Bird
0
0

You want to integrate ExternalSecret with HashiCorp Vault using Kubernetes authentication. Which two resources must be configured correctly for this integration to work? (Choose two)

hard📝 Application Q9 of 15
Kubernetes - Secrets
You want to integrate ExternalSecret with HashiCorp Vault using Kubernetes authentication. Which two resources must be configured correctly for this integration to work? (Choose two)
ASecretStore or ClusterSecretStore with Vault details
BPodSecurityPolicy allowing Vault access
CServiceAccount with Vault role binding
DIngress resource exposing Vault UI
Step-by-Step Solution
Solution:
  1. Step 1: Identify required SecretStore configuration

    SecretStore or ClusterSecretStore must include Vault connection info and authentication method.
  2. Step 2: Identify Kubernetes auth requirements

    A ServiceAccount with proper Vault role binding is needed for Kubernetes auth to Vault.
  3. Final Answer:

    SecretStore with Vault details and ServiceAccount with Vault role binding -> Option A
  4. Quick Check:

    Vault integration needs SecretStore and ServiceAccount setup [OK]
Quick Trick: Configure SecretStore and ServiceAccount for Vault auth [OK]
Common Mistakes:
  • Confusing PodSecurityPolicy with Vault access
  • Assuming Ingress is needed for Vault integration
  • Missing ServiceAccount role binding

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Kubernetes Quizzes