Kubernetes Container Orchestration Storage Solutions 4

Question 1

What does the 'subPath' field in a volumeMount allow you to do?

Accepted Answer

Mount only a specific subdirectory or file from a volume into a container

Answer

subPath lets you mount a specific file or directory within a volume into the container rather than the entire volume root.

Question 2

Which storage plugin type is built directly into the Kubernetes codebase (in-tree) but is being deprecated in favor of CSI?

Accepted Answer

aws-ebs

Answer

In-tree plugins like aws-ebs, gce-pd, and azure-disk are built into the Kubernetes binary and are being migrated to out-of-tree CSI drivers.

Question 3

What is the purpose of the 'fsGroup' field in a pod's securityContext related to storage?

Accepted Answer

It causes the kubelet to change the group ownership of mounted volumes to the specified GID

Answer

When fsGroup is set, Kubernetes recursively changes the group ownership of the volume to that GID so the pod's processes can read and write it.

Question 4

A PVC is in 'Pending' state. What is the most common reason for this?

Accepted Answer

No PersistentVolume matches the PVC's storage request, access mode, or StorageClass

Answer

A PVC stays Pending when no available PV satisfies its requirements (size, access mode, StorageClass) and no dynamic provisioner creates one.

Question 5

Which Kubernetes object is used to protect a PVC from deletion while it is being used by a pod?

Accepted Answer

Finalizer (kubernetes.io/pvc-protection)

Answer

The pvc-protection finalizer is automatically added to PVCs and prevents their deletion until no active pods are using them.

Kubernetes Container Orchestration Practice Test