CKA ConfigMaps and Secrets 3

Question 1

Which Kubernetes resource type can be used to automatically mount a ServiceAccount token Secret into every Pod that uses that ServiceAccount?

Accepted Answer

ServiceAccount

Answer

A ServiceAccount can have Secrets listed under its 'secrets' field, and those Secrets are automatically mounted as volumes into Pods using that ServiceAccount.

Question 2

What field in a projected volume allows you to combine a ConfigMap and a Secret into a single volume mount path?

Accepted Answer

projected.sources

Answer

A projected volume uses the 'sources' field to list multiple sources (ConfigMap, Secret, ServiceAccountToken, etc.) that are merged into one directory.

Question 3

What is the recommended way to enable encryption at rest for Secrets in Kubernetes?

Accepted Answer

Configure an EncryptionConfiguration file and reference it with --encryption-provider-config on the API server

Answer

Encryption at rest requires creating an EncryptionConfiguration resource and passing it to the API server via --encryption-provider-config, which instructs etcd to store data encrypted.

Question 4

An application Pod references a ConfigMap key that does not exist. The container spec uses 'configMapKeyRef' without any optional setting. What will happen?

Accepted Answer

The Pod will fail to start because the missing key causes an error

Answer

By default, configMapKeyRef is required; if the referenced key is missing, the Pod will not start and an error event is generated.

Question 5

You want a container to receive an updated ConfigMap value without a Pod restart. Which mounting method supports this?

Accepted Answer

Mount the ConfigMap as a volume; the kubelet will periodically sync the files

Answer

Volume-mounted ConfigMap files are updated by the kubelet without restarting the Pod, though applications must re-read the files to pick up changes.

(CKA) Certified Kubernetes Administrator Practice Test

(CKA) Certified Kubernetes Administrator Practice Test

CKA ConfigMaps and Secrets 3