Study. uk . com
  1. Home
  2. All questions
  3. Question 593

CKA study material · question 593 of 1000

A developer is granted the edit role in a namespace. Which two capabilities does that actually give them? Choose two.

  1. Reading the Secrets in that namespace
  2. Viewing and modifying Roles and RoleBindings
  3. Running Pods as any ServiceAccount in that namespace
  4. Editing the namespace's ResourceQuota
Show the answer

Answer: A. Reading the Secrets in that namespace
C. Running Pods as any ServiceAccount in that namespace

edit can read Secrets and run Pods as any ServiceAccount there, so it effectively confers those accounts' API access. It cannot see or change roles and bindings.

Source: Using RBAC Authorization (Kubernetes) — Default roles and role bindings › User-facing roles

Challenge yourself on this topic → Study as cards