KubePrismConfig

<!-- markdownlint-disable -->

{{< highlight yaml >}} apiVersion: v1alpha1 kind: KubePrismConfig port: 7445 # KubePrism port. {{< /highlight >}}

Field	Type	Description	Value(s)
port	int	KubePrism port.
The load balancer will be started on 127.0.0.1:<port> and it will
automatically include a controlplane endpoint and direct addresses of
all controlplane nodes in the cluster.
The KubePrism will pick up the route(s) with the lowest RTT to the controlplane nodes,
excluding the unavailable ones, and will automatically update the route list when the controlplane nodes change.
tlsServerName	string	Override the TLS server name (SNI) used by the kubelet when connecting to
the KubePrism endpoint.

KubePrism still listens on 127.0.0.1:<port> and the kubelet still dials that address, but the generated kubelet kubeconfig will carry clusters[0].cluster.tls-server-name set to this value, so the kubelet uses it for SNI and certificate hostname verification.

This is useful when KubePrism's upstream apiserver is reached through an SNI-routing L4 proxy (for example nginx-ingress in ssl-passthrough mode in front of a Kamaji-hosted apiserver), where SNI=127.0.0.1 doesn't match any route and the proxy serves a fallback certificate.

When empty (default), no tls-server-name is set and behavior is unchanged. | |