Back to Talos

KubeAggregatorCAConfig

website/content/v1.14/reference/configuration/kubernetes/kubeaggregatorcaconfig.md

1.14.01.1 KB
Original Source
<!-- markdownlint-disable -->

{{< highlight yaml >}} apiVersion: v1alpha1 kind: KubeAggregatorCAConfig

The currently active issuing certificate authority for the Kubernetes API aggregator flow.

issuingCA: cert: '--- EXAMPLE CERTIFICATE ---' key: '--- EXAMPLE KEY ---'

The list of accepted CA certificates for the Kubernetes API server aggregator flow.

acceptedCAs: - '--- EXAMPLE AGGREGATOR CA ---' {{< /highlight >}}

FieldTypeDescriptionValue(s)
issuingCACertificateAndKeyThe currently active issuing certificate authority for the Kubernetes API aggregator flow.

This field should only be set for the controlplane machines. The value contains a private key and a certificate, PEM encoded. | | |acceptedCAs |[]string |The list of accepted CA certificates for the Kubernetes API server aggregator flow.

This field should only be set for the controlplane machines. The value should be a PEM encoded certificate. The issuing CA certificate is automatically added to the list of accepted CAs. | |