Free Dec-2022 UPDATED Linux Foundation CKA Certification Exam Dumps is Online [Q36-Q59] : Exam for engine : http://blog.test4engine.com

QUESTION 36
Create a pod with environment variables as var1=value1.Check the environment variable in pod

kubectl run nginx –image=nginx –restart=Never –env=var1=value1
# then
kubectl exec -it nginx — env
# or
kubectl describe po nginx | grep value1

kubectl run nginx –image=nginx –restart=Never –env=var1=value1
# then
kubectl exec -it nginx — env
# or
kubectl exec -it nginx — sh -c ‘echo $var1’
# or
kubectl describe po nginx | grep value1

QUESTION 37
List all persistent volumes sorted bycapacity, saving the fullkubectloutput to
/opt/KUCC00102/volume_list. Usekubectl ‘s own functionality forsorting the output, and do not manipulate it any further.

QUESTION 38
Get list of all pods in all namespaces and write it to file “/opt/pods-list.yaml”

QUESTION 39
Delete the above pod and create again from the same yaml file
and verifies there is no “test-file.txt” in the path /data/redis
(Since non-persistent storage “emptyDir” is used).

QUESTION 40
Create a namespace called ‘development’ and a pod with image nginx called nginx on this namespace.

QUESTION 41
Create a NetworkPolicy which denies all ingress traffic

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: default-deny
spec:
podSelector: {}
policyTypes:
– Ingress

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: default-deny
spec:
podSelector: ()
policyTypes:
– Ingress

QUESTION 42
Score: 13%

Task
A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a Ready state, ensuring that any changes are made permanent.

QUESTION 43
Monitor the logs of pod foo and:
* Extract log lines corresponding unable-to-access-website
* Write them to/opt/KULM00201/foo

QUESTION 44
Create a Pod with main container busybox and which executes this
“while true; do echo ‘Hi I am from Main container’ >>
/var/log/index.html; sleep 5; done” and with sidecar container
with nginx image which exposes on port 80. Use emptyDir Volume
and mount this volume on path /var/log for busybox and on path
/usr/share/nginx/html for nginx container. Verify both containers
are running.

// create an initial yaml file with this
kubectl run multi-cont-pod –image=busbox –restart=Never —
dry-run -o yaml > multi-container.yaml
// edit the yml as below and create it
kubectl create -f multi-container.yaml
vim multi-container.yaml
apiVersion: v1
kind: Pod
metadata:
labels:
run: multi-cont-pod
name: multi-cont-pod
spec:
volumes:
– name: var-logs
emptyDir: {}
containers:
– image: busybox
command: [“/bin/sh”]
args: [“-c”, “while true; do echo ‘Hi I am from Main
container’ >> /var/log/index.html; sleep 5;done”]
name: main-container
volumeMounts:
– name: var-logs
mountPath: /var/log
– image: nginx
name: sidecar-container
ports:
– containerPort: 80
volumeMounts:
– name: var-logs
mountPath: /usr/share/nginx/html
restartPolicy: Never
// Create Pod
kubectl apply -f multi-container.yaml
//Verify
kubectl get pods

// create an initial yaml file with this
kubectl run multi-cont-pod –image=busbox –restart=Never —
dry-run -o yaml > multi-container.yaml
// edit the yml as below and create it
kubectl create -f multi-container.yaml
vim multi-container.yaml
apiVersion: v1
kind: Pod
metadata:
labels:
run: multi-cont-pod
name: multi-cont-pod
spec:
volumes:
– image: busybox
command: [“/bin/sh”]
args: [“-c”, “while true; do echo ‘Hi I am from Main
container’ >> /var/log/index.html; sleep 5;done”]
name: main-container
volumeMounts:
– name: var-logs
mountPath: /var/log
– image: nginx
name: sidecar-container
ports:
mountPath: /usr/share/nginx/html
restartPolicy: Never
// Create Pod
kubectl apply -f multi-container.yaml
//Verify
kubectl get pods

QUESTION 45
Create a pod namedkucc8with asingle app container for each of the
following images running inside(there may be between 1 and 4images specified):
nginx + redis + memcached.

