Kubernetes - Service Mesh
Which Kubernetes component typically manages certificates for mTLS between services?
Which Kubernetes component typically manages certificates for mTLS between services?
easy📝 Conceptual Q2 of 15
Step-by-Step Solution
Solution:
Step 1: Identify certificate manager in service mesh
Istio Citadel (now Istiod) issues and rotates certificates for mTLS.Step 2: Eliminate unrelated components
Kube-scheduler, proxy, and controller-manager do not handle certificates.Final Answer:
Istio Citadel or Istiod -> Option DQuick Check:
Certificate manager = Istio Citadel/Istiod [OK]
Quick Trick: Istiod handles mTLS certificates in Istio [OK]
Common Mistakes:
- Confusing scheduler with certificate manager
- Thinking kube-proxy manages certificates
- Assuming controller-manager handles mTLS
Master "Service Mesh" in Kubernetes
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Kubernetes Quizzes