2V0-17.25 · Question #68
Which Kubernetes object is used to grant permissions to a cluster-wide resource?
The correct answer is B. ClusterRoleBinding. In Kubernetes RBAC, ClusterRoleBinding is the mechanism for granting permissions to resources that are not namespace-scoped. ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster- wide permissions to non-namespaced resources such as…
Question
Which Kubernetes object is used to grant permissions to a cluster-wide resource?
Options
- ARoleBinding
- BClusterRoleBinding
- CRoleReference
- DClusterRoleAccess
How the community answered
(52 responses)- A17% (9)
- B71% (37)
- C2% (1)
- D10% (5)
Explanation
In Kubernetes RBAC, ClusterRoleBinding is the mechanism for granting permissions to resources that are not namespace-scoped. ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster- wide permissions to non-namespaced resources such as nodes, storage classes, or persistent A RoleBinding grants access to namespace-scoped resources. RoleReference is a field within a RoleBinding/ClusterRoleBinding object, not a standalone object. ClusterRoleAccess is not a valid Kubernetes construct. Thus, to assign permissions at a cluster-wide level, the correct object is ClusterRoleBinding.
Topics
Community Discussion
No community discussion yet for this question.