Linux Foundation CKS Exam - Topic 3 Question 72 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 72
Topic #: 3

[All CKS Questions]

Create a RuntimeClass named gvisor-rc using the prepared runtime handler named runsc.

Create a Pods of image Nginx in the Namespace server to run on the gVisor runtime class

AExplanation:
Install the Runtime Class for gVisor
{ # Step 1: Install a RuntimeClass
cat <<EOF | kubectl apply -f -
apiVersion: node.k8s.io/v1beta1
kind: RuntimeClass
metadata:
name: gvisor
handler: runsc
EOF
}
Create a Pod with the gVisor Runtime Class
{ # Step 2: Create a pod
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Pod
metadata:
name: nginx-gvisor
spec:
runtimeClassName: gvisor
containers:
- name: nginx
image: nginx
EOF
}
Verify that the Pod is running
{ # Step 3: Get the pod
kubectl get pod nginx-gvisor -o wide
}

Show Suggested Answer

Suggested Answer: A

by Valentine at Jan 13, 2025, 06:47 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dana

4 months ago

I thought gVisor was only for specific workloads, not all pods?

upvoted 0 times

...

Roy

4 months ago

Just verified the pod is running, looks good!

upvoted 0 times

...

Marge

4 months ago

Wait, does gVisor really improve security that much?

upvoted 0 times

...

Paris

4 months ago

Totally agree, it's super easy to set up!

upvoted 0 times

...

Ellsworth

4 months ago

Just created the gvisor RuntimeClass with runsc!

upvoted 0 times

...

Jennifer

5 months ago

I’m a bit confused about the namespace part. Do I need to specify it in the Pod definition, or is it assumed to be "server" since that's what the question states?

upvoted 0 times

...

Ceola

5 months ago

This question feels similar to the one we did on setting up a custom runtime. I hope I can recall the steps correctly under pressure.

upvoted 0 times

...

Elsa

5 months ago

I think the handler for gVisor should definitely be "runsc," but I might mix up the indentation in the Pod spec.

upvoted 0 times

...

Kiley

5 months ago

I remember we practiced creating a RuntimeClass, but I'm not entirely sure about the exact syntax for the YAML.

upvoted 0 times

...

Barbra

5 months ago

Alright, let's do this! I'm feeling confident about my ability to handle this type of Kubernetes task. I'll make sure to verify that the Pod is running as expected.

upvoted 0 times

...

Lisha

5 months ago

No problem, I've worked with RuntimeClasses before. I'll just need to double-check the syntax for the YAML manifests, but I think I can knock this out quickly.

upvoted 0 times

...

Maile

5 months ago

This seems like a good opportunity to demonstrate my Kubernetes knowledge. I'll be sure to follow the step-by-step instructions provided in the question to create the RuntimeClass and the Pod.

upvoted 0 times

...

Keshia

5 months ago

Hmm, I'm a bit confused about the RuntimeClass concept. I'll need to make sure I understand how to properly configure it before attempting this question.

upvoted 0 times

...

Dewitt

5 months ago

Okay, this looks straightforward. I'll need to create a RuntimeClass named `gvisor-rc` using the `runsc` runtime handler, and then create a Nginx Pod in the `server` namespace that runs on the `gvisor-rc` RuntimeClass.

upvoted 0 times

...

Yun

10 months ago

The question is well-written, and the explanation is comprehensive. I'm ready to tackle this on the exam. Although, I do wonder if the Nginx pod will be able to do any cool special effects with the gVisor runtime. Maybe it'll make the Nginx logo spin or something.

upvoted 0 times

Nada

9 months ago

I hope the Nginx pod with gVisor runtime will run smoothly.

upvoted 0 times

...

Marsha

9 months ago

I wonder if the gVisor runtime will make a difference in performance.

upvoted 0 times

...

Julio

9 months ago

I'm excited to try this out on my own cluster!

upvoted 0 times

...

Johnetta

10 months ago

Haha, gVisor, sounds like some kind of superhero sidekick. I bet it can stop a bullet with its bare hands! Alright, let's give this a try and see if my Nginx pod can do some fancy moves too.

upvoted 0 times

...

Olen

10 months ago

The steps look clear, but I'm a bit concerned about the gVisor runtime. I haven't worked with it before. I'll need to research more about its capabilities and any potential gotchas.

upvoted 0 times

Ronny

9 months ago

User1: It's always good to do some research before diving in. Let me know if you have any questions!

upvoted 0 times

...

Crista

9 months ago

User2: Thanks for the info, I'll definitely look into it more before proceeding.

upvoted 0 times

...

Shonda

9 months ago

User1: Don't worry, gVisor runtime provides an extra layer of security for your pods.

upvoted 0 times

...

Aliza

11 months ago

This question is straightforward. The explanation provided covers all the necessary steps to create the RuntimeClass and deploy the Nginx pod using the gVisor runtime. I'm confident I can handle this on the exam.

upvoted 0 times