Study. uk . com
  1. Home
  2. All questions
  3. Question 25

CKA study material · question 25 of 1000

Why can resourceNames not restrict a top-level create request?

  1. The new object's name is unknown when authorization runs
  2. create is handled by admission control, not authorization
  3. create is not a recognised RBAC verb
  4. resourceNames applies only to cluster-scoped resources
Show the answer

Answer: A. The new object's name is unknown when authorization runs

Authorization runs before the object exists, so the name a create would use cannot be matched.

Source: Using RBAC Authorization (Kubernetes) — Referring to resources

Challenge yourself on this topic → Study as cards