Study. uk . com
  1. Home
  2. All questions
  3. Question 28

CKA study material · question 28 of 1000

What is the supported way to let the built-in edit role manage a new custom resource?

  1. Bind the custom resource's CRD to the edit role
  2. Add the resource to the API server's authorization config
  3. Create a ClusterRole labelled to aggregate to edit
  4. Edit the edit ClusterRole's rules directly
Show the answer

Answer: C. Create a ClusterRole labelled to aggregate to edit

The default user-facing roles are aggregated, so permissions are added with a labelled ClusterRole.

Source: Using RBAC Authorization (Kubernetes) — Aggregated ClusterRoles

Challenge yourself on this topic → Study as cards