Kubernetes Container Orchestration CI/CD Integration 3

Question 1

In a Kubernetes CI/CD pipeline, what is the primary advantage of using Kustomize overlays?

Accepted Answer

It allows environment-specific configuration patches without duplicating base manifests

Answer

Kustomize overlays let you maintain a single base manifest and apply environment-specific patches (dev, staging, prod) without duplication.

Question 2

What Kubernetes mechanism prevents a CI/CD pipeline from deploying to a namespace it is not authorized to access?

Accepted Answer

RBAC (Role-Based Access Control)

Answer

RBAC restricts which service accounts (used by CI/CD pipelines) can create, update, or delete resources in specific namespaces.

Question 3

A pipeline robot needs to deploy to a Kubernetes cluster. What is the recommended way to authenticate the pipeline?

Accepted Answer

Create a dedicated ServiceAccount with minimal RBAC permissions and use its token

Answer

A dedicated ServiceAccount with least-privilege RBAC is the secure, auditable method for CI/CD pipeline authentication to Kubernetes.

Question 4

Which kubectl rollout command is used to immediately pause a deployment that is mid-rollout in a CD pipeline?

Accepted Answer

kubectl rollout pause deployment/my-app

Answer

kubectl rollout pause halts the rolling update in place, allowing investigation without fully rolling back.

Question 5

What is a 'blue-green deployment' strategy in Kubernetes CI/CD?

Accepted Answer

Running two identical environments (blue=live, green=new) and switching traffic via a Service selector update

Answer

Blue-green deployment keeps two full environments live; traffic switches instantly by updating the Service selector from the blue to the green Deployment.

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration CI/CD Integration 3