# Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?

cert-manager, Hard (Expert), Integration. https://k8wiz.com/uquiz/which-cert-manager-sub-project-copies-ca-bundles-into-namespaces-as-configmaps-or-secrets-so-applications-can-trust-a-private-ca

- A. cainjector
- B. trust-manager
- C. csi-driver
- D. approver-policy

**Answer:** trust-manager

**Explanation:** trust-manager reads CA certificates from the sources listed in a Bundle resource, such as Secrets, ConfigMaps or the default public CA set, and writes the combined bundle to a ConfigMap or Secret in each selected namespace. Pods mount it to trust certificates from your private issuer. cainjector does a related job for webhook and APIService configurations, not for workloads.