Kubernetes CKA sample exam question 34 with answer

Question
A CSR object has been created in the system which you need to check and process it further based on its access request type.
Note: system masters group access is strictly prohibited and should be deleted instantly

Answer
Get CSR details:

kubectl get csr

can be noticed an CSR named agent-abt which it is in the Pending state
Get more details about it:

kubectl get csr agent-abt -o yaml

It has the groups as system:masters
Per requirement - we should deny this certificate and delete this CSR:

kubectl certificate deny agent-abt
kubectl csr delete agent-abt