Review this admission control policy:
match[{"msg": msg}] {
input.request.operation == "CREATE"
input.request.kind.kind == "Pod"
input.request.resource.resource == "pods"
input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged"
}
Which response to this policy will be achieved when the effect is set to `block`?
The policy will block the creation of a privileged pod. The `block` effect in an admission control policy indicates that the creation of any resource that matches the conditions specified in the policy will be prevented. Since the policy specifically checks for the creation of a pod with a privileged security context, setting the effect to `block` means that any attempt to create such a privileged pod will be blocked.
The question is mentioning about if the effect is set to "block" Which response to this policy will be achieved when the effect is set to `block`? Prevent will only terminates related process in container, otherwise block will block the resource creation. Answer is D
D for exclusion.
D is correct
The question is mentioning about if the effect is set to "block" Which response to this policy will be achieved when the effect is set to `block`? Prevent will only terminates related process in container, otherwise block will block the resource creation. Answer is D