Type the full command to create a Certificate Signing Request (CSR) for the private key of the ETCD Server. 1. Private Key Name: etcdserver.key 2. CN: etcd-server 3. Administrative group: system:etcd-server 4. CSR Name: etcdserver.csr

openssl req -new -key etcdserver.key -subj "/CN=etcd-server/O=system:etcd-server" -out etcdserver.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "node01" to talk with the kubelet service: 1. Private Key Name: node01.key 2. CN: node01 3. Administrative group: system:node01 4. CSR Name: node01.csr

openssl req -new -key node01.key -subj "/CN=node01/O=system:node01" -out node01.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "Kube API Server". 1. Private Key Name: apiserver.key 2. CN: kube-apiserver 3. CSR Name: apiserver.csr 4. Openssl file: openssl.cnf

openssl req -new -key apiserver.key -subj "/CN=kube-apiserver" -out apiserver.csr -config openssl.cnf

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "admin". 1. Private Key Name: admin.key 2. CN: kube-admin 3. Administrative group: system:masters 4. CSR Name: admin.csr

openssl req -new -key admin.key -subj "/CN=kube-admin/O=system:masters" -out admin.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "kube-scheduler". 1. Private Key Name: scheduler.key 2. CN: kube-scheduler 3. Administrative group: system:kube-scheduler 4. CSR Name: scheduler.csr

openssl req -new -key scheduler.key -subj "/CN=kube-scheduler/O=system:kube-scheduler" -out scheduler.csr

Type the full command to sign the certificate request for the CA: 1. CSR Name: ca.csr 2. Key Name: ca.key 3. CRT Name: ca.crt

openssl x509 -req -in ca.csr -signkey ca.key -out ca.crt

Type the full command to sign the certificate request for the "admin" user: 1. CSR Name: admin.csr 2. CA crt: ca.crt 3. CA key: ca.key 4. CRT Name: admin.crt

openssl x509 -req -in admin.csr -CA ca.crt -CAkey ca.key -out admin.crt

Type the full command to sign the certificate request for the "node01" to talk with the kubelet service : 1. CSR Name: node01.csr 2. CA crt: ca.crt 3. CA key: ca.key 4. CRT Name: node01.crt

openssl x509 -req -in node01.csr -CA ca.crt -CAkey ca.key -out node01.crt

Type the full command to sign the certificate request for the "ETCD Server": 1. CSR Name: etcdserver.csr 2. CA crt: ca.crt 3. CA key: ca.key 4. CRT Name: etcdserver.crt

openssl x509 -req -in etcdserver.csr -CA ca.crt -CAkey ca.key -out etcdserver.crt

Type the full command to sign the certificate request for the "kube-scheduler": 1. CSR Name: scheduler.csr 2. CA crt: ca.crt 3. CA key: ca.key 4. CRT Name: scheduler.crt

openssl x509 -req -in scheduler.csr -CA ca.crt -CAkey ca.key -out scheduler.crt

Type the full command to sign the certificate request for the "kube API Server": 1. CSR Name: apiserver.csr 2. CA crt: ca.crt 3. CA key: ca.key 4. CRT Name: apiserver.crt

openssl x509 -req -in apiserver.csr -CA ca.crt -CAkey ca.key -out apiserver.crt

What three things are needed to generate a certificate for a Kubernetes component?

Sign the certificate signing request

Make an API call to https://kube-apiserver:6443/ and list the Pods. Use the following information to authenticate with the API Server: 1. Key name: admin.key 2. CRT name: admin.crt 3. CA CRT name: ca.crt

curl https://kube-apiserver:6443/api/v1/pods --key admin.key --cert admin.crt --cacert ca.crt

What are some ways as the people used to call the Kube API Server?

kubernetes.default.svc.cluster.local

kubernetes.default.cluster.local

As the Kube API Server is called in different ways, what action must be taken?

Create an OpenSSL config file and include the alternate names as DNS.

The alternate names section should include IP addresses instead of DNS names for the API server.

The alternate names should be included directly under the [req] section.

It's unnecessary to specify the `subjectAltName` directive when adding alternate DNS names.

Define alternate DNS names using environment variables directly in the config file.

According to the following information about ETCD Server certificates: 1. CA file: /var/lib/kubernetes/ca.pem 2. CRT File: /var/lib/kubernetes/apiserver-etcd-client.crt 3. Key file: /var/lib/kubernetes/apiserver-etcd-client.key How should be added the ETCD Server Key file in the Kube API Server Pod configuration file?

--etcd-keyfile=/var/lib/kubernetes/apiserver-etcd-client.key

According to the following information about ETCD Server certificates: 1. CA file: /var/lib/kubernetes/ca.pem 2. CRT File: /var/lib/kubernetes/apiserver-etcd-client.crt 3. Key file: /var/lib/kubernetes/apiserver-etcd-client.key How should be added the ETCD Server CRT file in the Kube API Server Pod configuration file?

