Study. uk . com
  1. Home
  2. All questions
  3. Question 56

CKA study material · question 56 of 1000

Why does changing a control-plane component's IP address require re-issuing certificates?

  1. kubeadm regenerates certificates on every restart
  2. The address appears in the certificates' subject alternative name fields
  3. Certificates are keyed to the node's product_uuid
  4. The address is part of the etcd encryption key
Show the answer

Answer: B. The address appears in the certificates' subject alternative name fields

Component IP addresses land in the certificates' SAN fields, so a change means new certificates and a restart.

Source: Creating a cluster with kubeadm (Kubernetes) — Network setup

Challenge yourself on this topic → Study as cards