From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Kubernetes PKI architecture

Kubernetes PKI architecture - Kubernetes Tutorial

From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Start my 1-month free trial Buy for my team

Kubernetes PKI architecture

“

- Kubernetes PKI Architecture is a little complex. There are a lot of different certificates, as well as keys scattered throughout the system. Now the thing is, is they typically are used to be able to communicate to the various components within Kubernetes, to be able to secure that. And when you do your first cluster standup, if you use kubeadm, these are all going to be created for you during the bootstrapping process. This is what provides that level of security across all these various components. Now, if you have your own certificate authority, you have the ability to be able to use that as well, but it does come natively with its own single root Certificate Authority. It's all private certificates and they're typically good for about a year. Now, the paths that you're going to find these certificates in on the platform are going to be in etc/kubernetes/pki. So, if you want to be able to get a list of all these different certificates, you'll find them in there. So, if you do run…

Contents