Study. uk . com
  1. Home
  2. All questions
  3. Question 41

CKA study material · question 41 of 1000

A Role grants get on secrets but deliberately omits list. Why does this offer little protection?

  1. The API server converts list requests into get requests
  2. list and watch return the same full object data as get
  3. get implies list in RBAC
  4. Secrets ignore RBAC rules entirely
Show the answer

Answer: B. list and watch return the same full object data as get

get, list and watch all return full object details, so restricting only get leaves the data reachable.

Source: Authorization (Kubernetes) — Resource requests

Challenge yourself on this topic → Study as cards