RedHat EX280 Exam Dumps

Solution:

$ sudo yum install httpd-tools -y

$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce

$ htpasswd -B -b htpasswd-file collins veraster

$ htpasswd -B -b htpasswd-file aldrin roonkere

$ htpasswd -B -b htpasswd-file jobs sestiver

$ htpasswd -B -b htpasswd-file wozniak glegunge

$ oc create secret generic ex280-idp-secret --from-file

htpasswd=htpasswd-file -n openshift-config

$ oc get oauth/cluster -o yaml> oauth.yaml

$ vim oauth.yaml

$

esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting

spec:

identityProviders:

- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:

fileData:

name: ex280-idp-secret

$ oc replace -f oauth.yaml

$ oc login -u armstrong -p indionce

$ oc login -u collins -p veraster

$ oc login -u aldrin roonkere

$ oc login -u jobs sestiver

$ oc login -u wozniak -p glegunge

#This below part of operation is completely optional and done just for handy login purpose

$ alias _kube='oc login -u kubeadmin -p ${kube_pass} ${api_url}'

$ alias _armstrong='oc login -u armstrong -p ${armstrong}

${api_url}'

$ alias _collins='oc login -u collins -p ${collins} ${api_url}'

$ alias _aldrin='oc login -u aldrin -p ${aldrin} ${api_url}'

$ alias _jobs='oc login -u jobs -p ${jobs} ${api_url}'

$ alias _wozniak='oc login -u wozniak -p ${wozniak} ${api_url}'

$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;

Solution:

$ oc project manhattan

$ oc create quota ex280-quota -- hard=memory=1Gi,cpu=2,pods=3,services=6,replicationcontrollers=3

$ oc get resourcequota

Solution:

Switch to the project hosting the cronjob, if needed:

oc project cron-test

Create the service account:

oc create sa jupiter

Grant anyuid:

oc adm policy add-scc-to-user anyuid -z jupiter -n cron-test

Grant cluster-admin:

oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:cron-test:jupiter

Update the cronjob:

oc patch cronjob cron-test -p '{'spec':{'jobTemplate':{'spec':{'template':{'spec':{'serviceAccountName':'jupiter'}}}}}}'

Verify:

oc get cronjob cron-test -o yaml | grep serviceAccountName

Notes:

The uploaded lab uses oc set sa cronjob.batch/cron-test jupiter, which is not the usual command form for CronJobs. Patching the pod template is the reliable method.

This task checks service account and privilege adjustments for scheduled workloads.

Solution:

Generate the default template:

oc adm create-bootstrap-project-template -o yaml > template.yaml

Review and edit template.yaml if required.

Create the template in openshift-config:

oc create -f template.yaml -n openshift-config

Edit the cluster project configuration:

oc edit project.config.openshift.io/cluster

Add or update:

spec:

projectRequestTemplate:

name: project-request

Save and exit.

Create a test project:

oc new-project test123

Verify the template behavior:

oc get project test123 -o yaml

Notes:

The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.config.openshift.io/cluster.

This task checks cluster-wide customization of new-project creation behavior.

Solution:

Create the initial HTPasswd file with the first user:

htpasswd -c -B -b /tmp/htpass.txt bob indionce

Add the remaining users:

htpasswd -b /tmp/htpass.txt qwerty catalog

htpasswd -b /tmp/htpass.txt john john123

htpasswd -b /tmp/htpass.txt armstrong natasha123

htpasswd -b /tmp/htpass.txt natasha arthstrong

htpasswd -b /tmp/htpass.txt harry harry123

htpasswd -b /tmp/htpass.txt susan susuan123

Create the secret in openshift-config:

oc create secret generic ex280-secure --from-file=htpasswd=/tmp/htpass.txt -n openshift-config

Edit OAuth and add the HTPasswd identity provider:

oc edit oauth cluster

Use a valid structure like this:

spec:

identityProviders:

- name: ex280-idp-secure

mappingMethod: claim

type: HTPasswd

htpasswd:

fileData:

name: ex280-secure

Save and exit.

Restart OAuth pods:

oc delete pod -n openshift-authentication -l app=oauth-openshift

Verify:

oc get pods -n openshift-authentication

oc get oauth cluster -o yaml

This task validates OpenShift local authentication configuration through HTPasswd and cluster OAuth integration.