Hey ! Having a question from Mock exam #2 asked to create a user named john and . . .

Kubernetes-Slack Discussions
#1

Eyal Solomon:
Hey !
Having a question from Mock exam #2
asked to create a user named john and give him necessary permissions

How am i suppose to create a CSR named :

john-developer

And the user itself should be named :

jhon

THANKS !
Screen Shot 2021-10-01 at 19.12.23.png

#2

unnivkn:
https://github.com/kodekloudhub/certified-kubernetes-administrator-course/blob/master/docs/15-Mock-Exams/04-CKA-MockExam-2-Solution.md

#3

Eyal Solomon:
@unnivkn
thansk you for replay
but i still doesnt understand

csr name is ‘john-developer’

where come user named ‘jhon’ ?

when i deploy this same commands user is named as CSR name

#4

unnivkn:
I am not clear your question… any way use this command to get the user: # cat /etc/passwd | grep -i john

#5

Anumeha Taori:
I have the same question.
We create CSR named “john-developer” and not mention “john” anywhere in the exercise.
So from where does this user comes? As in the question, it is asked to first create a new user “john”.

#6

Andrej Kohut:
well, john-developer is the name of CSR, that need to get created and approved.
john is the name os the user, that will be mentioned in creation of role-binding

steps :

  1. create CSR -> john-developer being mentioned hered
  2. approve CSR
  3. create role
  4. create role binding -> user john should be defined here within --user
#7

In order to understand how john is referred to you need to take the csr and decode it. Should have been explained clearly as all the comments reasoning it’s in the /etc/passwd file or you refer to john when you make the binding are confusing and misleading! The following is the csr pasted into the openssl command to decode its contents which I’ve only shown the relevant part: ‘Subject: CN = john’.

~$ openssl req -text
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Certificate Request:
Data:
Version: 1 (0x0)
Subject: CN = john
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:9a:60:87:bd:fd:24:2e:c7:af:43:08:9e:
24:ae:fe:51:64:2b:33:c7:64:77:0f:76:68:14:ad:

1 Like