Q18. Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output

Q19. Install Helm Chart
Task information Details:
Add the Helm repository do280-repo and install the example-app release from the specified chart.

Q20. Autoscale of Pods
Task information Details:
Create an HPA for httpd with min=2 , max=9 , and CPU target 60% .
Set resource requests on the httpd deployment so autoscaling can function properly.

Q21. Create Secret with Name Magic in Math Project
Task information Details:
Create a secret named magic in the math project that stores MYSQL_ROOT_PASSWORD=redhat .

Q22. Create Project Template
Task information Details:
Generate the bootstrap project template, create it in openshift-config , update the cluster project configuration to use the template, and create a new project to validate it.

Q23. Manage Cluster Project and Permission
Task information Details:
Create projects apollo , test , and demo .
Grant bob the cluster-admin role.
Prevent ordinary authenticated users from self-provisioning projects.
Allow john to create projects.
Give natasha view-only access to test and apollo .
Give armstrong admin access to apollo .
Remove the kubeadmin user secret.

Q24. Manage Identity Provider
Task information Details:
Create the following HTPasswd users: bob, qwerty, john, armstrong, natasha, harry, susan .
Create a secret from the HTPasswd file in openshift-config .
Configure cluster OAuth to use the HTPasswd identity provider.
Restart the OAuth pods so the new authentication configuration takes effect.

Q25. Start a Probe in Project Start
Task information Details:
Add a Liveness Probe to the deployment in project start using the Web Console.

Q26. Create Network Policy
Task information Details:
Create a NetworkPolicy named mysql-db-conn that permits ingress to database pods only from pods matching the specified labels in namespaces labeled team=devsecops , on TCP port 3306 .

Q27. Create a PV and PVC
Task information Details:
Create a PersistentVolume named landing-pv with 1Gi , ReadOnlyMany , NFS backend, and Retain reclaim policy.
Create a PersistentVolumeClaim named landing-pvc requesting 1Gi , ReadOnlyMany , and storage class nfs2 .

Q28. Configure limits
Configure your OpenShift cluster to use limits in the bluebook project with the following requirements:
The name of the LimitRange resource is: ex280-limits
The amount of memory consumed by a single pod is between 5Mi and 300Mi The amount of memory consumed by a single container is between 5Mi and
300Mi with a default request value of 100Mi
The amount of CPU consumed by a single pod is between 10m and 500m
The amount of CPU consumed by a single container is between 10m and 500m with a default request value of
100m

Q29. Configure a secure route
Configure the oxcart application in the area51 project with the following requirements:
The application uses a route called oxcart
The application uses a CA signed certificate with the following subject fields:
/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.com The application produces output A utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.
Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.

Q30. Managing Group
Task information Details:
Create the groups site-users and guest-users .
Add qwerty to guest-users .
Add harry and susan to site-users .
Grant edit to site-users on test .
Grant view to guest-users on demo .