title: How kube-apiserver communicates with kubelet with cacerts?
body: <p>I have a kubernetes cluster created with kops. And I see the below in apiserver commandline arguments.</p>
  
  <pre><code>--kubelet-client-certificate=/srv/kubernetes/kubelet-api.pem 
  --kubelet-client-key=/srv/kubernetes/kubelet-api-key.pem 
  </code></pre>
  
  <p>How does a single cert and key will be used to communicate to all the worker nodes? Since I can see each worker node has its own certificate and root ca.</p>
  
  <p><a href="https://i.stack.imgur.com/bsSoh.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/bsSoh.png" alt="enter image description here"></a></p>