Locating K8s certifcates

  1. CA

    1. /etc/kubernetes/pki/

  2. Api server cert

    1. /etc/kubernetes/pki/

  3. Etcd server

    1. /etc/kubernetes/pki/etcd/

  4. Api -> etcd

    1. /etc/kubernetes/pki/

  5. Api -> kubelet

    1. /etc/kubernetes/pki/

  6. Schedular -> Api

    1. /etc/kubernetes/scheduler.conf

  7. Controller-Manager -> Api

    1. /etc/kubernetes/controller-manager.conf

  8. Kubelet -> Api

    1. /var/lib/kubelet/pki/kubelet-client-current.pem (default but could be different)

  9. Kubelet server cert

    1. /var/lib/kubelet/pki/

Last updated