Study. uk . com
  1. Home
  2. All questions
  3. Question 22

CKA study material · question 22 of 1000

An administrator edits the roleRef of an existing RoleBinding and the request fails validation. Why?

  1. RoleBindings may not reference ClusterRoles
  2. The referenced ClusterRole is aggregated
  3. roleRef may only be edited by a cluster-admin
  4. roleRef is immutable once the binding is created
Show the answer

Answer: D. roleRef is immutable once the binding is created

roleRef cannot change; the binding has to be deleted and recreated to grant a different role.

Source: Using RBAC Authorization (Kubernetes) — ClusterRoleBinding example

Challenge yourself on this topic → Study as cards