Authentication

Question 1

What is the main focus of this authentication lecture in Kubernetes?

Answer 1

The lecture focuses on securing management access to the Kubernetes cluster using authentication mechanisms.

Question 2

Which users are the main concern for Kubernetes cluster authentication in this lecture?

Answer 2

The main concern is human users such as administrators and developers and robot users such as services or external applications that need cluster access.

Question 3

Does Kubernetes manage normal user accounts directly and what does it manage instead?

Answer 3

Kubernetes does not manage normal user accounts directly and instead relies on external identity sources while it can manage service accounts through the Kubernetes API.

Question 4

Which Kubernetes component authenticates requests from kubectl or direct API calls?

Answer 4

The kube API server authenticates all incoming management requests before processing them.

Question 5

Why are static password files and static token files not recommended for real Kubernetes security?

Answer 5

They are not recommended because they store usernames passwords and tokens in clear text which makes them insecure.