EX280 Red Hat Certified Specialist in OpenShift Administration exam Question and Answers

Solution:

$ oc project lerna

$ oc get pods

$ oc get all | grep deployment

$ oc autoscale deployment.apps/hydra --max=9 --min=6 --cpu-percent=60

$ oc get hpa

$ oc set resources deployment.apps/hydra --limits=cpu=100m -- requests=cpu=25m

$ oc describe deployment.apps/hydra | grep Limits -A3

Solution:

Switch to the quart project:

oc project quart

Create the secure route:

oc create route edge htquart \

--service=httpd \

--hostname=quart.apps.ocp4.example.com \

--cert=./req.crt \

--key=./req.key

Verify:

oc get route htquart

oc describe route htquart

Test resolution and access if DNS is available:

curl -k https://quart.apps.ocp4.example.com

This task checks route exposure, TLS termination, and secure ingress administration.

Solution:

$ oc project apples

$ oc create sa ex280sa

$ oc adm policy add-scc-to-user anyuid -z ex280sa

Solution:

$ vim limit.yaml

# Edit the yaml file like below mentioned

apiVersion: "v1" kind: "LimitRange" metadata:

name: "resource-limits" spec:

limits:

- type: "Pod"

max:

cpu: "500m" memory: "300Mi"

min:

cpu: "10m" memory: "5Mi"

- type: "Container" max:

cpu: "500m" memory: "300Mi"

min:

cpu: "10m" memory: "5Mi"

defaultRequest: cpu: "100m" memory: "100Mi"

$ oc create -f limit.yaml --save-config -n bluebook

$ oc describe limitranges -n bluebook

Solution:

Switch to the target project:

oc project darpa

Create a YAML file, for example limitrange.yaml:

apiVersion: v1

kind: LimitRange

metadata:

name: darpa-limits

namespace: darpa

spec:

limits:

- type: Pod

max:

cpu: 300m

memory: 300Mi

min:

cpu: 5m

memory: 5Mi

- type: Container

max:

cpu: 300m

memory: 300Mi

min:

cpu: 5m

memory: 5Mi

default:

cpu: 100m

memory: 100Mi

Apply it:

oc apply -f limitrange.yaml

Verify:

oc get limitrange -n darpa

oc describe limitrange darpa-limits -n darpa

This task validates namespace-level defaulting and constraint policies for pod scheduling and resource consumption.

Solution:

$ oc new-project apollo

$ oc new-project manhattan

$ oc new-project gemini

$ oc new-project bluebook

$ oc new-project titan

$ oc adm policy add-role-to-user admin armstrong -n apollo

$ oc adm policy add-role-to-user admin armstrong -n gemini

$ oc adm policy add-role-to-user view wozniak -n titan