Study. uk . com
  1. Home
  2. All questions
  3. Question 570

CKA study material · question 570 of 1000

kubeadm finds ca.crt in its PKI directory but no ca.key. What does it do?

  1. It generates a new CA key alongside the existing certificate
  2. It fails the preflight checks and stops
  3. It activates external CA mode and continues with no CA key on disk
  4. It falls back to a self-signed CA for the remaining certificates
Show the answer

Answer: C. It activates external CA mode and continues with no CA key on disk

Providing the root CA certificate without its key puts kubeadm into external CA mode, in which it proceeds without the key and cannot renew those certificates itself.

Source: Certificate Management with kubeadm (Kubernetes) — External CA mode

Challenge yourself on this topic → Study as cards