> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

> KubePrismConfig configures node-local Kubernetes API load balancer.

# KubePrismConfig

```yaml theme={null}
apiVersion: v1alpha1
kind: KubePrismConfig
port: 7445 # KubePrism port.
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`port`</td>
      <td>int</td>
      <td>KubePrism port.<br />The load balancer will be started on `127.0.0.1:<port>` and it will<br />automatically include a controlplane endpoint and direct addresses of<br />all controlplane nodes in the cluster.<br />The KubePrism will pick up the route(s) with the lowest RTT to the controlplane nodes,<br />excluding the unavailable ones, and will automatically update the route list when the controlplane nodes change.</td>

      <td />
    </tr>

    <tr>
      <td>`tlsServerName`</td>
      <td>string</td>
      <td>Override the TLS server name (SNI) used by the kubelet when connecting to<br />the KubePrism endpoint.<br /><br />KubePrism still listens on `127.0.0.1:<port>` and the kubelet still dials<br />that address, but the generated kubelet kubeconfig will carry<br />`clusters[0].cluster.tls-server-name` set to this value, so the kubelet<br />uses it for SNI and certificate hostname verification.<br /><br />This is useful when KubePrism's upstream apiserver is reached through an<br />SNI-routing L4 proxy (for example nginx-ingress in ssl-passthrough mode in<br />front of a Kamaji-hosted apiserver), where SNI=127.0.0.1 doesn't match any<br />route and the proxy serves a fallback certificate.<br /><br />When empty (default), no `tls-server-name` is set and behavior is unchanged.</td>

      <td />
    </tr>
  </tbody>
</table>