Study. uk . com
  1. Home
  2. All questions
  3. Question 624

CKA study material · question 624 of 1000

A user is added to the Pod Security exemption list by username, but their Deployment's Pods are still rejected. Why?

  1. Username exemptions apply only to cluster-scoped requests
  2. The exemption needs a matching RuntimeClass entry as well
  3. The Pods are created by the controller, not by that user
  4. Exemptions apply to warn and audit but never to enforce
Show the answer

Answer: C. The Pods are created by the controller, not by that user

Exempting a user only covers Pods they create directly; a controller creating Pods on their behalf is the requesting identity, so the exemption does not apply.

Source: Pod Security Admission (Kubernetes) — Exemptions

Challenge yourself on this topic → Study as cards