CKA Credential Overview 5

Question 1

What is the function of bootstrap tokens in Kubernetes?

Accepted Answer

They are used to authenticate nodes during the cluster join process

Answer

Bootstrap tokens are short-lived credentials used by new nodes to authenticate to the API server during the kubeadm join process.

Question 2

Where are bootstrap token Secrets stored in a Kubernetes cluster?

Accepted Answer

In the kube-system namespace

Answer

Bootstrap token Secrets are stored in the kube-system namespace with the naming pattern bootstrap-token-<token-id>.

Question 3

Which field in the Kubernetes API server configuration enables the Node Authorizer for kubelet credentials?

Accepted Answer

--authorization-mode=Node

Answer

Adding Node to --authorization-mode enables the Node authorizer, which grants kubelets permission to access only the resources related to their own node.

Question 4

What credential does a kubelet use to authenticate to the Kubernetes API server?

Accepted Answer

An X.509 client certificate with CN=system:node:<nodeName>

Answer

Kubelets authenticate using an X.509 client certificate where the CN is system:node:<nodeName> and the Organization is system:nodes.

Question 5

Which kubectl flag merges an additional kubeconfig file with the default ~/.kube/config for a single command?

Accepted Answer

--kubeconfig

Answer

The --kubeconfig flag specifies an alternate or additional kubeconfig file; setting KUBECONFIG env var to a colon-separated list merges multiple files.

(CKA) Certified Kubernetes Associate Practice Test

(CKA) Certified Kubernetes Associate Practice Test

CKA Credential Overview 5