CKAD (13-15)

What are two types of admission controllers?

• Validating admission controllers

• Authentication admission controllers

• Mutating admission controllers

• Namespace admission controllers

• Lifecycle admission controllers

They are like "gatekeepers" that check whether the requests to change something in the cluster are allowed or denied based on specific rules.

What of the admission controllers does the above statement refer to?

• Validating admission controllers

• Authentication admission controllers

• Mutating admission controllers

• Namespace admission controllers

• Lifecycle admission controllers

_______________ (1) are invoked first. Then the ______________ (2) process considers any change done by the ______________ (1)

What of the admission controllers does the above statement refer to?

• Validating admission contrrollers (2)

• Authentication admission controllers (2)

• Mutating admission controllers (1)

• Namespace admission controllers (1)

• Lifecycle admission controllers (1)

On Kubernetes is a special type of admission controller that intercepts API requests to the Kubernetes API server and modifies the incoming objects before they are persisted into etcd

What of the admission controllers does the above statement refer to?

• Validating admission contrrollers

• Authentication admission controllers

• Mutating admission controllers

• Namespace admission controllers

• Lifecycle admission controllers

If we want to create our own admission controller with our own mutations and validations with our own logic, what are two admission controllers to support external admission controller?

• Validating admission contrrollers

• ValidatingAdmissionWebhok

• Mutating admission controllers

• Namespace admission controllersWebhook

• MutatingAdmissionWebhook

 It's enabled by default. It watches for requests to a create a PVC, and check if has a StorageClass mentioned in it. If not, it will modify the request to add the default StorageClass.

What admission controller plugin does the above statement refer to?

• NamespaceAutoProvision

• AlwaysPullImages

• DefaultStorageClass

• EvenRateLimit

Where can the webhook server for a mutating admission webhook be hosted?

• Only outside the Kubernetes cluster

• Only within the Kubernetes cluster

• Either within the Kubernetes cluster or outside it

• On the Kubernetes control plane nodes only

What runs on the admission webhook server?

• The Kubernetes API server

• The admission webhook service with custom code and logic

• A scheduler for managing Pods

• The kube-proxy service

What object is passed to the admission webhook server during a webhook call?

• A Pod object

• A ConfigMap object

• An admission review object

• A service account token

What does the admission webhook server return to the Kubernetes API server?

• A modified YAML manifest

• An admission review object with the result

• A list of Kubernetes resources

• A response code