2V0-21.23 Question 301
Select 2An administrator is configuring permissions for a Kubernetes namespace in VMware vSphere with Tanzu. The goal is to allow a development team to deploy workloads but restrict their ability to modify network policies within the namespace. Which combination of permissions should the administrator assign to achieve this?
- A
Assign the 'edit' role to the development team for the namespace.
- B
Assign the 'view' role to the development team for the namespace.
- C
Assign the 'network-admin' role to the development team for the namespace.
- D
Assign the 'edit' role to the development team and configure a custom RoleBinding to deny changes to network policies.
- E
Assign the 'view' role along with a custom RoleBinding that grants permission to deploy workloads.
Show answer and explanation
Correct answers: A, D
Explanation
To meet the requirements, the 'edit' role provides the necessary permissions to deploy workloads. However, since the development team should not modify network policies, a custom RoleBinding is needed to explicitly deny such changes. This approach ensures the team has the required access while maintaining network policy restrictions.
- A. Correct.
The 'edit' role allows users to deploy workloads but does not grant permissions to modify network policies, making it a suitable base role for the development team.
- B. Incorrect.
The 'view' role only grants read access and does not allow the deployment of workloads. This option alone does not meet the requirements.
- C. Incorrect.
The 'network-admin' role explicitly grants permissions to modify network policies, which goes against the goal of restricting such changes.
- D. Correct.
Combining the 'edit' role with a custom RoleBinding that denies network policy changes ensures that the development team can deploy workloads but is restricted from modifying network policies.
- E. Incorrect.
The 'view' role does not permit workload deployments, and adding custom RoleBinding for workload deployment would require excessive customization, making it less practical.