SIMULATIONConfigure an identity providerConfigure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secretThe user account armstrong=indionce The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiverThe user account wozniak=glegunge
Answer(s): A
Solution:$ sudo yum install httpd-tools -y$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce$ htpasswd -B -b htpasswd-file collins veraster$ htpasswd -B -b htpasswd-file aldrin roonkere$ htpasswd -B -b htpasswd-file jobs sestiver$ htpasswd -B -b htpasswd-file wozniak glegunge$ oc create secret generic ex280-idp-secret --from-file htpasswd=htpasswd-file -n openshift-config$ oc get oauth/cluster -o yaml> oauth.yaml$ vim oauth.yaml$esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting spec:identityProviders:- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:fileData:name: ex280-idp-secret$ oc replace -f oauth.yaml$ oc login -u armstrong -p indionce$ oc login -u collins -p veraster$ oc login -u aldrin roonkere$ oc login -u jobs sestiver$ oc login -u wozniak -p glegunge#This below part of operation is completely optional and done just for handy login purpose$ alias _kube="oc login -u kubeadmin -p ${kube_pass} ${api_url}"$ alias _armstrong="oc login -u armstrong -p ${armstrong}${api_url}"$ alias _collins="oc login -u collins -p ${collins} ${api_url}"$ alias _aldrin="oc login -u aldrin -p ${aldrin} ${api_url}"$ alias _jobs="oc login -u jobs -p ${jobs} ${api_url}"$ alias _wozniak="oc login -u wozniak -p ${wozniak} ${api_url}"$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;
SIMULATIONConfigure cluster permissionsConfigure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projectsThe user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projectsThe user account kubeadmin is not present
Solution:$ oc adm policy add-cluster-role-to-user cluster-admin jobs$ oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth$ oc adm policy add-cluster-role-to-user self-provisioner wozniak$ oc delete secret kubeadmin -n kube-system
SIMULATIONConfigure project permissionsConfigure your OpenShift cluster to meet the following requirements: The following projects exist:apollo manhattan gemini bluebook titanThe user account armstrong is an administrator for project apollo and project geminiThe user account wozniak can view project titan but not administer or delete it
Solution:$ oc new-project apollo$ oc new-project manhattan$ oc new-project gemini$ oc new-project bluebook$ oc new-project titan$ oc adm policy add-role-to-user admin armstrong -n apollo$ oc adm policy add-role-to-user admin armstrong -n gemini$ oc adm policy add-role-to-user view wozniak -n titan
SIMULATIONConfigure groupsConfigure your OpenShift cluster to meet the following requirements: The user account armstrong is a member of the commander group The user account collins is a member of the pilot groupThe user account aldrin is a member of the pilot groupMembers of the commander group have edit permission in the apollo project Members of the pilot group have view permission in the apollo project
Solution:$ oc adm groups new commander$ oc adm groups new pilot$ oc adm groups add-users commander armstrong$ oc adm groups add-users pilot collins$ oc adm groups add-users pilot aldrin$ oc adm policy add-role-to-group edit commander -n apollo$ oc adm policy add-role-to-group view pilot -n apollo
SIMULATIONConfigure quotasConfigure your OpenShift cluster to use quotas in the manhattan project with the following requirements:The name of the ResourceQuota resource is: ex280-quotaThe amount of memory consumed across all containers may not exceed 1GiThe total amount of CPU usage consumed across all containers may not exceed2 full coresThe maximum number of replication controllers does not exceed 3 The maximum number of pods does not exceed 3The maximum number of services does not exceed 6
Solution:$ oc project manhattan$ oc create quota ex280-quota --hard=memory=1Gi,cpu=2,pods=3,services=6,replicationcontrollers=3$ oc get resourcequota
SIMULATIONConfigure limitsConfigure your OpenShift cluster to use limits in the bluebook project with the following requirements:The name of the LimitRange resource is: ex280-limitsThe amount of memory consumed by a single pod is between 5Mi and 300Mi The amount of memory consumed by a single container is between 5Mi and300Mi with a default request value of 100MiThe amount of CPU consumed by a single pod is between 10m and 500mThe amount of CPU consumed by a single container is between 10m and 500m with a default request value of 100m
Solution:$ vim limit.yaml# Edit the yaml file like below mentioned apiVersion: "v1" kind: "LimitRange" metadata:name: "resource-limits" spec:limits:- type: "Pod"max:cpu: "500m" memory: "300Mi"min:cpu: "10m" memory: "5Mi"- type: "Container" max:cpu: "500m" memory: "300Mi"min:cpu: "10m" memory: "5Mi"defaultRequest: cpu: "100m" memory: "100Mi"$ oc create -f limit.yaml --save-config -n bluebook$ oc describe limitranges -n bluebook
SIMULATIONDeploy an applicationDeploy the application called rocky in the bullwinkle project so that the following conditions are true:The application is reachable at the following address: http://rocky.apps.domainXX.example.comThe application produces output
Solution:$ oc project bullwinkle$ oc get pods$ oc get all | grep deploy$ oc get nodes$ oc describe nodes | grep -i taint$ oc adm taint nodes worker0 key1=value1:NoSchedule-$ oc adm taint nodes worker1 key1=value1:NoSchedule-$ oc describe nodes | grep -i taint$ oc get route$ oc delete route rocky$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com$ oc get route
SIMULATIONScale an application manuallyManually scale the minion application in the gru project to a total of 5 replicas.
Solution:$ oc project gru$ oc get pods$ oc get all | grep deployment$ oc scale --replicas=5 deployment.apps/minion$ oc get pods
Share your comments for RedHat EX280 exam with other users:
i appreciated the mix of multiple-choice and short answer questions. i passed my exam this morning.
great to find this website, thanks
examination questions seem to be relevant.
planning to take psm test
please allow to download
please provide dumps
is the answer to question 15 correct ? i feel like the answer should be b
its getting more technical
i think these questions are what i need.
helpful assessment
i am confused about the answers to the questions. do you know if the answers are correct?
hi, please make the dumps available for my upcoming examination.
good practice
so far it is really informative
hi i want it please please upload it
am preparing for exam ,just nice questions
please upload c_tadm_23 exam
can we get tdvan4 vantage data engineering pdf?
want to clear the exam.
could you please upload the dumps of sap c_sac_2302
asm management configuration is about storage
kool thumb up
just passed the az-500 exam this last friday. most of the questions in this exam dumps are in the exam. i bought the full version and noticed some of the questions which were answered wrong in the free version are all corrected in the full version. this site is good but i wish the had it in an interactive version like a test engine simulator.
i can practice for exam
please i need this exam.
i need the dump
i want it bad, even if cs6 maybe retired, i want to learn cs6
i hate comptia with all my heart with their "choose the best" answer format as an argument could be made on every question. they say "the "comptia way", lmao no this right here boys is the comptia way 100%. take it from someone whos failed this exam twice but can configure an entire complex network that these are the questions that are on the test 100% no questions asked. the pbqs are dead on! nice work
very good materials
thanks for your support.
iam impressed with the quality of these dumps. they questions and answers were easy to understand and the xengine app was very helpful to use.
not bad but you question database from isaca
awesome contents
answer to 134 is casb. while data loss prevention is the goal, in order to implement dlp in cloud applications you need to deploy a casb.