Study. uk . com
  1. Home
  2. All questions
  3. Question 551

CKA study material · question 551 of 1000

A colleague pastes the full kubeadm join command, bootstrap token and all, into a public chat. What is the immediate risk?

  1. Anyone holding the token can add an authenticated node to the cluster
  2. The token grants read access to every Secret in kube-system
  3. The cluster's CA private key can be derived from the token
  4. Existing nodes will be deregistered when the token is reused
Show the answer

Answer: A. Anyone holding the token can add an authenticated node to the cluster

The bootstrap token is used for mutual authentication during join, so anyone with it can register a node. Tokens are listed, created and deleted with kubeadm token, so the exposed one should be removed.

Source: Creating a cluster with kubeadm (Kubernetes) — Initializing your control-plane node

Challenge yourself on this topic → Study as cards