code: func (s *ConnectCA) ConfigurationGet(
  	args *structs.DCSpecificRequest,
  	reply *structs.CAConfiguration) error {
  	// Exit early if Connect hasn't been enabled.
  	if !s.srv.config.ConnectEnabled {
  		return ErrConnectNotEnabled
  	}
  
  	if done, err := s.srv.forward("ConnectCA.ConfigurationGet", args, args, reply); done {
  		return err
  	}
  
  	// This action requires operator read access.
  	rule, err := s.srv.ResolveToken(args.Token)
  	if err != nil {
  		return err
  	}
  	if rule != nil && !rule.OperatorRead() {
  		return acl.ErrPermissionDenied
  	}
  
  	state := s.srv.fsm.State()
  	_, config, err := state.CAConfig()
  	if err != nil {
  		return err
  	}
  	*reply = *config
  
  	return nil
  }
docs: // ConfigurationGet returns the configuration for the CA.