20+ certificate files on a kubeadm cluster. Here's the map.
You'll learn to
map server vs client certs on the Cluster Map
Recap
- 1CA, server and client certificates
- 2The API server is a client of etcd and the kubelets too
- 3Protect /etc/kubernetes/pki/ca.key above all
Check yourself
The API server connects to etcd. Which certificate does it show?
6.5
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.