Study. uk . com
  1. Home
  2. All questions
  3. Question 821

CKA study material · question 821 of 1000

An admission policy restricts hostPath volumes to a list of approved directories. What else must it require to be effective?

  1. That the Pod runs as a non-root user
  2. That the mounts are read-only
  3. That the Pod sets a seccomp profile
  4. That the paths are on a separate filesystem
Show the answer

Answer: B. That the mounts are read-only

Directory restrictions are only meaningful alongside a read-only requirement: a read-write host mount granted to an untrusted Pod can be used to subvert the restriction.

Source: Volumes (Kubernetes) — Types of volumes › hostPath

Challenge yourself on this topic → Study as cards