Udemy CKA 강의 정리 152: Solution - Certificates API

해당 내용은 Udemy의 Certified Kubernetes Administrator (CKA) with Practice Tests 강의를 공부한 내용입니다. 내용을 그대로 번역하기보다는, 제가 이해하기 쉬운 대로 수정한 부분들이 있습니다.

⚠️ 영어 독해가 많이 부족합니다. 틀린 내용이 있으면 알려주시면 감사하겠습니다.

---

Q1. A new member akshay joined our team. He requires access to our cluster. The Certificate Signing Request is at the /root location.

Q2. Create a CertificateSigningRequest object with the name akshay with the contents of the akshay.csr file. As of kubernetes 1.19, the API to use for CSR is certificates.k8s.io/v1.

(다시 풀기)

 kubectl create -f /var/answers/akshay-csr.yaml

Q3. What is the Condition of the newly created Certificate Signing Request object?

답: Pendiing

Q4. Approve the CSR Request

Q5. How many CSR requests are available on the cluster?

답: 2

Q6. During a routine check you realized that there is a new CSR request in place. What is the name of this request?

답: agent-smith

Q7. Hmmm.. You are not aware of a request coming in. What groups is this CSR requesting access to?

kubectl get csr agent-smith -o yaml

답: system:masters

Q8. That doesn't look very right. Reject that request.

Q9. Let's get rid of it. Delete the new CSR object