Prepare Smarter for the EX280 Exam
Build your exam confidence with flexible preparation resources designed around the latest EX280 exam objectives. Practice at your own pace using PDF questions, online exam simulations, or desktop practice software.
SIMULATION Configure an identity provider Configure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:
The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secret The user account armstrong=indionce
The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiver The user account wozniak=glegunge
Correct Answer: A
Solution:
$ sudo yum install httpd-tools-y
$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce
$ htpasswd -B -b htpasswd-file collins veraster
$ htpasswd -B -b htpasswd-file aldrin roonkere
$ htpasswd -B -b htpasswd-file jobs sestiver
$ htpasswd -B -b htpasswd-file wozniak glegunge
$ oc create secret generic ex280-idp-secret --from-file
htpasswd=htpasswd-file -n openshift-config
$ oc get oauth/cluster -o yaml> oauth.yaml
$ vim oauth.yaml
$
esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting
spec:
identityProviders:
- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:
fileData:
name: ex280-idp-secret
$ oc replace -f oauth.yaml
$ oc login -u armstrong -p indionce
$ oc login -u collins -p veraster
$ oc login -u aldrin roonkere
$ oc login -u jobs sestiver
$ oc login -u wozniak -p glegunge
#This below part of operation is completely optional and done just for handy login purpose
$ alias _kube="oc login -u kubeadmin -p ${kube_pass} ${api_url}"
$ alias _armstrong="oc login -u armstrong -p ${armstrong}
${api_url}"
$ alias _collins="oc login -u collins -p ${collins} ${api_url}"
$ alias _aldrin="oc login -u aldrin -p ${aldrin} ${api_url}"
$ alias _jobs="oc login -u jobs -p ${jobs} ${api_url}"
$ alias _wozniak="oc login -u wozniak -p ${wozniak} ${api_url}"
$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can
perform cluster administration tasks The user account wozniak can create projects
The user account wozniak cannot perform cluster administration tasks The user account armstrong
cannot create projects
The user account kubeadmin is not present
Correct Answer: A
Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner
system:authenticated:oauth
$ oc adm policy add-cluster-role-to-userself-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system
SIMULATION
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini
The user account wozniak can view project titan but not administer or delete it
Correct Answer: A
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
SIMULATION
Configure groups
Configure your OpenShift cluster to meet the following requirements: The user account armstrong is
a member of the commander group The user account collins is a member of the pilot group
The user account aldrin is a member of the pilot group
Members of the commander group have edit permission in the apollo project Members of the pilot
group have view permission in the apollo project
Correct Answer: A
$ oc adm groups new commander
$ oc adm groups new pilot
$ oc adm groups add-users commander armstrong
$ oc adm groups add-users pilot collins
$ oc adm groups add-users pilot aldrin
$ oc adm policy add-role-to-group edit commander -n apollo
$ oc adm policy add-role-to-group view pilot -n apollo
SIMULATION
Configure quotas
Configure your OpenShift cluster to use quotasin the manhattan project with the following
requirements:
The name ofthe ResourceQuota resource is: ex280-quota
The amount of memory consumed across all containers may not exceed 1Gi
The total amount of CPU usage consumed across all containers may not exceed
2 full cores
The maximum number of replication controllers does not exceed 3 The maximum number of pods
does not exceed 3
The maximum number ofservices does not exceed 6
Correct Answer: A
Solution:
$ oc project manhattan
$ oc create quota ex280-quota --
hard=memory=1Gi,cpu=2,pods=3,services=6,replicationcontrollers=3
$ oc get resourcequota