Back to Talos

KubeAPIServerCAConfig

website/content/v1.14/reference/configuration/kubernetes/kubeapiservercaconfig.md

1.14.0982 B
Original Source
<!-- markdownlint-disable -->

{{< highlight yaml >}} apiVersion: v1alpha1 kind: KubeAPIServerCAConfig

The currently active issuing certificate authority for the Kubernetes API server.

issuingCA: cert: '--- EXAMPLE CERTIFICATE ---' key: '--- EXAMPLE KEY ---'

The list of accepted CA certificates for the Kubernetes API server.

acceptedCAs: - '--- EXAMPLE CA ---' {{< /highlight >}}

FieldTypeDescriptionValue(s)
issuingCACertificateAndKeyThe currently active issuing certificate authority for the Kubernetes API server.

This field should only be set for the controlplane machines. The value contains a private key and a certificate, PEM encoded. | | |acceptedCAs |[]string |The list of accepted CA certificates for the Kubernetes API server.

The value should be a PEM encoded certificate. The issuing CA certificate is automatically added to the list of accepted CAs. | |