Security - Kubeconfig

Question 1

What is the main purpose of a kubeconfig file in Kubernetes?

Answer 1

A kubeconfig file stores cluster user and context information so kubectl can connect to the correct cluster without typing certificates keys and server details on every command.

Question 2

What are the three main sections inside a kubeconfig file?

Answer 2

The three main sections are clusters users and contexts.

Question 3

What does a context represent in a kubeconfig file?

Answer 3

A context links one user to one cluster and can also include a default namespace.

Question 4

What file does kubectl use by default for kubeconfig if you do not specify one?

Answer 4

By default kubectl uses the file named config under the .kube directory in the users home folder.

Question 5

What field in kubeconfig decides which context kubectl uses by default?

Answer 5

The current-context field decides which context kubectl uses by default.

Question 6

Which kubectl command shows the kubeconfig that is currently being used?

Answer 6

kubectl config view

Question 7

Which kubectl command changes the active context?

Answer 7

kubectl config use-context followed by the context name

Question 8

How can you tell kubectl to use a different kubeconfig file for a command?

Answer 8

Use the –kubeconfig option followed by the path to the file.

Question 9

How can a context help with namespaces during the CKAD exam?

Answer 9

A context can include a namespace so switching contexts can also place you into the correct namespace automatically and save time during tasks.

Question 10

What certificate related fields might appear in kubeconfig and what is useful to remember for the exam?

Answer 10

You may see file path fields like client-certificate client-key and certificate-authority or inline base64 data fields like client-certificate-data client-key-data and certificate-authority-data and both approaches are valid.

Question 11

What is an important CKAD tip related to namespaces and kubeconfig?

Answer 11

If a task uses one namespace repeatedly it is often faster to set the namespace in the current context than to keep typing -n on every command.

Question 12

Which kubectl command is especially useful for quickly checking all configured contexts during the CKAD exam?

Answer 12

kubectl config get-contexts