RedHat Red Hat Certified OpenShift Administrator EX280 Exam Questions

Page: 1 / 14
Total 33 questions

Want more questions? Get Premium Access.
()

Question 1

SIMULATION

Task 2

Manage Cluster Project and Permission

Task information Details:

Create projects apollo, test, and demo.

Grant bob the cluster-admin role.

Prevent ordinary authenticated users from self-provisioning projects.

Allow john to create projects.

Give natasha view-only access to test and apollo.

Give armstrong admin access to apollo.

Remove the kubeadmin user secret.

ASee the solution below in Explanation

Answer : A

Solution:

Create the projects:

oc new-project apollo

oc new-project test

oc new-project demo

Grant cluster-admin to bob:

oc adm policy add-cluster-role-to-user cluster-admin bob

Disable normal self-provisioning for authenticated users:

oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth

Allow john to self-provision:

oc adm policy add-cluster-role-to-user self-provisioner john

Give natasha view access in test and apollo:

oc policy add-role-to-user view natasha -n test

oc policy add-role-to-user view natasha -n apollo

Give armstrong admin in apollo:

oc policy add-role-to-user admin armstrong -n apollo

Remove kubeadmin secret:

oc delete secret kubeadmin -n kube-system

Verify permissions:

oc adm policy who-can create projectrequests

oc describe rolebinding.rbac -n apollo

oc describe rolebinding.rbac -n test

This task tests core OpenShift administration around project lifecycle control, cluster-level RBAC, and decommissioning default bootstrap credentials.