2V0-71.23 Question 162
Select 3A team wants to manage access policies for their Kubernetes clusters in a VMware Tanzu environment. They need to ensure that only developers can deploy applications to a specific namespace, while cluster administrators retain full control over the cluster. Which combination of access policies and roles should be configured to meet this requirement?
- A
Assign the 'edit' role to developers for the specific namespace.
- B
Assign the 'view' role to developers for the cluster.
- C
Assign the 'admin' role to cluster administrators for the entire cluster.
- D
Assign the 'edit' role to cluster administrators for the specific namespace.
- E
Use Kubernetes RoleBindings to map roles to users or groups for the specific namespace.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirement, 'edit' permissions should be assigned to developers for the specific namespace to deploy applications, while cluster administrators should retain full control of the cluster with the 'admin' role. Additionally, RoleBindings are essential to map the roles to the appropriate users or groups within the namespace.
- A. Correct.
Correct: The 'edit' role allows developers to deploy applications and manage resources within the specific namespace, which aligns with their responsibilities.
- B. Incorrect.
Incorrect: The 'view' role provides read-only access, which does not allow developers to deploy applications.
- C. Correct.
Correct: The 'admin' role grants full control over the cluster, which is necessary for cluster administrators to maintain management and oversight capabilities.
- D. Incorrect.
Incorrect: Assigning the 'edit' role to cluster administrators would unnecessarily restrict their permissions within the namespace.
- E. Correct.
Correct: RoleBindings in Kubernetes are used to map roles to users or groups within a specific namespace, ensuring proper access control is enforced.