rkrk:
In Mock2 , seccomp question number7, I have a query …The default seccomp profile path is /var/lib/kubelet/seccomp… So I used custom-profile.json from seccomp directory. But not sure why it is failing …In Mock exam1, we have similar question and we place in /var/lib/kubelet/seccomp/profiles directory…Please clarify why there is a difference…And kubelet config file does not have any seccomp profile path.So it must be default seccomp path.please clarify why there is difference in mock exam1 -seccomp 4th question and mock exam 2 -seccomp 7th question.
rkrk:
could someone help to clarify on this pls?
Lukasz Matuszczak:
Hi, localhostProfile refers to files in the /var/lib/kubelet/seccomp
directory (I don’t know if it is configurable). Putting files in profiles
subfolder is just a convention.
So in mock exam1 4th question the file is /var/lib/kubelet/seccomp/profiles/audit.json
. You refer to it by localhostProfile: profiles/audit.json
In Mock exam2 7th question the file is /var/lib/kubelet/seccomp/custom-profiles.json
(without profiles subfolder). That’s why you refer to it by localhostProfile: custom-profile.json
It works for me. See also the answers: https://github.com/kodekloudhub/certified-kubernetes-security-specialist-cks-course/tree/main/docs/08-Mock-Exams
rkrk:
ok…thankyou