[Q11-Q32] Use Real CKA – 100% Cover Real Exam Questions [May-2022]

NO.11 Create a configmap called myconfigmap with literal value
appname=myapp

kubectl create cm myconfigmap –from-literal=appname=myapp
// Verify
kubectl get cm -o yaml
(or)
kubectl describe cm

kubectl create cm myconfigmap –from-literal=appname=myapp
// Verify
(or)
kubectl describe cm

NO.12 Evict all existing pods from a node-1 and make the node unschedulable for new pods.

kubectl get nodes
kubectl drain node-1 #It will evict pods running on node-1 to
other nodes in the cluster
kubectl cordon node-1 # New pods cannot be scheduled to the
node
// Verify
kubectl get no
When you cordon a node, the status shows “SchedulingDisabled”

kubectl get nodes
kubectl drain node-1 #It will evict pods running on node-1 to
other nodes in the cluster
// Verify
kubectl get no
When you cordon a node, the status shows “SchedulingDisabled”

NO.13 Clean the cluster by deleting deployment and hpa you just created

NO.14 Create a pod with environment variables as var1=value1.Check the environment variable in pod

kubectl run nginx –image=nginx –restart=Never –env=var1=value1
# then
kubectl exec -it nginx — env
# or
kubectl describe po nginx | grep value1

kubectl run nginx –image=nginx –restart=Never –env=var1=value1
# then
kubectl exec -it nginx — env
# or
kubectl exec -it nginx — sh -c ‘echo $var1’
# or
kubectl describe po nginx | grep value1

NO.15 What are the differences between using a service versus using an application for Security Policy match?

Use of a “service” enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an application allows the firewall to take action after enough packets allow for App-ID identification regardless of the ports being used

Use of a “service” enables the firewall to take action after enough packets allow for App-ID identification

Use of a “service” enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an “application allows the firewall to take immediate action if the port being used is a member of the application standard port list

There are no differences between “service” or “application.” Use of an “application simplifies configuration by allowing use of a friendly application name instead of port numbers.

NO.16 Create a pod namedkucc8with asingle app container for each of the
following images running inside(there may be between 1 and 4images specified):
nginx + redis + memcached.

NO.17 From the pod label name=cpu-utilizer, find pods running high CPU workloads and write the name of the pod consuming most CPU to the file /opt/KUTR00102/KUTR00102.txt (which already exists).

NO.18 Get list of all the pods showing name and namespace with a jsonpath expression.

NO.19 Verify certificate expiry date for ca certificate in /etc/kubernetes/pki

NO.20 Create an nginx pod which reads username as the environment variable

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
apiVersion: v1
kind: Pod
metadata:
labels:
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
env:
– name: USER_NAME
restartPolicy: Never
kubectl create -f nginx.yml
//Verify
kubectl exec -it nginx – env

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
apiVersion: v1
kind: Pod
metadata:
labels:
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
env:
– name: USER_NAME
valueFrom:
secretKeyRef:
name: my-secret
key: username
restartPolicy: Never
kubectl create -f nginx.yml
//Verify
kubectl exec -it nginx – env

NO.21 Create a hostPath PersistentVolume named task-pv-volume with storage 10Gi, access modes ReadWriteOnce, storageClassName manual, and volume at /mnt/data and verify

vim task-pv-volume.yaml
apiVersion: v1
kind: PersistentVolume
metadata:
name: task-pv-volume
labels:
type: local
spec:
storageClassName: “”
capacity:
storage: 5Gi
accessModes:
– ReadWriteOnce
hostPath:
path: “/mnt/data”
kubectl apply -f task-pv-volume.yaml
//Verify
kubectl get pv
NAME CAPACITY ACCESS
MODES RECLAIM POLICY STATUS CLAIM
STORAGECLASS REASON AGE
task-pv-volume 5Gi RWO
Retain Available
3s

vim task-pv-volume.yaml
apiVersion: v1
kind: PersistentVolume
metadata:
name: task-pv-volume
labels:
type: local
spec:
storageClassName: “”
capacity:
storage: 5Gi
accessModes:
– ReadWriteOnce
hostPath:
path: “/mnt/data”
kubectl apply -f task-pv-volume.yaml
//Verify
kubectl get pv
NAME CAPACITY ACCESS
MODES RECLAIM POLICY STATUS CLAIM
STORAGECLASS REASON AGE
task-pv-volume 4Gi RWO
Retain Available
8s

