CKS Exam Dumps : Certified Kubernetes Security Specialist (CKS)

Explanation[desk@cli] $vim runtime.yaml

• apiVersion: node.k8s.io/v1
• kind: RuntimeClass
• metadata:
•  name: not-trusted
• handler: runsc

[desk@cli] $ k apply -f runtime.yaml[desk@cli] $ k get pods

• NAME READY STATUS RESTARTS AGE
• nginx-6798fc88e8-chp6r 1/1 Running 0 11m
• nginx-6798fc88e8-fs53n 1/1 Running 0 11m
• nginx-6798fc88e8-ndved 1/1 Running 0 11m

[desk@cli] $ k get deploy

• NAME READY UP-TO-DATE AVAILABLE AGE
• nginx 3/3 11 3 5m

[desk@cli] $ k edit deploy nginx

Text Description automatically generated

[desk@cli] $ k create sa backend-qa -n qasa/backend-qa created[desk@cli] $ k get role,rolebinding -n qaNo resources found in qa namespace.[desk@cli] $ k create role backend -n qa --resource pods,namespaces,configmaps --verb list# No access to secret[desk@cli] $ k create rolebinding backend -n qa --role backend --serviceaccount qa:backend-qa[desk@cli] $ vim /home/cert_masters/frontend-pod.yaml

• uk.co.certification.simulator.questionpool.PList@59574970

[desk@cli] $ k apply -f /home/cert_masters/frontend-pod.yamlpod created

[desk@cli] $ k create sa backend-qa -n qaserviceaccount/backend-qa created[desk@cli] $ k get role,rolebinding -n qaNo resources found in qa namespace.[desk@cli] $ k create role backend -n qa --resource pods,namespaces,configmaps --verb listrole.rbac.authorization.k8s.io/backend created[desk@cli] $ k create rolebinding backend -n qa --role backend --serviceaccount qa:backend-qarolebinding.rbac.authorization.k8s.io/backend created[desk@cli] $ vim /home/cert_masters/frontend-pod.yaml

apiVersion: v1

kind: Pod

metadata:

 name: frontend

spec:

 serviceAccountName: backend-qa # Add this

  image: nginx

  name: frontend

[desk@cli] $ k apply -f /home/cert_masters/frontend-pod.yamlpod/frontend created

Text Description automatically generated

Text Description automatically generated

Text Description automatically generated