CKAD Configuration and Secrets

Question 1

How do you create a ConfigMap named 'app-config' from a literal key-value pair 'APP_ENV=production'?

Accepted Answer

kubectl create configmap app-config --from-literal=APP_ENV=production

Answer

The '--from-literal=key=value' flag on 'kubectl create configmap' creates a ConfigMap from inline key-value pairs.

Question 2

Which Pod spec field injects all keys of a ConfigMap as environment variables?

Accepted Answer

envFrom.configMapRef

Answer

'envFrom' with 'configMapRef' injects every key in the ConfigMap as a separate environment variable in the container.

Question 3

What is the default encoding used for Secret values in Kubernetes?

Accepted Answer

Base64 encoded

Answer

Kubernetes stores Secret values as base64-encoded strings; this is encoding, not encryption, and secrets should be protected by RBAC.

Question 4

Which command creates a Secret named 'db-secret' with username and password from literal values?

Accepted Answer

kubectl create secret generic db-secret --from-literal=username=admin --from-literal=password=pass123

Answer

'kubectl create secret generic' with multiple '--from-literal' flags creates an opaque Secret with multiple keys.

Question 5

How do you mount a Secret as a volume so each key becomes a file in the pod?

Accepted Answer

Use 'volumes.secret.secretName' and mount it with 'volumeMounts'

Answer

Defining a secret volume under 'volumes' and referencing it in 'volumeMounts' makes each Secret key available as a file.

CKAD - Certified Kubernetes Application Developer Practice Test