EX280 Red Hat Certified Specialist in OpenShift Administration exam Questions and Answers

Solution:

Generate the default template:

oc adm create-bootstrap-project-template -o yaml > template.yaml

Review and edit template.yaml if required.

Create the template in openshift-config:

oc create -f template.yaml -n openshift-config

Edit the cluster project configuration:

oc edit project.config.openshift.io/cluster

Add or update:

spec:

projectRequestTemplate:

name: project-request

Save and exit.

Create a test project:

oc new-project test123

Verify the template behavior:

oc get project test123 -o yaml

Notes:

The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.config.openshift.io/cluster.

This task checks cluster-wide customization of new-project creation behavior.

Solution:

$ oc adm groups new commander

$ oc adm groups new pilot

$ oc adm groups add-users commander armstrong

$ oc adm groups add-users pilot collins

$ oc adm groups add-users pilot aldrin

$ oc adm policy add-role-to-group edit commander -n apollo

$ oc adm policy add-role-to-group view pilot -n apollo

Solution:

Create the projects:

oc new-project apollo

oc new-project test

oc new-project demo

Grant cluster-admin to bob:

oc adm policy add-cluster-role-to-user cluster-admin bob

Disable normal self-provisioning for authenticated users:

oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth

Allow john to self-provision:

oc adm policy add-cluster-role-to-user self-provisioner john

Give natasha view access in test and apollo:

oc policy add-role-to-user view natasha -n test

oc policy add-role-to-user view natasha -n apollo

Give armstrong admin in apollo:

oc policy add-role-to-user admin armstrong -n apollo

Remove kubeadmin secret:

oc delete secret kubeadmin -n kube-system

Verify permissions:

oc adm policy who-can create projectrequests

oc describe rolebinding.rbac -n apollo

oc describe rolebinding.rbac -n test

This task tests core OpenShift administration around project lifecycle control, cluster-level RBAC, and decommissioning default bootstrap credentials.

Solution:

Create the groups:

oc adm groups new site-users

oc adm groups new guest-users

Add users to groups:

oc adm groups add-users guest-users qwerty

oc adm groups add-users site-users harry susan

Grant edit role on test to site-users:

oc policy add-role-to-group edit site-users -n test

Grant view role on demo to guest-users:

oc policy add-role-to-group view guest-users -n demo

Verify:

oc get groups

oc describe group site-users

oc describe group guest-users

oc get rolebinding -n test

oc get rolebinding -n demo

This task measures practical administration of OpenShift groups and project-scoped RBAC assignments.

Solution:

$ oc project mercury

$ oc get pods

$ oc get all | grep deploy

$ oc describe deployment.apps/atlas | grep -L memory

$ oc set resources deployment.apps/atlas --resources=memory=80Mi

Solution:

Ensure you are in the correct project:

oc project qed

Set the service account on the deployment:

oc set serviceaccount deployment/gitlab-skdjfklj project1-sa

Verify:

oc get deployment gitlab-skdjfklj -o yaml | grep serviceAccount

oc describe deployment gitlab-skdjfklj

If required, restart rollout:

oc rollout restart deployment/gitlab-skdjfklj

This task checks workload identity assignment through service accounts.