# Which status field on a trust-manager Bundle shows the version of the default CA package it was built from?

cert-manager, Easy (Beginner), Commands. https://k8wiz.com/uquiz/which-status-field-on-a-trust-manager-bundle-shows-the-version-of-the-default-ca-package-it-was-built-from

- A. status.caPackageVersion
- B. status.defaultPackageImage
- C. status.trustPackageTag
- D. status.defaultCAVersion

**Answer:** status.defaultCAVersion

**Explanation:** trust-manager writes the version of the default CA package to status.defaultCAVersion on every Bundle that has a source with useDefaultCAs: true. Checking it is a quick way to confirm a cluster no longer uses a package that trusts the compromised eMudhra roots. defaultPackageImage is a Helm value, not a status field.