Study. uk . com
  1. Home
  2. All questions
  3. Question 623

CKA study material · question 623 of 1000

A namespace enforces the restricted Pod Security level. A Deployment whose template violates it is applied. What happens?

  1. The Deployment is rejected at admission
  2. The Deployment is accepted, and its Pods are rejected instead
  3. Both the Deployment and its Pods are accepted, with a warning
  4. The Deployment is accepted and its template is silently rewritten
Show the answer

Answer: B. The Deployment is accepted, and its Pods are rejected instead

enforce applies only to Pod objects, not to workload resources; audit and warn are the modes evaluated against a Pod template, which is why a bad Deployment applies cleanly and then produces no Pods.

Source: Pod Security Admission (Kubernetes) — Workload resources and Pod templates

Challenge yourself on this topic → Study as cards