[Solved] Given this namespace label: pod-security.kubernetes.io/enforce: baselineWhat will happen if a pod tries to run with privileged containers in this namespace? | Kubernetes

Kubernetes - RBAC and Security

Given this namespace label:

pod-security.kubernetes.io/enforce: baseline

What will happen if a pod tries to run with privileged containers in this namespace?

AThe pod will be allowed to run without restrictions

BThe pod will be denied due to violating the baseline policy

CThe pod will run but with warnings

DThe pod will be automatically converted to restricted mode

Step-by-Step Solution

Solution:

Step 1: Understand baseline enforcement
The baseline policy restricts privileged containers to prevent elevated permissions.
Step 2: Evaluate pod with privileged container
Privileged containers violate baseline rules, so the pod will be denied.
Final Answer:
The pod will be denied due to violating the baseline policy -> Option B
Quick Check:
Privileged pod in baseline namespace = Denied [OK]

Quick Trick: Baseline blocks privileged containers, denying pod creation [OK]

Common Mistakes:

Master "RBAC and Security" in Kubernetes

9 interactive learning modes - each teaches the same concept differently

More Kubernetes Quizzes

Given this namespace label: