Study. uk . com
  1. Home
  2. All questions
  3. Question 549

CKA study material · question 549 of 1000

A new operator asks for a copy of admin.conf from a kubeadm cluster so they can run kubectl. What does that file grant?

  1. Read-only access across all namespaces
  2. Membership of kubeadm:cluster-admins, which is bound to the cluster-admin ClusterRole
  3. Access limited to the kube-system namespace
  4. The system:masters identity that bypasses authorization entirely
Show the answer

Answer: B. Membership of kubeadm:cluster-admins, which is bound to the cluster-admin ClusterRole

admin.conf carries a certificate in the kubeadm:cluster-admins group, bound to cluster-admin. The system:masters break-glass identity belongs to super-admin.conf, a different file.

Source: Creating a cluster with kubeadm (Kubernetes) — Initializing your control-plane node

Challenge yourself on this topic → Study as cards