# tls.cacert

Specifies the CA certificate used to verify the Kubernetes API server.

This parameter applies to Kubernetes Metadata Module (mmkubernetes).

Name:

  tls.cacert

Scope:

  action

Type:

  word

Default:

  none

Required?:

  no

Introduced:

  at least 8.x, possibly earlier

## Description

Full path and file name of file containing the CA cert of the Kubernetes API server cert issuer. Example: /etc/rsyslog.d/mmk8s-ca.crt. This parameter is not mandatory if using an http scheme instead of https in KubernetesURL, or if allowunsignedcerts is set to “on”.

## Action usage

    action(type="mmkubernetes" tls.caCert="/etc/rsyslog.d/mmk8s-ca.crt")

## See also

See also Kubernetes Metadata Module (mmkubernetes).

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.