Study. uk . com
  1. Home
  2. All questions
  3. Question 588

CKA study material · question 588 of 1000

A Role grants get and list on pods, but a user running kubectl logs is refused. What does the Role need?

  1. The watch verb added to the pods rule
  2. A separate rule for the log nonResourceURL
  3. pods/log added to the resources list
  4. The impersonate verb on pods
Show the answer

Answer: C. pods/log added to the resources list

Logs are a subresource of Pod and are named in RBAC with a slash, so pods alone does not cover pods/log.

Source: Using RBAC Authorization (Kubernetes) — Referring to resources

Challenge yourself on this topic → Study as cards