Study. uk . com
  1. Home
  2. All questions
  3. Question 408

CKA study material · question 408 of 1000

An x509 error says the certificate is signed by an unknown authority. Where should you look?

  1. At the Pod's service account token
  2. At the node's system clock only
  3. At the certificate inside the kubeconfig file
  4. At the CNI plugin's configuration
Show the answer

Answer: C. At the certificate inside the kubeconfig file

The kubeconfig's certificate is verified first; its base64 content can be decoded and read with openssl.

Source: Troubleshooting kubeadm (Kubernetes) — Unable to connect to the server

Challenge yourself on this topic → Study as cards