Configure groups
Configure your OpenShift cluster to meet the following requirements: The user account armstrong is a member of the commander group The user account collins is a member of the pilot group The user account aldrin is a member of the pilot group Members of the commander group have edit permission in the apollo project Members of the pilot group have view permission in the apollo project
正解:
See the solution below in Explanation.
Explanation:
Solution:
$ oc adm groups new commander
$ oc adm groups new pilot
$ oc adm groups add-users commander armstrong
$ oc adm groups add-users pilot collins
$ oc adm groups add-users pilot aldrin
$ oc adm policy add-role-to-group edit commander -n apollo
$ oc adm policy add-role-to-group view pilot -n apollo
質問 2:
Deploy an application
Deploy the application called oranges in the apples project so that the following conditions are true:
The application uses the ex280sa service account
No additional configuration components have been added or removed The application produces output
正解:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project mercury
$ oc get pods
$ oc get all | grep deploy
$ oc describe deployment.apps/atlas | grep -L memory
$ oc set resources deployment.apps/atlas --resources=memory=80Mi
質問 3:
Configure an identity provider
Configure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:
The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secret The user account armstrong=indionce The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiver The user account wozniak=glegunge
正解:
See the solution below in Explanation.
Explanation:
Solution:
$ sudo yum install httpd-tools -y
$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce
$ htpasswd -B -b htpasswd-file collins veraster
$ htpasswd -B -b htpasswd-file aldrin roonkere
$ htpasswd -B -b htpasswd-file jobs sestiver
$ htpasswd -B -b htpasswd-file wozniak glegunge
$ oc create secret generic ex280-idp-secret --from-file
htpasswd=htpasswd-file -n openshift-config
$ oc get oauth/cluster -o yaml > oauth.yaml
$ vim oauth.yaml
$
esc-- > type :set paste -- > enter -- > insert -- > then paste the content for correct indent pasting spec:
identityProviders:
- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:
fileData:
name: ex280-idp-secret
$ oc replace -f oauth.yaml
$ oc login -u armstrong -p indionce
$ oc login -u collins -p veraster
$ oc login -u aldrin roonkere
$ oc login -u jobs sestiver
$ oc login -u wozniak -p glegunge
#This below part of operation is completely optional and done just for handy login purpose
$ alias _kube="oc login -u kubeadmin -p ${kube_pass} ${api_url}"
$ alias _armstrong="oc login -u armstrong -p ${armstrong}
${api_url}"
$ alias _collins="oc login -u collins -p ${collins} ${api_url}"
$ alias _aldrin="oc login -u aldrin -p ${aldrin} ${api_url}"
$ alias _jobs="oc login -u jobs -p ${jobs} ${api_url}"
$ alias _wozniak="oc login -u wozniak -p ${wozniak} ${api_url}"
$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;
質問 4:
Install Helm Chart
Task information Details:
Add the Helm repository do280-repo and install the example-app release from the specified chart.
正解:
See the solution below in Explanation.
Explanation:
Solution:
* Add the repository:
helm
repo add do280-repo http://helm.ocp4.example.com/charts
* Refresh repositories:
helm repo update
* Install the chart:
helm install example-app do280-repo/etherpad
* Verify:
helm list
oc get all
Notes:
* The uploaded lab text appears to spell the chart name incorrectly as ehterpad.
* In practice, use the actual chart name published in the repo. If the lab repo truly contains the typo, follow the repo index result.
This task tests Helm repository management and application deployment.
1102 お客様のコメント





Fukunaga -
Pass4Testさんの問題集は解説が丁寧で理解が助かります。EX280本番試験に無事合格いたしました。