There appears to be an issue with question 6 in CKA Mock Exam 2:
The grading requires a csr of “john-developer”, but the instructions do not list this requirement. So, a different csr name (e.g. “john”) fails the test. Can the instructions or the grading be amended so students can get full credit for this question?
Thank you!
Hello maren,
“john-developer” is the name of csr. the user “john” is created, you should create role for this. please check the following:
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
namespace: development
name: developer
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["create","list","get","update","delete"]
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: developer-binding
namespace: development
subjects:
- kind: User
name: john
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: Role
name: developer
apiGroup: rbac.authorization.k8s.io
then
Then check for example: kubectl auth can-i update pods -n development --as=john
@Ayman it is not an answer to the question, and the issue still persists. I just encountered it again, the same issue as @maren.peasley described.
The task requires the name “john-developer” but it does not describe that requirement.
So the CSR example you gave here would fail the task too. Because you named it “developer-binding” but it REQUIRES “john-developer” name.
