> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

> RegistryTLSConfig configures TLS for a registry endpoint.

# RegistryTLSConfig

```yaml theme={null}
apiVersion: v1alpha1
kind: RegistryTLSConfig
name: my-private-registry.local:5000 # Registry endpoint to apply the TLS configuration to.
ca: |- # CA registry certificate to add the list of trusted certificates.
    -----BEGIN CERTIFICATE-----
    MIID...IDAQAB
    -----END CERTIFICATE-----

# # Enable mutual TLS authentication with the registry.
# clientIdentity:
#     cert: |-
#         -----BEGIN CERTIFICATE-----
#         MIID...IDAQAB
#         -----END CERTIFICATE-----
#     key: |-
#         -----BEGIN PRIVATE KEY-----
#         MIIE...AB
#         -----END PRIVATE KEY-----
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`name`</td>
      <td>string</td>
      <td>Registry endpoint to apply the TLS configuration to.<br /><br />Registry endpoint is the hostname part of the endpoint URL,<br />e.g. 'my-mirror.local:5000' for '[https://my-mirror.local:5000/v2/](https://my-mirror.local:5000/v2/)'.<br /><br />The TLS configuration makes sense only for HTTPS endpoints.<br />The TLS configuration will apply to all image pulls for this<br />registry endpoint, by Talos or any Kubernetes workloads.</td>

      <td />
    </tr>

    <tr>
      <td>`clientIdentity`</td>
      <td>CertificateAndKey</td>
      <td>Enable mutual TLS authentication with the registry.<br />Client certificate and key should be PEM-encoded.</td>

      <td />
    </tr>

    <tr>
      <td>`ca`</td>
      <td>string</td>
      <td>CA registry certificate to add the list of trusted certificates.<br />Certificate should be PEM-encoded.</td>

      <td />
    </tr>

    <tr>
      <td>`insecureSkipVerify`</td>
      <td>bool</td>
      <td>Skip TLS server certificate verification (not recommended).</td>

      <td />
    </tr>
  </tbody>
</table>