Study. uk . com
  1. Home
  2. All questions
  3. Question 538

CKA study material · question 538 of 1000

By default the API server does not verify a kubelet's serving certificate. Which two operations therefore travel over an unverified connection? Choose two.

  1. Fetching a Pod's logs with kubectl logs
  2. A Pod reading a ConfigMap through the API server
  3. kubectl port-forward to a Pod
  4. The scheduler binding a Pod to a node
Show the answer

Answer: A. Fetching a Pod's logs with kubectl logs
C. kubectl port-forward to a Pod

Log retrieval, attach and port-forward all run over the API server's connection to the kubelet, which by default is not certificate-verified. Object reads and binding go to the API server itself and are secured normally.

Source: Communication between Nodes and the Control Plane (Kubernetes) — Control plane to node › API server to kubelet

Challenge yourself on this topic → Study as cards