RedHat Red Hat Certified Specialist in OpenShift Administration - EX280 Exam Questions
QUESTION NO: 1
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projects The user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projects The user account kubeadmin is not present
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projects The user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projects The user account kubeadmin is not present
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner
system:authenticated:oauth
$ oc adm policy add-cluster-role-to-user self-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system
Explanation:
Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner
system:authenticated:oauth
$ oc adm policy add-cluster-role-to-user self-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system
QUESTION NO: 2
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini The user account wozniak can view project titan but not administer or delete it
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini The user account wozniak can view project titan but not administer or delete it
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
Explanation:
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
QUESTION NO: 3
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project bullwinkle
$ oc get pods
$ oc get all | grep deploy
$ oc get nodes
$ oc describe nodes | grep -i taint
$ oc adm taint nodes worker0 key1=value1:NoSchedule-
$ oc adm taint nodes worker1 key1=value1:NoSchedule-
$ oc describe nodes | grep -i taint
$ oc get route
$ oc delete route rocky
$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com
$ oc get route
Explanation:
Solution:
$ oc project bullwinkle
$ oc get pods
$ oc get all | grep deploy
$ oc get nodes
$ oc describe nodes | grep -i taint
$ oc adm taint nodes worker0 key1=value1:NoSchedule-
$ oc adm taint nodes worker1 key1=value1:NoSchedule-
$ oc describe nodes | grep -i taint
$ oc get route
$ oc delete route rocky
$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com
$ oc get route
QUESTION NO: 4
Create Project Template
Task information Details:
Generate the bootstrap project template, create it in openshift-config , update the cluster project configuration to use the template, and create a new project to validate it.
Create Project Template
Task information Details:
Generate the bootstrap project template, create it in openshift-config , update the cluster project configuration to use the template, and create a new project to validate it.
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
* Generate the default template:
oc adm create-bootstrap-project-template -o yaml > template.yaml
* Review and edit template.yaml if required.
* Create the template in openshift-config:
oc create -f template.yaml -n openshift-config
* Edit the cluster project configuration:
oc edit project.config.openshift.io/cluster
* Add or update:
spec:
projectRequestTemplate:
name: project-request
* Save and exit.
* Create a test project:
oc new-project test123
* Verify the template behavior:
oc get project test123 -o yaml
Notes:
* The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.
config.openshift.io/cluster.
This task checks cluster-wide customization of new-project creation behavior.
Explanation:
Solution:
* Generate the default template:
oc adm create-bootstrap-project-template -o yaml > template.yaml
* Review and edit template.yaml if required.
* Create the template in openshift-config:
oc create -f template.yaml -n openshift-config
* Edit the cluster project configuration:
oc edit project.config.openshift.io/cluster
* Add or update:
spec:
projectRequestTemplate:
name: project-request
* Save and exit.
* Create a test project:
oc new-project test123
* Verify the template behavior:
oc get project test123 -o yaml
Notes:
* The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.
config.openshift.io/cluster.
This task checks cluster-wide customization of new-project creation behavior.
