Study. uk . com
  1. Home
  2. All questions
  3. Question 989

CKA study material · question 989 of 1000

kubectl reports "x509: certificate signed by unknown authority". Which cause does the kubeadm guide name first?

  1. An expired cluster CA that must be regenerated
  2. A kube-apiserver serving certificate missing a SAN
  3. An admission webhook with an untrusted CA bundle
  4. The wrong kubeconfig being used
Show the answer

Answer: D. The wrong kubeconfig being used

The guide's first remedies are unsetting KUBECONFIG, pointing it at /etc/kubernetes/admin.conf, or replacing $HOME/.kube/config — a mismatched kubeconfig is by far the commonest cause.

Source: Troubleshooting kubeadm (Kubernetes) — TLS certificate errors

Challenge yourself on this topic → Study as cards