Udemy CKA 강의 정리 149: Solution View Certification Details

해당 내용은 Udemy의 Certified Kubernetes Administrator (CKA) with Practice Tests 강의를 공부한 내용입니다. 내용을 그대로 번역하기보다는, 제가 이해하기 쉬운 대로 수정한 부분들이 있습니다.

⚠️ 영어 독해가 많이 부족합니다. 틀린 내용이 있으면 알려주시면 감사하겠습니다.

---

Q1. Identify the certificate file used for the kube-api server

답: /etc/kubernetes/pki/apiserver.crt

 

Q2. Identify the Certificate file used to authenticate kube-apiserver as a client to ETCD Server

답: /etc/kubernetes/pki/apiserver-etcd-client.crt

Q3. Identify the key used to authenticate kubeapi-server to the kubelet server

답: /etc/kubernetes/pki/apiserver-kubelet-client.key

Q4. Identify the ETCD Server Certificate used to host ETCD server

답: /etc/kubernetes/pki/etcd/server.crt

Q5. Identify the ETCD Server CA Root Certificate used to serve ETCD Server

답: /etc/kubernetes/pki/etcd/ca.crt

Q6. What is the Common Name (CN) configured on the Kube API Server Certificate?

cat /etc/kubernetes/manifests/kube-apiserver.yaml

답: kube-apiserver

Q7. What is the name of the CA who issued the Kube API Server Certificate?

답: Kubernetes

Q8. Which of the below alternate names is not configured on the Kube API Server Certificate?

답: kube-master

Q9. What is the Common Name (CN) configured on the ETCD Server certificate?

cat /etc/kubernetes/manifests/etcd.yaml

답: controlplane

Q10. How long, from the issued date, is the Kube-API Server Certificate valid for?

답: 1 Year

Q11. How long, from the issued date, is the Root CA Certificate valid for?

답: 10 years

Q12. Kubectl suddenly stops responding to your commands. Check it out! Someone recently modified the /etc/kubernetes/manifests/etcd.yaml file

(다시 보기)

 

Q13. The kube-api server stopped again! Check it out. Inspect the kube-api server logs and identify the root cause and fix the issue.

(다시보기)