k8wiz
cert-manager
Easy
Commands

Which status field on a trust-manager Bundle shows the version of the default CA package it was built from?

Select your answer:

Show answer and explanation

Answer: status.defaultCAVersion

Explanation

trust-manager writes the version of the default CA package to status.defaultCAVersion on every Bundle that has a source with useDefaultCAs: true. Checking it is a quick way to confirm a cluster no longer uses a package that trusts the compromised eMudhra roots. defaultPackageImage is a Helm value, not a status field.

Read more about cert-manager