Certificate Authority

Updated Apr 07, 2022 ·

Overview

By default, kubeadm creates a self-signed certificate authority (CA)

• CA can also be created to be a part of an external PKI
• used to secure cluster communications
• generates certificates used by API server to encrypt HTTPS
• generates certificates for authenticating users and kubelets
• certificates will be distributed to each node

The CA files will be stored in:

/etc/kubernetes/pki