Q: 12
Which Kubernetes object is used to grant permissions to a cluster-wide resource?
Options
Discussion
Option B for sure, ClusterRoleBinding is the only real Kubernetes object here that gives permissions across the whole cluster. RoleBinding is just for namespaces, and D/C don't exist. Pretty sure this matches how RBAC is used.
It’s B here. ClusterRoleBinding is what actually grants cluster-wide permissions, while RoleBinding is limited to a namespace. Easy to mix up since they sound similar-A is tempting but only works at the namespace level. Pretty sure on this.
Isn't RoleBinding (A) limited to a namespace though? For cluster-wide resources, ClusterRoleBinding (B) seems like the only real option here.
Its B. ClusterRoleBinding is the real Kubernetes object for granting cluster-wide permissions. The other options either don't exist or are namespace-scoped. Almost sure this is what exam wants, but open if anyone disagrees.
I don’t think it’s A-RoleBinding can bind cluster roles but only at namespace scope. ClusterRoleBinding is the official object for cluster-wide RBAC in Kubernetes, not D (that’s not a real K8s resource). Correct me if you think otherwise.
I remember a similar scenario from labs and picked A, thinking RoleBinding could handle cluster-wide resources too. Maybe that's just for namespaced stuff though? I thought binding a ClusterRole with RoleBinding grants those permissions cluster-wide, at least in some Kubernetes setups.
Maybe A is right for namespaced access, but for cluster-wide resources I thought RoleBinding only works within a namespace. ClusterRoleBinding sounds like it's needed for cluster-level stuff, but open to correction since I get confused with RBAC sometimes.
Seen similar questions in the official guide and practice exams, it's B.
B is right, only ClusterRoleBinding lets you give access across the whole cluster. RoleBinding stays within a namespace, D and C aren't actual objects. Kinda tricky if you're new to RBAC but I'm pretty confident here.
You have to be careful with wording here. B is correct only because ClusterRoleBinding actually exists, and it's the proper object for cluster-level permissions. D sounds tempting if you skim, but it's not a real K8s resource. Seen this debated in some practice sets, but pretty sure it's B unless they change the RBAC spec.
Be respectful. No spam.
