Study. uk . com
  1. Home
  2. All questions
  3. Question 600

CKA study material · question 600 of 1000

Why is a rule with resources: ["*"] and verbs: ["*"] considered risky even when it currently grants only what is intended?

  1. Wildcards are rejected by newer API servers
  2. Wildcards silently extend to resources, subresources and verbs added later
  3. Wildcards prevent the rule from being aggregated
  4. Wildcards disable the escalation guard for that role
Show the answer

Answer: B. Wildcards silently extend to resources, subresources and verbs added later

A wildcard automatically covers anything added in a future release, so a role written today may grant more than intended tomorrow; naming resources and verbs explicitly keeps the grant bounded.

Source: Using RBAC Authorization (Kubernetes) — Referring to resources

Challenge yourself on this topic → Study as cards