QUESTION 46
Update the deployment with the image version 1.16.1 and verify the image and check the rollout history

QUESTION 47
List all the pods sorted by created timestamp

QUESTION 48
Create a snapshot of the etcd instance running at https://127.0.0.1:2379, saving the snapshot to the file path /srv/data/etcd-snapshot.db.
The following TLS certificates/key are supplied for connecting to the server with etcdctl:
CA certificate: /opt/KUCM00302/ca.crt
Client certificate: /opt/KUCM00302/etcd-client.crt
Client key: Topt/KUCM00302/etcd-client.key

QUESTION 49
Scale down the deployment to 1 replica

QUESTION 50
Create a hostPath PersistentVolume named task-pv-volume with storage 10Gi, access modes ReadWriteOnce, storageClassName manual, and volume at /mnt/data and verify

vim task-pv-volume.yaml
apiVersion: v1
kind: PersistentVolume
metadata:
name: task-pv-volume
labels:
type: local
spec:
storageClassName: “”
capacity:
storage: 5Gi
accessModes:
– ReadWriteOnce
hostPath:
path: “/mnt/data”
kubectl apply -f task-pv-volume.yaml
//Verify
kubectl get pv
NAME CAPACITY ACCESS
MODES RECLAIM POLICY STATUS CLAIM
STORAGECLASS REASON AGE
task-pv-volume 5Gi RWO
Retain Available
3s

vim task-pv-volume.yaml
apiVersion: v1
kind: PersistentVolume
metadata:
name: task-pv-volume
labels:
type: local
spec:
storageClassName: “”
capacity:
storage: 5Gi
accessModes:
– ReadWriteOnce
hostPath:
path: “/mnt/data”
kubectl apply -f task-pv-volume.yaml
//Verify
kubectl get pv
NAME CAPACITY ACCESS
MODES RECLAIM POLICY STATUS CLAIM
STORAGECLASS REASON AGE
task-pv-volume 4Gi RWO
Retain Available
8s

QUESTION 51
For this item, you will have to ssh to the nodes ik8s-master-0 and ik8s-node-0 and complete all tasks on these nodes. Ensure that you return to the base node (hostname: node-1) when you have completed this item.
Context
As an administrator of a small development team, you have been asked to set up a Kubernetes cluster to test the viability of a new application.
Task
You must use kubeadm to perform this task. Any kubeadm invocations will require the use of the
–ignore-preflight-errors=all option.
* Configure the node ik8s-master-O as a master node. .
* Join the node ik8s-node-o to the cluster.

QUESTION 52
Perform the following tasks:
* Add an init container tohungry-bear(which has beendefined in spec file
/opt/KUCC00108/pod-spec-KUCC00108.yaml)
* The init container should createan empty file named/workdir/calm.txt
* If/workdir/calm.txtis notdetected, the pod should exit
* Once the spec file has beenupdatedwith the init containerdefinition, the pod should becreated

QUESTION 53
Create a redis pod and mount “redis-config” as “redis.conf”
inside redis container, name the config volume as “redis-volume”
redis-config path – /opt/redis-config

1

2

Pending

QUESTION 54
Create and configure the servicefront-end-serviceso it’s accessiblethroughNodePortand routes to theexisting pod namedfront-end.

QUESTION 55
Given a partially-functioning Kubernetes cluster, identify symptoms of failure on the cluster.
Determine the node, the failing service, and take actions to bring up the failed service and restore the health of the cluster. Ensure that any changes are made permanently.
You can ssh to the relevant I nodes (bk8s-master-0 or bk8s-node-0) using:
[student@node-1] $ ssh <nodename>
You can assume elevated privileges on any node in the cluster with the following command:
[student@nodename] $ | sudo -i

QUESTION 56
Score: 5%

Task
Monitor the logs of pod bar and:
* Extract log lines corresponding to error
* Write them to /opt/KUTR00101/bar

QUESTION 57
Create a pod that having 3 containers in it? (Multi-Container)

QUESTION 58
Create a Kubernetes secret as follows:
Name: super-secret
password: bob
Create a pod named pod-secrets-via-file, using the redis Image, which mounts a secret named super-secret at /secrets.
Create a second pod named pod-secrets-via-env, using the redis Image, which exports password as CONFIDENTIAL

QUESTION 59
Create and configure the service front-end-service so it’s accessible through NodePort and routes to the existing pod named front-end.