--etcd-certfile=/var/lib/kubernetes/apiserver-etcd-client.crt

According to the following information about ETCD Server certificates: 1. CA file: /var/lib/kubernetes/ca.pem 2. CRT File: /var/lib/kubernetes/apiserver-etcd-client.crt 3. Key file: /var/lib/kubernetes/apiserver-etcd-client.key How should be added the CA file in the Kube API Server Pod configuration file?

--etcd-cafile=/var/lib/kubernetes/ca.pem

Type the full command to add the node01.crt file to the Kubelet configuration file. File location: /var/lib/kubelet/node01.crt

tlsCertFile: "/var/lib/kubelet/node01.crt"

Type the full command to add the node01.key file to the Kubelet configuration file. File location: /var/lib/kubelet/node01.key

tlsPrivateKeyFile: "/var/lib/kubelet/node01.key"

Section 7: Security (9)

Authored by Maiky Alfaro

Computers

University

Used 7+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

31 questions

Show all answers

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the CA.
1. Key Name: ca.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the "node01" to talk with the Kubelet service.
1. Key Name: node01.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the "Kube API Server".
1. Key Name: apiserver.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the ETCD Server.
1. Key Name: etcdserver.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the "admin" user.
1. Key Name: admin.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create the private key for the "kube-scheduler":
1. Key Name: scheduler.key
2. Lenght: 2048

FILL IN THE BLANK QUESTION

1 min • 1 pt

Type the full command to create a Certificate Signing Request (CSR) for the private key of the CA.
1. Private Key Name: ca.key
2. CN: KUBERNETES-CA
3. CSR Name: ca.csr

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

30 questions

IT Essentials Topic - Input / Output Devices

Quiz

•

10th Grade - University

28 questions

Computer Science quiz

Quiz

•

11th Grade - University

35 questions

ASESMEN SUMATIF AKHIR TAHUN - INFORMATIKA KELAS 7

Quiz

•

7th Grade - University

30 questions

DBMS SQL

Quiz

•

University

31 questions

java collections

Quiz

•

University

28 questions

Productivity Programs

Quiz

•

KG - University

26 questions

J30AB Revision 4

Quiz

•

7th Grade - University

26 questions

Modules 1 – 4: Switching Concepts, VLANs, and InterVLAN (PART 2)

Quiz

•

University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

20 questions

Figurative Language Review

Quiz

•

6th Grade

Discover more resources for Computers

30 questions

Quiz 1 Review

Quiz

•

University

Section 7: Security (9)

Type the full command to create the private key for the CA.1. Key Name: ca.key2. Lenght: 2048

Type the full command to create the private key for the "node01" to talk with the Kubelet service.1. Key Name: node01.key2. Lenght: 2048

Type the full command to create the private key for the "Kube API Server".1. Key Name: apiserver.key2. Lenght: 2048

Type the full command to create the private key for the ETCD Server.1. Key Name: etcdserver.key2. Lenght: 2048

Type the full command to create the private key for the "admin" user.1. Key Name: admin.key2. Lenght: 2048

Type the full command to create the private key for the "kube-scheduler":1. Key Name: scheduler.key2. Lenght: 2048

Type the full command to create a Certificate Signing Request (CSR) for the private key of the CA. 1. Private Key Name: ca.key2. CN: KUBERNETES-CA3. CSR Name: ca.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the ETCD Server. 1. Private Key Name: etcdserver.key2. CN: etcd-server3. Administrative group: system:etcd-server4. CSR Name: etcdserver.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "node01" to talk with the kubelet service: 1. Private Key Name: node01.key2. CN: node013. Administrative group: system:node014. CSR Name: node01.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "Kube API Server". 1. Private Key Name: apiserver.key2. CN: kube-apiserver3. CSR Name: apiserver.csr4. Openssl file: openssl.cnf

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

Type the full command to create the private key for the CA.
1. Key Name: ca.key
2. Lenght: 2048

Type the full command to create the private key for the "node01" to talk with the Kubelet service.
1. Key Name: node01.key
2. Lenght: 2048

Type the full command to create the private key for the "Kube API Server".
1. Key Name: apiserver.key
2. Lenght: 2048

Type the full command to create the private key for the ETCD Server.
1. Key Name: etcdserver.key
2. Lenght: 2048

Type the full command to create the private key for the "admin" user.
1. Key Name: admin.key
2. Lenght: 2048

Type the full command to create the private key for the "kube-scheduler":
1. Key Name: scheduler.key
2. Lenght: 2048

Type the full command to create a Certificate Signing Request (CSR) for the private key of the CA.
1. Private Key Name: ca.key
2. CN: KUBERNETES-CA
3. CSR Name: ca.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the ETCD Server.
1. Private Key Name: etcdserver.key
2. CN: etcd-server
3. Administrative group: system:etcd-server
4. CSR Name: etcdserver.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "node01" to talk with the kubelet service:
1. Private Key Name: node01.key
2. CN: node01
3. Administrative group: system:node01
4. CSR Name: node01.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "Kube API Server".
1. Private Key Name: apiserver.key
2. CN: kube-apiserver
3. CSR Name: apiserver.csr
4. Openssl file: openssl.cnf