Study. uk . com
  1. Home
  2. All questions
  3. Question 599

CKA study material · question 599 of 1000

You have added a CustomResourceDefinition and want read access to it included in the built-in view role. What is the documented approach?

  1. Edit the view ClusterRole to add the new resource
  2. Create a ClusterRole labelled rbac.authorization.k8s.io/aggregate-to-view: "true"
  3. Add an aggregationRule to the CustomResourceDefinition
  4. Bind the new resource's Role to the system:authenticated group
Show the answer

Answer: B. Create a ClusterRole labelled rbac.authorization.k8s.io/aggregate-to-view: "true"

The user-facing default roles use aggregation, so a labelled ClusterRole is absorbed into view; editing view directly would be overwritten by auto-reconciliation.

Source: Using RBAC Authorization (Kubernetes) — API objects › Aggregated ClusterRoles

Challenge yourself on this topic → Study as cards