Score: 4%

Context
You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.
Task
Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:
* Deployment
* StatefulSet
* DaemonSet
Create a new ServiceAccount named cicd-token in the existing namespace app-team1.
Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

Comment: *

Name: *

Email: *

Verification: *

Create a deployment as follows:
* Name: nginx-app
* Using container nginx with version 1.11.10-alpine
* The deployment should contain 3 replicas
Next, deploy the application with new version 1.11.13-alpine, by performing a rolling update.
Finally, rollback that update to the previous version 1.11.10-alpine.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Score: 4%

Task
Check to see how many nodes are ready schedulable (not including nodes tainted NoSchedule ) and write the number to /opt/KUSC00402/kusc00402.txt.

Comment: *

Name: *

Email: *

Verification: *

Create a NetworkPolicy which denies all ingress traffic

• A.apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
  name: default-deny
  spec:
  podSelector: {}
  policyTypes:
  - Ingress
• B.apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
  name: default-deny
  spec:
  podSelector: ()
  policyTypes:
  - Ingress

Comment: *

Name: *

Email: *

Verification: *

Get the memory and CPU usage of all the pods and find out top 3 pods which have the highest usage and put them into the cpuusage.txt file

• A.// Get the top 3 pods
  kubectl top pod --all-namespaces | sort --reverse --key 3 --
  numeric | head -3
  // putting into file
  kubectl top pod --all-namespaces | sort --reverse --key 3 --
  numeric | head -3 > cpu-usage.txt
  // verify
  cat cpu-usage.txt
• B.// Get the top 3 pods
  kubectl top pod --all-namespaces | sort --reverse --key 3 --
  numeric | head -8
  // putting into file
  kubectl top pod --all-namespaces | sort --reverse --key 6 --
  numeric | head -6 > cpu-usage.txt
  // verify
  cat cpu-usage.txt

Comment: *

Name: *

Email: *

Verification: *