ITGSS Certified DevOps Engineer Practice Test

Which Kubernetes feature is essential to restrict reading and writing access to Secrets?

1. Network Policies

2. Resource Quotas

3. RBAC rules

4. Service Accounts

The correct answer is: RBAC rules

The essential feature in Kubernetes to restrict reading and writing access to Secrets is RBAC rules. Role-Based Access Control (RBAC) provides a method for defining and managing user permissions within a Kubernetes cluster. By using RBAC, cluster administrators can specify which users or service accounts have the ability to perform actions on various objects, including Secrets. In the context of Secrets, RBAC rules allow you to define fine-grained access controls which dictate who can read from or write to Secrets, ensuring that sensitive information is only accessible to authorized users or applications. By creating roles that include permissions for accessing Secrets and binding those roles to specific users or service accounts, you maintain a secure environment where Secrets can be effectively managed. The other options, while important in their own rights, do not specifically address access control for Secrets. Network Policies are used to control the network traffic between pods and services. Resource Quotas manage the amount of resources (like CPU and memory) that can be consumed by a namespace, while Service Accounts define identity for processes that run in a Pod but don’t inherently restrict access to Secrets without the implementation of RBAC.