ITGSS Certified DevOps Engineer Practice Test

Which operations should be reserved for privileged system-level components in a Kubernetes cluster?

1. Read and write

2. Watch and list

3. Create and delete

4. Patch and update

The correct answer is: Watch and list

In a Kubernetes cluster, operations that should be reserved for privileged system-level components are those that have significant implications for the state and security of the cluster. Watching and listing resources falls into this category because these operations allow system components to monitor the state of resources without altering them. Watching involves setting up a stream of updates regarding resource changes, which is crucial for system components managing the cluster. Listing offers an overview of resource states and configurations without modifying them, enabling components to react or make decisions based on the current cluster state. By reserving these operations for privileged components, it ensures that only trusted elements in the system can efficiently observe and respond to events in the cluster without the risk of unauthorized modifications, thus maintaining cluster integrity. The other operations listed have more direct impacts on the resources themselves. Reading and writing can include modifications, while creating and deleting directly alter the state of resources. Patch and update manipulations are also critical as they can change system behavior or resource configurations. Thus, these operations are typically granted to a broader set of users or components, as they need to actively manage the workload in a Kubernetes environment rather than just observe.