources of typestatuefulsets. 3. Create a new RoleBinding namedtest-role-2-bindbinding the newly created Role to the Pod's ServiceAccount. Note: Don't delete the existing RoleBinding.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Brigette at Sep 14, 2024, 04:06 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lelia
7 months ago
I thought RoleBindings were only for ClusterRoles.
upvoted 0 times
...
Alishia
7 months ago
Wait, can we really bind a Role to a ServiceAccount like that?
upvoted 0 times
...
Willie
7 months ago
Totally agree, less is more with permissions!
upvoted 0 times
...
Graciela
7 months ago
Sounds straightforward, but why not just create a new Role?
upvoted 0 times
...
Amie
8 months ago
Just need to edit the Role for get permissions on Pods.
upvoted 0 times
...
Owen
8 months ago
I think I can handle the first task, but the part about creating the new Role for StatefulSets feels a bit tricky. I hope I can recall the right resource type.
upvoted 0 times
...
Sabra
8 months ago
I feel a bit confused about the difference between Roles and RoleBindings. I hope I can remember how to create the new Role without making mistakes.
upvoted 0 times
...
Elena
8 months ago
This seems similar to that practice question where we had to create a RoleBinding. I think I need to recall how to bind the new Role to the ServiceAccount correctly.
upvoted 0 times
...
Tran
8 months ago
I remember we practiced editing Roles before, but I'm not entirely sure about the exact syntax for restricting permissions to just "get" operations.
upvoted 0 times
...
Ronna
8 months ago
No problem, I've done similar tasks before. I'll start by using the `kubectl config use-context` command to switch to the right context, then work through the tasks one by one.
upvoted 0 times
...
Stephanie
8 months ago
I'm a bit confused by the wording of the tasks. I'll need to double-check the Kubernetes documentation to make sure I'm interpreting everything correctly.
upvoted 0 times
...
Nieves
8 months ago
Hmm, this seems straightforward enough. I think I can handle this - just need to edit the existing Role and create a new Role and RoleBinding as specified.
upvoted 0 times
...
Pansy
9 months ago
Okay, this looks like a tricky one. I'll need to carefully read through the tasks and make sure I understand exactly what I need to do.
upvoted 0 times
...
Delfina
9 months ago
Okay, let me think this through. Forecasting is definitely more than just looking at past revenue and expenses - it involves evaluating market conditions and economic indicators too. I'm leaning towards option C.
upvoted 0 times
...
Kimi
2 years ago
Haha, I bet the exam writers are really testing our attention to detail with this one. Gotta make sure I don't miss any of those specific requirements!
upvoted 0 times
Melda
2 years ago
It's all about precision and following the instructions to the letter.
upvoted 0 times
...
Justa
2 years ago
I know, we have to be careful to only allow specific operations on specific types of resources.
upvoted 0 times
...
Eva
2 years ago
Yeah, they definitely want us to pay close attention to the details in this task.
upvoted 0 times
...
...
Nina
2 years ago
Looks good to me! Reducing the permissions on the Role bound to the ServiceAccount is the way to go. Can't wait to get this one right!
upvoted 0 times
Salome
2 years ago
Let's make sure we test everything thoroughly before applying these changes.
upvoted 0 times
...
Leah
2 years ago
I think we need to be careful with the new Role and RoleBinding.
upvoted 0 times
...
Wilda
2 years ago
I agree, reducing permissions is crucial for security.
upvoted 0 times
...
...
Ira
2 years ago
I think the tasks provided are clear and will help in securing the cluster.
upvoted 0 times
...
Leatha
2 years ago
I agree, it's important to understand how to manage permissions in Kubernetes.
upvoted 0 times
...
Ira
2 years ago
I find this question about switching cluster context interesting.
upvoted 0 times
...

Save Cancel