Kcna Kubernetes And Cloud Native Associate · Free Practice Question Medium
Question 19
Which type of Kubernetes object would you use to restrict API access for certain users to only be able to read ConfigMaps in a particular Namespace?
-
A
ClusterRole
-
B
ServiceAccount
-
C
Role
-
D
ClusterRoleBinding
Reveal correct answer
Correct answer: C
A.
Used for defining permissions that can apply cluster-wide, not limited to a specific Namespace.
B.
ServiceAccounts provide identity for processes running in a Pod, but they do not define permissions.
C.
A Role is used to define permissions within a specific Namespace, and can be set up to allow only read access to ConfigMaps.
D.
This object binds users to ClusterRoles but does not define the permissions themselves.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
