Study. uk . com
  1. Home
  2. All questions
  3. Question 85

CKA study material · question 85 of 1000

An existing organisational CA is placed in /etc/kubernetes/pki before kubeadm init runs. What does kubeadm do?

  1. It refuses to initialise the cluster
  2. It keeps the existing pair and signs the other certificates with it
  3. It moves the files aside and warns
  4. It overwrites the files with a freshly generated CA
Show the answer

Answer: B. It keeps the existing pair and signs the other certificates with it

kubeadm never overwrites a certificate and key pair that already exists, so a pre-placed CA is reused.

Source: Certificate Management with kubeadm (Kubernetes) — Using custom certificates

Challenge yourself on this topic → Study as cards