QUESTION 17
Configure a secure route
Configure the oxcart application in the area51 project with the following requirements:
The application uses a route called oxcart
The application uses a CA signed certificate with the following subject fields:
/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.com The application produces output A utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.
Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.

QUESTION 18
Start a Probe in Project Start
Task information Details:
Add a Liveness Probe to the deployment in project start using the Web Console.

QUESTION 19
Collect Cluster Information
Task information Details:
Run must-gather and archive the gathered data into a tar file.

QUESTION 20
Manage Identity Provider
Task information Details:
Create the following HTPasswd users: bob, qwerty, john, armstrong, natasha, harry, susan .
Create a secret from the HTPasswd file in openshift-config .
Configure cluster OAuth to use the HTPasswd identity provider.
Restart the OAuth pods so the new authentication configuration takes effect.

QUESTION 21
Manage Cluster Project and Permission
Task information Details:
Create projects apollo , test , and demo .
Grant bob the cluster-admin role.
Prevent ordinary authenticated users from self-provisioning projects.
Allow john to create projects.
Give natasha view-only access to test and apollo .
Give armstrong admin access to apollo .
Remove the kubeadmin user secret.

QUESTION 22
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output

QUESTION 23
Create Secret with Name Magic in Math Project
Task information Details:
Create a secret named magic in the math project that stores MYSQL_ROOT_PASSWORD=redhat .

QUESTION 24
Create Network Policy
Task information Details:
Create a NetworkPolicy named mysql-db-conn that permits ingress to database pods only from pods matching the specified labels in namespaces labeled team=devsecops , on TCP port 3306 .

QUESTION 25
Create a CronJob test-cron
Task information Details:
Create service account jupiter .
Grant anyuid SCC and cluster- admin to it.
Update CronJob cron-test to use that service account.

QUESTION 26
Configure limits
Configure your OpenShift cluster to use limits in the bluebook project with the following requirements:
The name of the LimitRange resource is: ex280-limits
The amount of memory consumed by a single pod is between 5Mi and 300Mi The amount of memory consumed by a single container is between 5Mi and
300Mi with a default request value of 100Mi
The amount of CPU consumed by a single pod is between 10m and 500m
The amount of CPU consumed by a single container is between 10m and 500m with a default request value of
100m

QUESTION 27
Configure a secret
Configure a secret in the math project with the following requirements: The name of the secret is: magic The secret defines a key with name: decoder_ring The secret defines the key with value:
XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=

QUESTION 28
Create a PV and PVC
Task information Details:
Create a PersistentVolume named landing-pv with 1Gi , ReadOnlyMany , NFS backend, and Retain reclaim policy.
Create a PersistentVolumeClaim named landing-pvc requesting 1Gi , ReadOnlyMany , and storage class nfs2 .

QUESTION 29
Scale Application Manually
Task information Details:
Scale the httpd deployment to 5 replicas .