Linux Foundation Exam CKS Topic 3 Question 72 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 72
Topic #: 3

[All CKS Questions]

Create a RuntimeClass named gvisor-rc using the prepared runtime handler named runsc.

Create a Pods of image Nginx in the Namespace server to run on the gVisor runtime class

AExplanation:
Install the Runtime Class for gVisor
{ # Step 1: Install a RuntimeClass
cat <<EOF | kubectl apply -f -
apiVersion: node.k8s.io/v1beta1
kind: RuntimeClass
metadata:
name: gvisor
handler: runsc
EOF
}
Create a Pod with the gVisor Runtime Class
{ # Step 2: Create a pod
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Pod
metadata:
name: nginx-gvisor
spec:
runtimeClassName: gvisor
containers:
- name: nginx
image: nginx
EOF
}
Verify that the Pod is running
{ # Step 3: Get the pod
kubectl get pod nginx-gvisor -o wide
}

Show Suggested Answer

Suggested Answer: A

by Valentine at Jan 13, 2025, 06:47 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Willetta

9 days ago

The steps provided for installing the RuntimeClass and creating the Pod with gVisor seem straightforward.

upvoted 0 times

...

Frederic

11 days ago

I agree, it's crucial to have secure runtime environments for our Pods.

upvoted 0 times

...

Willetta

15 days ago

I think creating a RuntimeClass named gvisor-rc using runsc is important for security.

upvoted 0 times

...