Exam AZ-400 All Questions

View all questions & answers for the AZ-400 exam

Exam AZ-400 topic 4 question 36 discussion

Actual exam question from Microsoft's AZ-400

Question #: 36
Topic #: 4

DRAG DROP -
You have an Azure Kubernetes Service (AKS) implementation that is RBAC-enabled.
You plan to use Azure Container Instances as a hosted development environment to run containers in the AKS implementation.
You need to configure Azure Container Instances as a hosted environment for running the containers in AKS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Step 1: Create a YAML file.
If your AKS cluster is RBAC-enabled, you must create a service account and role binding for use with Tiller. To create a service account and role binding, create a file named rbac-virtual-kubelet.yaml
Step 2: Run kubectl apply.
Apply the service account and binding with kubectl apply and specify your rbac-virtual-kubelet.yaml file.
Step 3: Run helm init.
Configure Helm to use the tiller service account:
helm init --service-account tiller
You can now continue to installing the Virtual Kubelet into your AKS cluster.
Reference:
https://docs.microsoft.com/en-us/azure/aks/virtual-kubelet

by Vkv at March 10, 2020, 3:13 p.m.

Comments

Submit Cancel

TosO

Highly Voted 5 years, 4 months ago

With helm v3: 1. kubectl apply - to create the service principle for Tiller 2. helm init - to deploy Tiller in the kubernetes cluster 3. az aks install-connector - to install the connector

upvoted 48 times

Christian_garcia_martin

7 months ago

Run az aks install-connector is a command that install ACI, with ACI you do not need Run az role assignment create so for me the answer is : 1 Run az aks install-connector 2 Create a YAML file 3 Run kubectl apply

upvoted 2 times

...

TosO

5 years, 4 months ago

this is for v2, sorry

upvoted 5 times

nasa1515

4 years, 7 months ago

Is the answer correct?

upvoted 2 times

Saterial

4 years, 3 months ago

you need to take into context that this question was probably developed when Helm v2 was the deployment tool

upvoted 3 times

...

djhyfdgjk

1 year, 6 months ago

Where does the question ask anything about Helm ??

upvoted 2 times

...

thetrapt

Highly Voted 5 years, 4 months ago

Answer is right. According to documentation, you create a YAML that defines service account and binding, then you apply that configuration and finally "deploy a basic Tiller into an AKS cluster". https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm

upvoted 24 times

hubeau

5 years, 4 months ago

You're right: 1. Create a file named helm-rbac.yaml 2. kubectl apply -f helm-rbac.yaml 3. helm init --history-max 200 --service-account tiller... 4. $ helm install stable/nginx-ingress --set controlle....

upvoted 16 times

...

Christian_garcia_martin

Most Recent 7 months ago

upvoted 3 times

...

UrbanRellik

10 months, 2 weeks ago

Update: 10/2024 1. Az role assignment create 2. Create a yaml file (role-dev-namespace.yaml) 3. Run kubectl apply https://learn.microsoft.com/en-us/azure/aks/azure-ad-rbac

upvoted 6 times

...

FeriAZ

1 year, 5 months ago

Create a YAML file (rbac-virtual-kubelet.yaml): Define a service account for the virtual kubelet. Specify the necessary role bindings to grant the service account required permissions within the AKS cluster. Run kubectl apply: Apply the rbac-virtual-kubelet.yaml file using this command. This creates the service account and assigns the role bindings, enabling the virtual kubelet to interact with the cluster resources. Run helm init --service-account tiller: This step becomes relevant only when using Helm with the virtual kubelet.

upvoted 2 times

...

varinder82

1 year, 8 months ago

Final Answer after going through all the comments 1) Run az role assignment create 2) Create a YAML file 3) Run kubectl apply There is no az aks install-connector command helm has nothing to do here

upvoted 13 times

Freyr

7 months ago

I think, the correct sequence is: (1) Run az role assignment create This is necessary first because the AKS cluster is RBAC-enabled Sets up the required permissions for ACI integration (2) Create a YAML file Creates the configuration file needed to define the ACI integration Specifies the virtual node configuration and container deployment settings (3) Run kubectl apply Applies the YAML configuration to the cluster Implements the ACI integration settings The question specifically mentions RBAC is enabled, making role assignment a necessary first step While older solutions used Helm/Tiller or the az aks install-connector command, these approaches are outdated Modern AKS-ACI integration uses virtual nodes, which requires RBAC setup, YAML configuration, and kubectl deployment The az aks install-connector command has been replaced by virtual nodes functionality Note that while there are comments mentioning Helm and older connector methods, these refer to deprecated approaches that are no longer the recommended way to integrate ACI with AKS.

upvoted 2 times

...

