cert-manager
Hard
Security
Which of the following is NOT a valid way to secure cert-manager's webhook?
Select your answer:
Show answer and explanation
Answer: Using a password
Explanation
Using a password is not a valid way to secure cert-manager's webhook. The webhook is secured using TLS certificates for authentication and RBAC for authorization. Network policies and service meshes can also be used to control traffic to the webhook, but password authentication is not supported.
More hard cert-manager questions
- When you create a Certificate that uses an ACME issuer, which chain of resources does cert-manager create?
- A ClusterIssuer for DNS-01 references a Secret holding DNS provider credentials. In which namespace does cert-manager look for that Secret?
- How do you get cert-manager to create and manage a Certificate for an Ingress automatically?
- What does privateKey.rotationPolicy: Always do on a Certificate?
- How do you make cert-manager reissue a certificate right away, before it is due for renewal?
- What does the Secret named in an ACME issuer's privateKeySecretRef contain?