Study. uk . com
  1. Home
  2. All questions
  3. Question 963

CKA study material · question 963 of 1000

A Prometheus ServiceAccount is refused when scraping component metrics on an RBAC cluster. Which rule does its ClusterRole need?

  1. get on the pods/metrics subresource
  2. list on the componentstatuses resource
  3. get on the nodes/metrics subresource
  4. get on the /metrics nonResourceURL
Show the answer

Answer: D. get on the /metrics nonResourceURL

/metrics is not a resource, so access is granted through a nonResourceURLs rule; a resource rule will not cover it however it is written.

Source: Metrics For Kubernetes System Components (Kubernetes) — Metrics in Kubernetes

Challenge yourself on this topic → Study as cards