8000 d.configuration.md · Issue #375 · dgkanatsios/CKAD-exercises · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

d.configuration.md #375

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
kkaarroollm opened this issue Apr 4, 2025 · 3 comments
Open

d.configuration.md #375

kkaarroollm opened this issue Apr 4, 2025 · 3 comments

Comments

@kkaarroollm
Copy link

Task:

Create an nginx pod that uses 'myuser' as a service account

Task solution:

[...]
kubectl create -f pod.yaml
kubectl describe pod nginx # will see that a new secret called myuser-token-***** has been mounted <- Problem

Problem:

In Kubernetes v1.24 and later, ServiceAccount tokens are no longer created as Secrets by default.
Instead, tokens are generated dynamically by the kubelet and are mounted into the Pod as projected volumes.

Therefore, you will not see any Secret named myuser-token-*, and you won’t find it listed in kubectl get secrets.
@dgkanatsios
Copy link
Owner

thanks @kkaarroollm Is the question out of scope then?

@kkaarroollm
Copy link
Author

@dgkanatsios Not exactly. ServiceAccounts are still required knowledge for the CKAD exam and the task itself remains valid.
However, the assumptions made in the task are outdated because they refer to the old behavior of Kubernetes (before version 1.24).

@kkaarroollm
Copy link
Author

@dgkanatsios Already made the Pull Request #376 with these changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dgkanatsios @kkaarroollm
0