Study. uk . com
  1. Home
  2. All questions
  3. Question 587

CKA study material · question 587 of 1000

You try to edit a RoleBinding to point at a different Role and the API server rejects it. What is the correct procedure?

  1. Delete the binding and create a replacement
  2. Patch the roleRef with a strategic merge patch
  3. Add the escalate verb to your own role first
  4. Recreate the referenced Role with the same name
Show the answer

Answer: A. Delete the binding and create a replacement

roleRef is immutable; changing which role a binding grants means deleting and recreating it, which forces a fresh decision about whether every existing subject should get the new role.

Source: Using RBAC Authorization (Kubernetes) — API objects › RoleBinding and ClusterRoleBinding

Challenge yourself on this topic → Study as cards