KCNA · Question #168
What is the default value for authorization-mode in Kubernetes API server?
The correct answer is B. --authorization-mode=AlwaysAllow. The default authorization mode for the Kubernetes API server is AlwaysAllow, which grants all requests access to the API.
Question
What is the default value for authorization-mode in Kubernetes API server?
Options
- A--authorization-mode=RBAC
- B--authorization-mode=AlwaysAllow
- C--authorization-mode=AlwaysDeny
- D--authorization-mode=ABAC
How the community answered
(37 responses)- B92% (34)
- C5% (2)
- D3% (1)
Why each option
The default authorization mode for the Kubernetes API server is AlwaysAllow, which grants all requests access to the API.
While RBAC is the recommended authorization mode for production, it is not the default value.
In Kubernetes, the default value for the `--authorization-mode` flag in the API server is `AlwaysAllow`. This configuration grants all requests access to the API, which is primarily suitable for development or testing environments where security is not the primary concern. For production, `RBAC` (Role-Based Access Control) is the recommended and more secure mode.
AlwaysDeny would prevent any request from being authorized, making the cluster unusable, so it is not the default.
ABAC (Attribute-Based Access Control) is an older authorization mode that has been largely superseded by RBAC and is not the default.
Concept tested: Kubernetes API server authorization default
Source: https://kubernetes.io/docs/reference/access-authn-authz/authorization/#authorization-modes
Topics
Community Discussion
No community discussion yet for this question.