EX280 Red Hat Certified Specialist in OpenShift Administration exam Questions and Answers

Solution:

Switch to the project hosting the cronjob, if needed:

oc project cron-test

Create the service account:

oc create sa jupiter

Grant anyuid:

oc adm policy add-scc-to-user anyuid -z jupiter -n cron-test

Grant cluster-admin:

oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:cron-test:jupiter

Update the cronjob:

oc patch cronjob cron-test -p '{"spec":{"jobTemplate":{"spec":{"template":{"spec":{"serviceAccountName":"jupiter"}}}}}}'

Verify:

oc get cronjob cron-test -o yaml | grep serviceAccountName

Notes:

The uploaded lab uses oc set sa cronjob.batch/cron-test jupiter, which is not the usual command form for CronJobs. Patching the pod template is the reliable method.

This task checks service account and privilege adjustments for scheduled workloads.

Solution:

$ oc adm policy add-cluster-role-to-user cluster-admin jobs

$ oc adm policy remove-cluster-role-from-group self-provisioner

system:authenticated:oauth

$ oc adm policy add-cluster-role-to-user self-provisioner wozniak

$ oc delete secret kubeadmin -n kube-system

Solution:

Scale the deployment:

oc scale deployment httpd --replicas=5

Verify:

oc get deployment httpd

oc get pods -l app=httpd

Confirm the desired, current, and available replica counts match.

This task checks direct workload scaling using the OpenShift CLI.

Solution:

$ oc get all | grep deploy

$ oc set env --from=secret/magic deployment.apps/qed

Solution:

Switch to the project:

oc project qed

Create the service account:

oc create serviceaccount project1-sa -n qed

Grant the SCC:

oc adm policy add-scc-to-user anyuid -z project1-sa -n qed

Verify:

oc get sa project1-sa -n qed

oc adm policy who-can use scc anyuid

Why this matters:

anyuid allows containers to run with arbitrary user IDs when an application requires it.

This is a common administrative task in OpenShift for third-party container images.

This task validates service account creation and SCC assignment.

Solution:

$ oc adm groups new commander

$ oc adm groups new pilot

$ oc adm groups add-users commander armstrong

$ oc adm groups add-users pilot collins

$ oc adm groups add-users pilot aldrin

$ oc adm policy add-role-to-group edit commander -n apollo

$ oc adm policy add-role-to-group view pilot -n apollo