Security - API Versions

Question 1

What does it mean when a api resource is at v1?

Answer 1

It is a generally available/ stable version

Question 2

What kind of API Versions exist?

Answer 2

• alpha
• beta
• GA/stable

Question 3

Which api Version is how available?

Answer 3

• alpha -> by default not enabled
• beta -> enabled by default
• GA -> by default enabled

Question 4

What does it mean when an api group has multiple versions available?

Answer 4

• one apigroup can support multiple versions
• all versions can be used to create objects
• only one version can be a preferred version
• the preferred version is used in imperativ commands

Question 5

How can you see the preferred version?

Answer 5

• when you list the api-resource is it shown

Question 6

What is the first rule of API deprecation policy?

Answer 6

• API elements may only be removed by incrementing the version of the API group

Question 7

What is the second rule of API deprecation policy?

Answer 7

API objects must be able to round-trip between API versions in a given release without information loss, with the exception of whole REST resources that do not exist in some versions

Question 8

How can you convert older yaml files to newer versions?

Answer 8

kubectl convert -f < old-file> –output-version < new-api>

Question 9

How can you identify the preferred version?

Answer 9

1. kubectl proxy 8001& (& runs in background)
2. curl localhost:8001/apis/authorization.k8s.io

Question 10

How can you copy a file in Linux?

Answer 10

cp oldfile nextfile

Question 11

How do you configure a kube-apiserver to enable a certain version of an api-resources?

Answer 11

In kube-apiserver under /etc/kubernetes/manifest/.yaml
add
‘–runtime-config=resourceName like rbac.authorization.k8s.io/v1alpha’

Question 12

How can you get an explanation of an object? / identify the api group its part of?

Answer 12

k explain job