Question 430
At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Pods for Deployment dispatch-api in fulfillment must tolerate the lab taint special=dedicated:NoSchedule while leaving placement policy unchanged. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?
Explanation
Correct Answer
A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. This explains the stated condition. The corresponding action is: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"template":{"spec":{"tolerations":[{"key":"special","operator":"Equal","value":"dedicated","effect":"NoSchedule"}]}}}}' after checking existing tolerations. The direct acceptance evidence is: Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling.
Incorrect Answers
This principle describes a separate cause: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The reported condition is governed by: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. The two mechanisms should not be conflated.
Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. That explanation applies to a different technical failure. Here the controlling principle is: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.
The offered statement is true for this other mechanism: Pod templates can reference Secret keys without copying literal secret values into the Deployment spec. It does not explain the facts described here, which follow from: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.