Study. uk . com
  1. Home
  2. All questions
  3. Question 61

CKA study material · question 61 of 1000

Why is the bootstrap token printed by kubeadm init treated as a secret?

  1. It decrypts etcd at rest
  2. It grants cluster-admin to any user
  3. Anyone holding it can add authenticated nodes to the cluster
  4. It is the API server's TLS private key
Show the answer

Answer: C. Anyone holding it can add authenticated nodes to the cluster

The token mutually authenticates the control plane and joining nodes, so it lets anyone add a node.

Source: Creating a cluster with kubeadm (Kubernetes) — Initializing your control-plane node

Challenge yourself on this topic → Study as cards