From the course: Certified Kubernetes Administrator (CKA) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Understanding API access

Understanding API access - Kubernetes Tutorial

From the course: Certified Kubernetes Administrator (CKA) Cert Prep

Start my 1-month free trial Buy for my team

Understanding API access

“

- So here I want to give you an overview of how authentication is working in Kubernetes. So there's a Kubernetes part, there's a client part. An essential part in Kubernetes is a CA. CA is a certificate authority. And this certificate authority is creating certificates. So the CA is what is signing your certificates, and the result is normally a CRT and a key. The CRT is the public key certificate. That's what you normally hand out to clients, and the key is what protects your server. Now, what is a client on Kubernetes? Well, a client is also a certificate and a key. And these are certificates and keys that are signed by the Kubernetes Certificate Authority. So if you look at the default configuration of a client using tools like kubectl config view, what you see is a signed certificate as well as a key. And when you use commands like kubectl, kubectl has access to these certificates. And based on that, when your kubectl request is received by the API server, the API server is…

Contents