Kubernetes CKA sample exam question 42 with answer

Question
Verify ETCd CA certificate expiration date

Answer
Get CA path using describe of a etcd pod - lookup for --trusted-ca-file:

kubectl -n kube-system describe po etcd-controlplane

View the CA using openssl on controlplane node:

openssl x509 -in /var/lib/kubernetes/certs/etcd/ca.crt -text

From output can be noticed expiration date:

Not After : Oct  3 21:25:31 2032 GMT