Questions
- True or false – ABAC is the preferred method of authorizing access to Kubernetes clusters.
- True
- False
- What are the three components of a Role?
- Subject, noun, and verb
- Resource, action, and group
apiGroups
, resources, and verbs- Group, resource, and sub-resource
- Where can you go to look up resource information?
- Kubernetes API reference
- The library
- Tutorials and blog posts
- How can you reuse Roles across namespaces?
- You can't; you need to re-create them.
- Define a ClusterRole and reference it in each namespace as a RoleBinding.
- Reference the Role in one namespace with the RoleBindings of other namespaces.
- None of the above.
- How should bindings reference users?
- Directly, listing every user.
- RoleBindings should only reference service accounts.
- Only ClusterRoleBindings should reference users.
- Whenever possible, RoleBindings and ClusterRoleBindings should reference groups.
- True or false – RBAC can be used to authorize access to everything except for one...