Study. uk . com
  1. Home
  2. All questions
  3. Question 597

CKA study material · question 597 of 1000

You want a team lead to be able to grant the admin, edit and view roles in their own namespace without holding those permissions themselves. Which verb makes that possible?

  1. escalate on roles
  2. impersonate on users
  3. bind on the named ClusterRoles
  4. update on rolebindings
Show the answer

Answer: C. bind on the named ClusterRoles

Creating a binding requires either holding everything the referenced role grants or holding the bind verb on that particular role, which is how delegation is done without conferring the permissions themselves.

Source: Using RBAC Authorization (Kubernetes) — Privilege escalation prevention and bootstrapping › Restrictions on role binding creation or update

Challenge yourself on this topic → Study as cards