A municipal admin needs kubectl access right after kubeadm init without weakening kubeconfig file permissions. What is the usual approach?
Select an answer to reveal the explanation.
Short Explanation
The golden admin badge lives at /etc/kubernetes/admin.conf after init—copy it into your personal kubeconfig and keep the file mode tight. World-writable or public Git copies turn the badge into a flyer.
Full Explanation
kubeadm writes a cluster-admin kubeconfig to /etc/kubernetes/admin.conf. Administrators typically copy it to ~/.kube/config (or set KUBECONFIG) with user-only permissions. Making the file world-readable/writable, disabling TLS, or publishing it publicly exposes cluster-admin credentials and violates basic operational hygiene.