RedHat Updated EX432 Exam Questions and Answers by abdurrahman

Grant the ClusterSet role (admin on production).

Log in as user-a and attempt:

list clusters in production vs development

create policies in a namespace bound to production

Confirm authorization errors when accessing development resources.

(ClusterSet RBAC is explicitly part of cluster set management and access scope.)

Create PolicySet referencing existing policies:

cat < < 'EOF' | oc apply -f -

apiVersion: policy.open-cluster-management.io/v1beta1

kind: PolicySet

metadata:

name: baseline-dev

namespace: team-dev

spec:

policies:

- policy-ensure-audit-namespace

# Add more policies here as you create them

EOF

Verify:

oc get policyset -n team-dev

Why this matters:

PolicySets group policies to apply/track as a unit—common governance practice.

Write a Policy → ConfigurationPolicy enforcing a ConfigMap (name, namespace, data keys).

Bind to placement.

Verify on a managed cluster:

oc get configmap -n < ns >

oc describe configmap -n < ns > < name >

Apply the subscription/application manifest:

oc apply -f application-subscription.yaml

Confirm resources were created:

oc get applications.app.k8s.io -A

oc get subscriptions.apps.open-cluster-management.io -A

oc describe application.app.k8s.io my-app -n < namespace >

Watch placement/propagation (varies by model used in the lab):

oc get placement -A

oc get placementrule -A

Why this matters:

ACM “application” deployment commonly uses Subscription/Placement (legacy model) or newer Placement resources, enabling multi-cluster rollout from Git sources.