ReynO:
Kodekloud practice test - View Certificate details
Q13
From the error logs of the kube-api-server, its not explicitly stated that the etcd certificate was wrong and therefore causing the kube-api-server to crash. In an actual scenario, is there a way to explicitly see which certificate is causing an issue? Is the only way to manually look through all the certificates configured?
Alistair Mackay:
What it ought to say is that once you’ve determined that etcd is the cause of API server crashes, then you should find logs for etcd - this will be crashing too if it has a cert problem and the cert it’s complaining about will be found on those logs.
You might like to watch our informative video from the Office Hours series in which I debug and fix 6 different API server crash scenarios. The last scenario one involves a bad etcd cert.
Othman Albakri:
thanks, alot @Alistair Mackay it really very useful session, and i am confident now with the apis-server failure