Certified Kubernetes Administrator (CKA) Study Guide - In-Depth Guidance and Practice - Chapter 2 - Cluster Architecture, Installation, and Configuration

Sep 4, 2026

Upload by Xiajie

Chapter 2 of the Certified Kubernetes Administrator (CKA) Study Guide focuses on the core duties and security foundations expected of a Kubernetes administrator. It explains architectural components of a cluster, installing and maintaining a cluster using kubeadm, and upgrading cluster versions. The chapter also covers setting up role-based access control (RBAC), including mapping permissions to API resources, understanding RBAC concepts, and managing access across namespaces and clusters. It concludes with practical procedures for backing up and restoring etcd.

LanguageEnglish

CategoryExam

FormatPDF

Pages40

Reading Time1 h 41 min

AccessFree to download

Cluster Architecture, Installation, and Configuration

Role-Based Access Control

Creating a Subject

Listing ServiceAccounts

Rendering ServiceAccount Details

Assigning a ServiceAccount to a Pod

Understanding RBAC API Primitives

Creating Roles

Creating RoleBindings

Seeing the RBAC Rules in Effect

Namespace-wide and Cluster-wide RBAC

Aggregating RBAC Rules

Creating and Managing a Kubernetes Cluster

Installing a Cluster

Managing a Highly Available Cluster

Upgrading a Cluster Version

Backing Up and Restoring etcd

Summary

Exam Essentials

Sample Exercises

Certified Kubernetes Administrator (CKA) Study Guide Benjamin Muschko In-Depth Guidance and Practice Free Chapter Certified Kubernetes Administrator (CKA) Study Guide In-Depth Guidance and Practice This excerpt contains Chapter 2. The complete book is available on the O’Reilly Online Learning Platform and through other retailers. Benjamin Muschko Beijing Boston Farnham Sebastopol Tokyo Certified Kubernetes Administrator (CKA) Study Guide by Benjamin Muschko Copyright © 2022 Automated Ascent, LLC. All rights reserved. Printed in the United States of America. Published by O’Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O’Reilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles ([http://oreilly.com](http://oreilly.com). For more information, contact our corporate/institutional)[). For more information, contact our corporate/institutional](http://oreilly.com). For more information, contact our corporate/institutional) sales department: [800-998-9938 or corporate@oreilly.com](800-998-9938 or corporate@oreilly.com). Acquisitions Editor: John Devins Development Editor: Michele Cronin Production Editor: Beth Kelly Copyeditor: Kim Wimpsett Proofreader: Amnet Systems LLC Indexer: Potomac Indexing, LLC Interior Designer: David Futato Cover Designer: Karen Montgomery Illustrator: Kate Dullea June 2022: First Edition Revision History for the First Edition 2022-06-09: First Release See [http://oreilly.com/catalog/errata.csp?isbn=9781098107222](http://oreilly.com/catalog/errata.csp?isbn=9781098107222 for)[ for](http://oreilly.com/catalog/errata.csp?isbn=9781098107222 for) release details. The O’Reilly logo is a registered trademark of O’Reilly Media, Inc. Certified Kubernetes Administrator (CKA) Study Guide, the cover image, and related trade dress are trademarks of O’Reilly Media, Inc. The views expressed in this work are those of the author, and do not represent the publisher’s views. While the publisher and the author have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the author disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work. Use of the information and instructions contained in this work is at your own risk. If any code samples or other technology this work contains or describes is subject to opensource licenses or the intellectual property rights of others, it is your responsibility to ensure that your use thereof complies with such licenses and/or rights. 978-1-098-10722-2 [LSI] Table of Contents 2. Cluster Architecture, Installation, and Configuration.............................. 1 Role-Based Access Control 2 RBAC High-Level Overview 2 Creating a Subject 3 Listing ServiceAccounts 5 Rendering ServiceAccount Details 6 Assigning a ServiceAccount to a Pod 6 Understanding RBAC API Primitives 7 Default User-Facing Roles 7 Creating Roles 8 Listing Roles 9 Rendering Role Details 9 Creating RoleBindings 10 Listing RoleBindings 10 Rendering RoleBinding Details 11 Seeing the RBAC Rules in Effect 11 Namespace-wide and Cluster-wide RBAC 12 Aggregating RBAC Rules 12 Creating and Managing a Kubernetes Cluster 14 Installing a Cluster 15 Managing a Highly Available Cluster 19 Upgrading a Cluster Version 20 Backing Up and Restoring etcd 26 Backing Up etcd 27 Restoring etcd 29 Summary 30 Exam Essentials 31 Sample Exercises 32 Cluster Architecture, Installation, and Configuration According to the name of the chapter, the first section of the curriculum refers to typical tasks you’d expect of a Kubernetes administrator. Those tasks include under‐ standing the architectural components of a Kubernetes cluster, setting up a cluster from

FAQs

What responsibilities does this chapter assign to a Kubernetes administrator?

It focuses on understanding cluster architecture, installing a cluster from scratch, and maintaining the cluster over time.

Why is role-based access control (RBAC) important in Kubernetes?

RBAC limits which users, groups, and processes can access manage Kubernetes API resources, reducing risk compared with giving admin access to everyone.

Which tools and procedures are covered for managing cluster and datastore reliability?

The chapter covers installing and upgrading clusters with kubeadm and backing up and restoring etcd using etcdctl, including procedures for a highly available cluster setup.

Sep 4, 2026

Upload by Xiajie