CKA exam - Role vs ClusterRole

Hello everyone,

In the exam, Let’s say I get a question asking to create a role called “dev-role” scoped to a specific namespace called “web-app” to list all pods within web-app.

So, If I create a clusterRole with necessary permissions, do I get credit? Because technically Cluster-role can list all pods within “web-app” right?

You probably won’t, since only a rolebinding will limit a clusterrole to a single namespace, and a question like that is testing to see if you know that :slight_smile: Now you do :wink:

However, a question worded like that will almost certainly want you to create a role in the given namespace, so a clusterrole would not make the exam grader happy. “Technically” won’t do for the exam.