Study. uk . com
  1. Home
  2. All questions
  3. Question 949

CKA study material · question 949 of 1000

You suspect an expired certificate in a kubeconfig. Which two tools does the guide use to check? Choose two.

  1. base64 to decode the embedded data
  2. kubeadm certs check-expiration on the client machine
  3. openssl x509 to read the dates
  4. crictl inspect on the API server container
Show the answer

Answer: A. base64 to decode the embedded data
C. openssl x509 to read the dates

Certificates in a kubeconfig are base64-encoded, so they are decoded and then read with openssl x509 -noout -dates. kubeadm certs works on a control plane node, not a client.

Source: Troubleshooting kubectl (Kubernetes) — TLS problems

Challenge yourself on this topic → Study as cards