Study. uk . com
  1. Home
  2. All questions
  3. Question 612

CKA study material · question 612 of 1000

A workload runs with privileged: true. What can it read regardless of RBAC?

  1. Every Secret in use on its node
  2. Every Secret in the cluster
  3. Only Secrets in its own namespace
  4. Only Secrets mounted into its own Pod
Show the answer

Answer: A. Every Secret in use on its node

A privileged container can reach the node's filesystem and therefore every Secret mounted there for any Pod, whatever the workload's own API permissions are.

Source: Secrets (Kubernetes) — Information security for Secrets › Configure least-privilege access to Secrets

Challenge yourself on this topic → Study as cards