Study. uk . com
  1. Home
  2. All questions
  3. Question 97

CKA study material · question 97 of 1000

Why does the ability to create a Deployment in a namespace effectively grant read access to that namespace's Secrets?

  1. The Deployment controller runs with cluster-admin
  2. Anyone who can create a Pod can mount and read any Secret in the namespace
  3. Deployments copy Secrets into their Pod templates
  4. Secrets are replicated into every workload's status
Show the answer

Answer: B. Anyone who can create a Pod can mount and read any Secret in the namespace

Creating a Pod, directly or through a Deployment, lets the creator mount and read any Secret in that namespace.

Source: Secrets (Kubernetes) — Secrets

Challenge yourself on this topic → Study as cards