cks-final/submissions/CKS-011-completed.md

CKS-011 — Verify and install a Kubernetes binary

Domain: 1.5 Platform binary verification
Time: 4 minutes · Score: Section B only

Supplied files

/opt/release/kubectl
/opt/release/kubectl.sha256

kubectl.sha256 contains the official raw SHA-256 value but no filename.

Task

Verify the downloaded binary against the checksum. Install it as /usr/local/bin/kubectl with owner root:root and mode 0755 only if verification succeeds. Then show its client version and installed ownership/mode.

Section B — scored answer

echo "$(cat /opt/release/kubectl.sha256)  /opt/release/kubectl" | sha256sum --check && cp /opt/release/kubectl /usr/local/bin/ || echo "Verification failed"
chown root:root /usr/local/bin/kubectl
chmod 0755 /usr/local/bin/kubectl
stat /usr/local/bin/kubectl
/usr/local/bin/kubectl version

Say Grade CKS-011 when saved.