Study. uk . com
  1. Home
  2. All questions
  3. Question 586

CKA study material · question 586 of 1000

A RoleBinding in namespace dev references a ClusterRole that grants read access to Secrets. What can the subject read?

  1. Secrets in every namespace, because the role is cluster-scoped
  2. Secrets in the dev namespace only
  3. Nothing — a RoleBinding may not reference a ClusterRole
  4. Secrets in dev plus any cluster-scoped Secrets
Show the answer

Answer: B. Secrets in the dev namespace only

A RoleBinding referencing a ClusterRole confines those permissions to the binding's own namespace, which is how a common role is reused namespace by namespace.

Source: Using RBAC Authorization (Kubernetes) — API objects › RoleBinding and ClusterRoleBinding

Challenge yourself on this topic → Study as cards