Which Kubernetes namespace is readable by all users, including unauthenticated ones?

Which Kubernetes namespace is readable by all users, including unauthenticated ones?

• A. default
• B. kube-public
• C. kube-system
• D. kube-node-lease

Answer: (B)

Public visibility across the cluster is provided by a special namespace that is readable by everyone, including unauthenticated users. In Kubernetes, kube-public is created so that resources inside can be accessed without credentials, making it suitable for information or assets meant to be openly available cluster-wide. This design helps processes and users discover non-sensitive data without needing to authenticate. The other namespaces are regular or restricted by default. The default namespace is just another ordinary namespace where resources live; access is governed by RBAC like anywhere else, so it is not inherently publicly readable. The kube-system namespace hosts system components and control plane services, which are typically protected to prevent exposure of sensitive operational details. The kube-node-lease namespace stores node heartbeat leases and is intended for use by the control plane and nodes, not for public access. So, the namespace intended to be readable by all users, including unauthenticated ones, is kube-public.

Public visibility across the cluster is provided by a special namespace that is readable by everyone, including unauthenticated users. In Kubernetes, kube-public is created so that resources inside can be accessed without credentials, making it suitable for information or assets meant to be openly available cluster-wide. This design helps processes and users discover non-sensitive data without needing to authenticate.

The other namespaces are regular or restricted by default. The default namespace is just another ordinary namespace where resources live; access is governed by RBAC like anywhere else, so it is not inherently publicly readable. The kube-system namespace hosts system components and control plane services, which are typically protected to prevent exposure of sensitive operational details. The kube-node-lease namespace stores node heartbeat leases and is intended for use by the control plane and nodes, not for public access.

So, the namespace intended to be readable by all users, including unauthenticated ones, is kube-public.