diff --git a/coordinator/kubernetes/k8sapi/kubeadm_config.go b/coordinator/kubernetes/k8sapi/kubeadm_config.go
index 6b6260a3a..0f0adfc7d 100644
--- a/coordinator/kubernetes/k8sapi/kubeadm_config.go
+++ b/coordinator/kubernetes/k8sapi/kubeadm_config.go
@@ -2,6 +2,7 @@ package k8sapi
 
 import (
 	"github.com/edgelesssys/constellation/coordinator/kubernetes/k8sapi/resources"
+	"github.com/edgelesssys/constellation/internal/constants"
 	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	kubeletconf "k8s.io/kubelet/config/v1beta1"
 	kubeadm "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta3"
@@ -44,6 +45,7 @@ func (c *CoreOSConfiguration) InitConfiguration(externalCloudProvider bool) Kube
 				Kind:       "ClusterConfiguration",
 				APIVersion: kubeadm.SchemeGroupVersion.String(),
 			},
+			KubernetesVersion: constants.KubernetesVersion,
 			// necessary to be able to access the kubeapi server through localhost
 			APIServer: kubeadm.APIServer{
 				CertSANs: []string{"127.0.0.1", "10.118.0.1"},
diff --git a/internal/constants/constants.go b/internal/constants/constants.go
index c4e6feb35..be145effb 100644
--- a/internal/constants/constants.go
+++ b/internal/constants/constants.go
@@ -39,6 +39,13 @@ const (
 
 	MinControllerCount = 1
 	MinWorkerCount     = 1
+
+	//
+	// Kubernetes.
+	//
+
+	// KubernetesVersion installed by kubeadm.
+	KubernetesVersion = "stable-1.23"
 )
 
 // CliVersion is the version of the CLI. Left as a separate variable to allow override during build.