KCNA practice question 2 of 25

Kubernetes Secrets are specifically intended to hold confidential dat a. Which API object should be used to hold non-confidential data?

Full set: 240 questions
Answer options
A: CNI
B: CSI
C: ConfigMaps Correct answer
D: RBAC
Correct Answer:
C. ConfigMaps
Explanation

In Kubernetes, a ConfigMap is the designated API object for storing non-confidential configuration data as key-value pairs. This decouples configuration artifacts from container image content, making applications more portable. Pods can consume ConfigMaps as environment variables, command-line arguments, or as configuration files in a volume. This is in direct contrast to Secrets, which are designed specifically for sensitive data like passwords, tokens, or keys, and are stored with additional security measures like base64 encoding.

Why Incorrect

A. CNI (Container Network Interface) is a specification for configuring network interfaces for Linux containers, not for storing application data.
B. CSI (Container Storage Interface) is a standard for exposing block and file storage systems to containerized workloads, not for configuration data.
D. RBAC (Role-Based Access Control) is an authorization mechanism used to regulate access to Kubernetes API resources, not to store data.

References

1. Kubernetes Authors. (n.d.). ConfigMaps. Kubernetes Documentation. Retrieved from https://kubernetes.io/docs/concepts/configuration/configmap/. (See the "Overview" and "Motivation" sections).

2. Kubernetes Authors. (n.d.). Secrets. Kubernetes Documentation. Retrieved from https://kubernetes.io/docs/concepts/configuration/secret/. (See the "Overview" section, which contrasts Secrets with ConfigMaps).

Scroll to Top