Correct Answer: Create a ClusterRole with read-only permissions and a ClusterRoleBinding mapping that ClusterRole to the group name
Using a ClusterRole and a ClusterRoleBinding is the most efficient way to grant cluster-wide or cross-namespace access. By binding the ClusterRole to the developers' Group name, an...
Correct Answer
Create a ClusterRole with read-only permissions and a ClusterRoleBinding mapping that ClusterRole to the group name
Why This Answer Is Correct
Using a ClusterRole and a ClusterRoleBinding is the most efficient way to grant cluster-wide or cross-namespace access. By binding the ClusterRole to the developers' Group name, any developer belonging to that group automatically inherits the permissions.
This question evaluates your knowledge of Kubernetes Administration — a core concept tested in cloud certification exams. Understanding Kubernetes Administration is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
How do you safely drain a node for maintenance without dropping any active connections?
A cluster administrator needs to perform maintenance on a node and wants to gracefully evict all running pods from it, while ensuring the pods are rescheduled on other active nodes. Which kubectl command should be executed?
A Kubernetes node has transitioned to the 'NotReady' state, and the status conditions show DiskPressure=True. Which behavior is Kubernetes most likely to perform on this node for non-daemonset pods?
You need to introduce a custom configuration resource type named AppRoute to your cluster, validating its fields (like port must be an integer) before it is persisted in etcd. Which native Kubernetes mechanism should you implement?