yana_b

2 years ago

1. run az role assignment create 2. create a yaml file 3. run kubectl -apply -f (i.e. file name to be applied) -> The kubectl apply command is a declarative way of deploying resources on a cluster using YAML manifest files https://docs.microsoft.com/en-us/azure/aks/azure-ad-rbac https://karthi-net.medium.com/kubernetes-tutorial-create-deployments-using-yaml-file-90ea901a2f74 https://www.geeksforgeeks.org/kubernetes-kubectl-create-and-kubectl-apply/

upvoted 9 times

...

renzoku

2 years, 1 month ago

I think 1.az aks install-connector Install the Azure Container Instances Connector on your AKS cluster to enables the deployment of containers on Azure Container Instances. 2. Create YAML file Called manifest file, describes the desired state of the pods or containers you want to deploy on Azure Container Instances within your AKS cluster. 3. kubectl apply Used to deploy Kubernetes resources in AKS using an specific manifest file(YML or JSON) e.g. kubectl apply -f deployment.yaml

upvoted 6 times

...

adityagoel26

2 years, 4 months ago

To configure Azure Container Instances as a hosted environment for running containers in AKS, you should perform the following actions in sequence: Run az aks install-connector: This installs the Azure Monitor for containers connector on the AKS cluster, which enables monitoring of container logs, metrics, and performance data from Azure Container Instances. Create a YAML file: This file describes the container deployment and specifies the connection details for the Azure Monitor for containers connector. Run kubectl apply: This deploys the container to AKS using the YAML file created in step 2. Therefore, the correct sequence of actions is as follows: B. Run az aks install-connector C. Create a YAML file E. Run kubectl apply Note: Running helm init and az role assignment create are not necessary for configuring Azure Container Instances as a hosted environment for running containers in AKS.

upvoted 4 times

kay000001

2 years, 2 months ago

This is from GPT. Can you provide a link instead?

upvoted 3 times

...

Yatoom

2 years, 9 months ago

Tiller is no longer used in Helm, so this is probably an outdated question. However, if you want to know more about the integration between AKS and ACI, I suggest you to read this: https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/scale-using-aks-with-aci

upvoted 4 times

kmaneith

2 years, 9 months ago

read this https://learn.microsoft.com/en-us/azure/aks/virtual-nodes-cli

upvoted 1 times

...

syu31svc

3 years ago

I dont see what has helm got to do with this and there is no az aks install-connector command https://docs.microsoft.com/en-us/azure/aks/azure-ad-rbac 1) Run az role assignment create 2) Create a YAML file 3) Run kubectl apply

upvoted 19 times

Pamban

2 years, 2 months ago

I think this is the best explanation and the link

upvoted 1 times

...

Govcomm

3 years ago

It is RBAC enabled. So "az role assignment" Create a YAML file Kublctl apply to apply the YAML file

upvoted 6 times

...

Dileep75

3 years, 1 month ago

the answer is Run az role assignment create yaml file kubectl apply pls read the link provided in examtopic answer

upvoted 3 times

...

Eltooth

3 years, 2 months ago

Steps from MS Docs: https://docs.microsoft.com/en-us/azure/aks/azure-ad-rbac 1. az ad group create 2. az role assignment create command. 3. (az ad user create & az ad group member add) - optional 4. kubectl create 5. kubectl apply -f *.yaml So answer is: 1. Run az role assignment create 2. Create YAML file 3. Run kubectl apply

upvoted 16 times

...

prashantjoge

3 years, 4 months ago

Helm init Role assignment install-connector https://www.danielstechblog.io/deploying-kubernetes-aci-connector-aks-managed-kubernetes-azure/

upvoted 1 times

prashantjoge

3 years, 4 months ago

Sorry this is an old article, the connector works with helm2 . Use enable-addons instead https://stackoverflow.com/questions/59968396/az-aks-install-connector-fails-name-uknow-parameter

upvoted 1 times

...

mountainking

3 years, 7 months ago

there two concepts for integrating with ACI in aks, virtual nodes vs virtual kubelet for virtual kubelet - az aks install-connect for setting up virtual nodes - I believe this what the question asks about 1) create service principle, role assignment 2) edit yaml 3) kubectl apply -f yaml it's nothing to do with helm

upvoted 12 times

...

ixl2pass

3 years, 7 months ago

The question is about AKS with RBAC. So the correct answer is a) az role assignment create b) YAML file c) kubectl apply Reference: https://docs.microsoft.com/en-us/azure/aks/azure-ad-rbac

upvoted 13 times

rdemontis

3 years, 5 months ago

I think you are right. because we have to interact with a RBAC enabled AKS to use commands against AKS we need to create a role assgnoment https://docs.microsoft.com/en-us/azure/aks/azure-ad-rbac now to use ACI as host environment we need to use Virtual Nodes. So we can create the yaml file with the ACI container deployment and apply it. https://docs.microsoft.com/en-us/azure/aks/virtual-nodes-portal

upvoted 3 times

...

prashantjoge

3 years, 4 months ago

This is the correct answer. has nothing to do with helm

upvoted 2 times

...

Load full discussion...