04-CKA-MockExam-2-Solution.md

Mock Exam 2 Solution

1. Run the below command for solution:

   ETCDCTL_API=3 etcdctl snapshot save --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key --endpoints=127.0.0.1:2379 /opt/etcd-backup.db
   

2. Run the below command for solution:

   apiVersion: v1
   kind: Pod
   metadata:
      creationTimestamp: null
      labels:
        run: redis-storage
      name: redis-storage
   spec:
    volumes:
    - name: redis-storage
      emptyDir: {}
    
    containers:
    - image: redis:alpine
      name: redis-storage
      resources: {}
      volumeMounts:
      - name: redis-storage
        mountPath: /data/redis
    dnsPolicy: ClusterFirst
    restartPolicy: Always
   status: {}
   

3. Run the below command for solution:

   apiVersion: v1
   kind: Pod
   metadata:
     creationTimestamp: null
     name: super-user-pod
   spec:
     containers:
     - image: busybox:1.28
       name: super-user-pod
       command: ["sleep", "4800"]
       securityContext:
         capabilities:
           add: ["SYS_TIME"]
   

4. Run the below command for solution:

   apiVersion: v1
   kind: PersistentVolumeClaim
   metadata:
     name: my-pvc
   spec:
     accessModes:
       - ReadWriteOnce
     resources:
       requests:
         storage: 10Mi      
   

   apiVersion: v1
   kind: Pod
   metadata:
     creationTimestamp: null
     labels:
       run: use-pv
     name: use-pv
   spec:
     containers:
     - image: nginx
       name: use-pv
       volumeMounts:
       - mountPath: "/data"
         name: mypod
     volumes:
     - name: mypod
       persistentVolumeClaim:
         claimName: my-pvc
   

5. Run the below command for solution:

   For Kubernetes Version <=1.17

   kubectl run nginx-deploy --image=nginx:1.16 --replicas=1 --record
   kubectl rollout history deployment nginx-deploy
   kubectl set image deployment/nginx-deploy nginx=nginx:1.17 --record
   kubectl rollout history deployment nginx-deploy
   

   For Kubernetes Version >1.17

   kubectl create deployment nginx-deploy --image=nginx:1.16 --dry-run=client -o yaml > deploy.yaml
   
   apiVersion: apps/v1
   kind: Deployment
   metadata:
     name: nginx-deploy
   spec:
     replicas: 1
     selector:
       matchLabels:
         app: nginx-deploy
     strategy: {}
     template:
       metadata:
         creationTimestamp: null
         labels:
           app: nginx-deploy
       spec:
         containers:
         - image: nginx:1.16
           name: nginx
   

   kubectl create -f deploy.yaml --record
   kubectl rollout history deployment nginx-deploy
   kubectl set image deployment/nginx-deploy nginx=nginx:1.17 --record
   kubectl rollout history deployment nginx-deploy
   

6. Run the below command for solution:

    apiVersion: certificates.k8s.io/v1
    kind: CertificateSigningRequest
    metadata:
      name: john-developer
    spec:
      signerName: kubernetes.io/kube-apiserver-client
      request: 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
      usages:
      - digital signature
      - key encipherment
      - client auth
      groups:
      - system:authenticated
   

   kubectl certificate approve john-developer
   kubectl create role developer --resource=pods --verb=create,list,get,update,delete --namespace=development
   kubectl create rolebinding developer-role-binding --role=developer --user=john --namespace=development
   kubectl auth can-i update pods --as=john --namespace=development
   

7. Run the below command for solution:

   kubectl run nginx-resolver --image=nginx
   kubectl expose pod nginx-resolver --name=nginx-resolver-service --port=80 --target-port=80 --type=ClusterIP
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup nginx-resolver-service
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup nginx-resolver-service > /root/CKA/nginx.svc
   
   Get the IP of the nginx-resolver pod and replace the dots(.) with hyphon(-) which will be used below.
   
   kubectl get pod nginx-resolver -o wide
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup <P-O-D-I-P.default.pod> > /root/CKA/nginx.pod
   
   

8. Run the below command for solution:

   kubectl run nginx-critical --image=nginx --dry-run=client -o yaml > static.yaml
   
   cat static.yaml - Copy the contents of this file.
   
   kubectl get nodes -o wide
   ssh node01 
   OR
   ssh <IP of node01>
   
   Check if static-pod directory is present which is /etc/kubernetes/manifests if not then create it.
   mkdir -p /etc/kubernetes/manifests
   
   Paste the contents of the file(static.yaml) copied in the first step to file nginx-critical.yaml.
   
   Move/copy the nginx-critical.yaml to path /etc/kubernetes/manifests/
   
   cp nginx-critical.yaml /etc/kubernetes/manifests
   
   Go back to master node
   
   kubectl get pods