NO.22 Create an nginx pod which loads the secret as environment variables

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
vim nginx.yaml
apiVersion: v1
kind: Pod
metadata:
labels:
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
envFrom:
– secretRef:
name: my-secret
restartPolicy: Never
kubectl apply -f nginx.yaml
//verify
kubectl exec -it nginx – env

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
vim nginx.yaml
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
envFrom:
– secretRef:
name: my-secret
restartPolicy: Never
kubectl apply -f nginx.yaml
//verify
kubectl exec -it nginx – env

NO.23 Create a busybox pod that runs the command “env” and save the output to “envpod” file

NO.24 Create a pod named kucc8 with a single app container for each of the
following images running inside (there may be between 1 and 4 images specified):
nginx + redis + memcached.

NO.25 Check to see how many worker nodes are ready (not including nodes tainted NoSchedule) and write the number to /opt/KUCC00104/kucc00104.txt.

NO.26 Change the Image version to 1.15-alpine for the pod you just created and verify the image version is updated.

Kubect1 set image pod/nginx nginx=nginx:1.15-alpine
kubect1 describe po nginx
// another way it will open vi editor and change the version
kubeclt edit po nginx
kubect1 describe po nginx

Kubect1 set image pod/nginx nginx=nginx:1.15-alpine
kubect1 describe po nginx
// another way it will open vi editor and change the version
kubect1 describe po nginx

NO.27 For this item, you will havetosshto the nodesik8s-master-0andik8s-node-0and complete all tasks on thesenodes. Ensure that you return tothe base node (hostname:node-1) when you havecompleted this item.
Context
As an administrator of a smalldevelopment team, you have beenasked to set up a Kubernetes clusterto test the viability of a newapplication.
Task
You must usekubeadmto performthis task. Anykubeadminvocationswill require the use of the
–ignore-preflight-errors=alloption.
* Configure thenodeik8s-master-Oas a masternode. .
* Join the nodeik8s-node-otothe cluster.

NO.28 Install a kubernetes cluster with one master and one worker using kubeadm

This is a straightforward question, you need to install kubernetes cluster using kubeadm with one master and one worker.
Refer : https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/

This is a straightforward question, you need to install kubernetes cluster using kubeadm with one master and one worker.
Installation is considered success once both master and worker
nodes become available.
Refer : https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/

NO.29 Score: 7%

Task
First, create a snapshot of the existing etcd instance running at https://127.0.0.1:2379, saving the snapshot to
/srv/data/etcd-snapshot.db.

Next, restore an existing, previous snapshot located at /var/lib/backup/etcd-snapshot-previo us.db

NO.30 List all the pods sorted by name

NO.31 Create 5 nginx pods in which two of them is labeled env=prod and
three of them is labeled env=dev

kubectl run nginx-dev1 –image=nginx –restart=Never —
labels=env=dev
kubectl run nginx-dev2 –image=nginx –restart=Never —
labels=env=dev
kubectl run nginx-dev3 –image=nginx –restart=Never —
labels=env=dev
kubectl run nginx-prod1 –image=nginx –restart=Never —
labels=env=prod
kubectl run nginx-prod2 –image=nginx –restart=Never —
labels=env=prod

kubectl run nginx-dev1 –image=nginx –restart=Never —
labels=env=dev
kubectl run nginx-dev2 –image=nginx –restart=Never —
labels=env=dev
kubectl run nginx-prod1 –image=nginx –restart=Never —
labels=env=prod
kubectl run nginx-prod2 –image=nginx –restart=Never —
labels=env=prod

NO.32 Create a namespace called ‘development’ and a pod with image nginx called nginx on this namespace.