Cluster Architecture, Installation, and Configuration Flashcards

Which kubeadm command is used to generate a new bootstrap token for joining worker nodes?

Answer: kubeadm token create

kubeadm token create generates a new bootstrap token that can be used with kubeadm join to add nodes to the cluster.

What is the default port that the kube-apiserver listens on for HTTPS traffic?

Answer: 6443

The kube-apiserver listens on port 6443 by default for secure HTTPS client connections.

Which component is responsible for persisting Kubernetes cluster state?

Answer: etcd

etcd is the distributed key-value store that persists all Kubernetes cluster state and configuration data.

In a kubeadm-bootstrapped cluster, where are the static Pod manifests for control plane components located?

Answer: /etc/kubernetes/manifests

kubeadm places control plane static Pod manifests in /etc/kubernetes/manifests, which the kubelet watches to start those Pods.

What flag in kubeadm init allows you to specify the pod network CIDR?

Answer: --pod-network-cidr

The --pod-network-cidr flag tells kubeadm the IP address range to allocate for pod networking, which is then passed to the CNI plugin.

Which Kubernetes object defines the permissions granted by a ClusterRole to a set of users across all namespaces?

Answer: ClusterRoleBinding

A ClusterRoleBinding grants the permissions defined in a ClusterRole to subjects cluster-wide, not limited to a single namespace.

What is the purpose of the --authorization-mode flag on the kube-apiserver?

Answer: Defines which authorization plugins are active

The --authorization-mode flag enables one or more authorization plugins (e.g., RBAC, Node, Webhook) that the API server uses to authorize requests.