> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

> KubeAPIServerCAConfig configures Kubernetes API server CA.

# KubeAPIServerCAConfig

```yaml theme={null}
apiVersion: v1alpha1
kind: KubeAPIServerCAConfig
# The currently active issuing certificate authority for the Kubernetes API server.
issuingCA:
    cert: '--- EXAMPLE CERTIFICATE ---'
    key: '--- EXAMPLE KEY ---'
# The list of accepted CA certificates for the Kubernetes API server.
acceptedCAs:
    - '--- EXAMPLE CA ---'
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`issuingCA`</td>
      <td>CertificateAndKey</td>
      <td>The currently active issuing certificate authority for the Kubernetes API server.<br /><br />This field should only be set for the controlplane machines.<br />The value contains a private key and a certificate, PEM encoded.</td>

      <td />
    </tr>

    <tr>
      <td>`acceptedCAs`</td>
      <td>\[]string</td>
      <td>The list of accepted CA certificates for the Kubernetes API server.<br /><br />The value should be a PEM encoded certificate.<br />The issuing CA certificate is automatically added to the list of accepted CAs.</td>

      <td />
    </tr>
  </tbody>
</table>