K8s mock exam 2-4

Kubernetes
#1

Trying to do the mock exam and there is a scenario to create a client auth. There is not enough details it seems like to answer correctly. I was able to create a user and verify that everything worked as it should, yet i got the question wrong.

I followed this: Certificates and Certificate Signing Requests | Kubernetes and the CSR is incorrect.

Also, there is not enough info to create the correct roles and bindings as i named mine john-developer and john-developer-binding. Yet, I also got that wrong, but i had the correct command.

#2

try again with the following steps

apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  name: john-developer
spec:
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - client auth

kubectl certificate approve john-developer
kubectl create role developer --resource=pods --verb=create,list,get,update,delete --namespace=development
kubectl create rolebinding developer-role-binding --role=developer --user=john --namespace=development
kubectl auth can-i update pods --as=john --namespace=development
#3

Yes, this works, this is what i did, but with different names. What I am saying is there is not enough information to get the correct answer unless you randomly just happen to guess the correct answer.

Edit:

I think see what happened know. Somehow when i initially looked at the question it cut off the requirements at the bottom. In the review section, those requirements are also not there. Going by those requirements, it seems to be fine.