04-CKA-MockExam-2-Solution.md

Mock Exam 2 Solution

1. Run the below command for solution:

   ETCDCTL_API=3 etcdctl snapshot save --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key --endpoints=127.0.0.1:2379 /opt/etcd-backup.db
   

2. Run the below command for solution:

   apiVersion: v1
   kind: Pod
   metadata:
      creationTimestamp: null
      labels:
        run: redis-storage
      name: redis-storage
   spec:
    volumes:
    - name: redis-storage
      emptyDir: {}
    
    containers:
    - image: redis:alpine
      name: redis-storage
      resources: {}
      volumeMounts:
      - name: redis-storage
        mountPath: /data/redis
    dnsPolicy: ClusterFirst
    restartPolicy: Always
   status: {}
   

3. Run the below command for solution:

   apiVersion: v1
   kind: Pod
   metadata:
     creationTimestamp: null
     name: super-user-pod
   spec:
     containers:
     - image: busybox:1.28
       name: super-user-pod
       command: ["sleep", "4800"]
       securityContext:
         capabilities:
           add: ["SYS_TIME"]
   

4. Run the below command for solution:

   apiVersion: v1
   kind: PersistentVolumeClaim
   metadata:
     name: my-pvc
   spec:
     accessModes:
       - ReadWriteOnce
     resources:
       requests:
         storage: 10Mi      
   

   apiVersion: v1
   kind: Pod
   metadata:
     creationTimestamp: null
     labels:
       run: use-pv
     name: use-pv
   spec:
     containers:
     - image: nginx
       name: use-pv
       volumeMounts:
       - mountPath: "/data"
         name: mypod
     volumes:
     - name: mypod
       persistentVolumeClaim:
         claimName: my-pvc
   

5. Run the below command for solution:

   For Kubernetes Version <=1.17

   kubectl run nginx-deploy --image=nginx:1.16 --replicas=1 --record
   kubectl rollout history deployment nginx-deploy
   kubectl set image deployment/nginx-deploy nginx=nginx:1.17 --record
   kubectl rollout history deployment nginx-deploy
   

   For Kubernetes Version >1.17

   kubectl create deployment nginx-deploy --image=nginx:1.16 --dry-run=client -o yaml > deploy.yaml
   
   apiVersion: apps/v1
   kind: Deployment
   metadata:
     name: nginx-deploy
   spec:
     replicas: 1
     selector:
       matchLabels:
         app: nginx-deploy
     strategy: {}
     template:
       metadata:
         creationTimestamp: null
         labels:
           app: nginx-deploy
       spec:
         containers:
         - image: nginx:1.16
           name: nginx
   

   kubectl create -f deploy.yaml --record
   kubectl rollout history deployment nginx-deploy
   kubectl set image deployment/nginx-deploy nginx=nginx:1.17 --record
   kubectl rollout history deployment nginx-deploy
   

6. Run the below command for solution:

   apiVersion: certificates.k8s.io/v1
   kind: CertificateSigningRequest
   metadata:
     name: john-developer
   spec:
     signerName: kubernetes.io/kube-apiserver-client
     request:  LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ1ZEQ0NBVHdDQVFBd0R6RU5NQXNHQTFVRUF3d0VhbTlvYmpDQ0FTSXdEUVlKS29aSWh 2Y05BUUVCQlFBRApnZ0VQQURDQ0FRb0NnZ0VCQU00cS95V0ozQUt1MW9YYmFSQm1QcnpQOHZZME1MN1VjajFIUTlFd1VtUFRYL09pCmtBMGV3UitJcEd3Wk N0dEd5WjNCd3RPUUNlK0ljdXNPdk9LaGFKVVVPamhuOUk1SGFnUElrb2drNW1sU1VWbmkKUjlRZ3NKYTZmeFpYTVdYR0NkZWo1MTdkWkNRVXZ6RXZ3bWZuY W9iMExNRDlHYWtyVXBuZVByTlZLMEdRTU4rTwppQXRzeU16K1lsYWFKblB3QWlWVlZsU1lWclE1TXo5b1J5TjJoU2VVdnAxZGJLSCtVRTBRK2R3UHkvc2hp TGhxCnI5ZjJQb3I3NHQyeHFRei9hYjhwaFltb29kV3d3UDFzRkNON25OL1hRODU5b3BmNjdnVUFRMEdTNFJmZFoxNnMKRnJkOU5FV2NIRUdLTEJzQ2FmZTB 4OURhNnJrcFZaNXVEMnY1SnZjQ0F3RUFBYUFBTUEwR0NTcUdTSWIzRFFFQgpDd1VBQTRJQkFRQWVTRWZ1bW5VK2tFdXR2QlVuNlBwS0d0MnB1TWUyL0pwRU lFb1liOGlkS2tSa2VjVWxHWE0vCnMwc0hjdDFvcnF2SHVBVktLQ0ozK05hcHU4OFp3a3pLakZFUnZ1M1FOZ3BlMEt0R0gzMGcvY09EQ29XTDIwOXQKSGRsW nNpak40OVZ0dXNCaFRjYWFlaU1uZzVsYWJHTCszcmpla1JyZVpWejVSY1BXNlVOczJudFdVVWQzZnl3SApRTlhMNHYzNkcwbzI5NmVaQStOMmNWZzhlS2tx dXlrcVh1TWpBK2xuQVN1QXU2VGVRNU9yMnRSVnRVSXliZUZ3CnlrR2hDUGkzdEliaEsvRkIrYytWY0JNdnlGb0dpcm8vamVxK2E2aFFLK1VKNHB6SDdNM04 3TW9oT2FvU2VjOEQKTmtnSThYREowbGNYWkJLZXZZZVd3UFhZZzh1cTdkQ0YKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg==
     usages:
     - digital signature
     - key encipherment
     - client auth
     groups:
     - system:authenticated
   

   kubectl create role developer --resource=pods --verb=create,list,get,update,delete --namespace=development
   kubectl create rolebinding developer-role-binding --role=developer --user=john --namespace=development
   kubectl auth can-i update pods --as=john --namespace=development
   

7. Run the below command for solution:

   kubectl run nginx-resolver --image=nginx
   kubectl expose pod nginx-resolver --name=nginx-resolver-service --port=80 --target-port=80 --type=ClusterIP
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup nginx-resolver-service
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup nginx-resolver-service > /root/CKA/nginx.svc
   
   Get the IP of the nginx-resolver pod and replace the dots(.) with hyphon(-) which will be used below.
   
   kubectl get pod nginx-resolver -o wide
   kubectl run test-nslookup --image=busybox:1.28 --rm -it --restart=Never -- nslookup <P-O-D-I-P.default.pod> > /root/CKA/nginx.pod
   
   

8. Run the below command for solution:

   kubectl run nginx-critical --image=nginx --dry-run=client -o yaml > static.yaml
   
   cat static.yaml - Copy the contents of this file.
   
   kubectl get nodes -o wide
   ssh node01 
   OR
   ssh <IP of node01>
   
   Check if static-pod directory is present which is /etc/kubernetes/manifests if not then create it.
   mkdir -p /etc/kubernetes/manifests
   
   Paste the contents of the file(static.yaml) copied in the first step to file nginx-critical.yaml.
   
   Move/copy the nginx-critical.yaml to path /etc/kubernetes/manifests/
   
   cp nginx-critical.yaml /etc/kubernetes/manifests
   
   Go back to master node
   
   kubectl get pods