-
Notifications
You must be signed in to change notification settings - Fork 244
/
Copy pathcontainer_v1beta1_containercluster.yaml
1205 lines (1204 loc) · 57 KB
/
container_v1beta1_containercluster.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
cnrm.cloud.google.com/version: 1.69.0
creationTimestamp: null
labels:
cnrm.cloud.google.com/managed-by-kcc: "true"
cnrm.cloud.google.com/stability-level: stable
cnrm.cloud.google.com/system: "true"
cnrm.cloud.google.com/tf2crd: "true"
name: containerclusters.container.cnrm.cloud.google.com
spec:
group: container.cnrm.cloud.google.com
names:
categories:
- gcp
kind: ContainerCluster
plural: containerclusters
shortNames:
- gcpcontainercluster
- gcpcontainerclusters
singular: containercluster
scope: Namespaced
versions:
- additionalPrinterColumns:
- jsonPath: .metadata.creationTimestamp
name: Age
type: date
- description: When 'True', the most recent reconcile of the resource succeeded
jsonPath: .status.conditions[?(@.type=='Ready')].status
name: Ready
type: string
- description: The reason for the value in 'Ready'
jsonPath: .status.conditions[?(@.type=='Ready')].reason
name: Status
type: string
- description: The last transition time for the value in 'Status'
jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
name: Status Age
type: date
name: v1beta1
schema:
openAPIV3Schema:
properties:
apiVersion:
description: 'apiVersion defines the versioned schema of this representation
of an object. Servers should convert recognized schemas to the latest
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
type: string
kind:
description: 'kind is a string value representing the REST resource this
object represents. Servers may infer this from the endpoint the client
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
type: string
metadata:
type: object
spec:
properties:
addonsConfig:
description: The configuration for addons supported by GKE.
properties:
cloudrunConfig:
description: The status of the CloudRun addon. It is disabled
by default. Set disabled = false to enable.
properties:
disabled:
type: boolean
loadBalancerType:
type: string
required:
- disabled
type: object
configConnectorConfig:
description: The of the Config Connector addon.
properties:
enabled:
type: boolean
required:
- enabled
type: object
dnsCacheConfig:
description: The status of the NodeLocal DNSCache addon. It is
disabled by default. Set enabled = true to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
gcePersistentDiskCsiDriverConfig:
description: Whether this cluster should enable the Google Compute
Engine Persistent Disk Container Storage Interface (CSI) Driver.
Defaults to disabled; set enabled = true to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
horizontalPodAutoscaling:
description: The status of the Horizontal Pod Autoscaling addon,
which increases or decreases the number of replica pods a replication
controller has based on the resource usage of the existing pods.
It ensures that a Heapster pod is running in the cluster, which
is also used by the Cloud Monitoring service. It is enabled
by default; set disabled = true to disable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
httpLoadBalancing:
description: The status of the HTTP (L7) load balancing controller
addon, which makes it easy to set up HTTP load balancers for
services in a cluster. It is enabled by default; set disabled
= true to disable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
istioConfig:
description: The status of the Istio addon.
properties:
auth:
description: The authentication type between services in Istio.
Available options include AUTH_MUTUAL_TLS.
type: string
disabled:
description: The status of the Istio addon, which makes it
easy to set up Istio for services in a cluster. It is disabled
by default. Set disabled = false to enable.
type: boolean
required:
- disabled
type: object
kalmConfig:
description: Configuration for the KALM addon, which manages the
lifecycle of k8s. It is disabled by default; Set enabled = true
to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
networkPolicyConfig:
description: Whether we should enable the network policy addon
for the master. This must be enabled in order to enable network
policy for the nodes. To enable this, you must also define a
network_policy block, otherwise nothing will happen. It can
only be disabled if the nodes already do not have network policies
enabled. Defaults to disabled; set disabled = false to enable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
type: object
authenticatorGroupsConfig:
description: Immutable. Configuration for the Google Groups for GKE
feature.
properties:
securityGroup:
description: Immutable. The name of the RBAC security group for
use with Google security groups in Kubernetes RBAC. Group name
must be in format gke-security-groups@yourdomain.com.
type: string
required:
- securityGroup
type: object
clusterAutoscaling:
description: Per-cluster configuration of Node Auto-Provisioning with
Cluster Autoscaler to automatically adjust the size of the cluster
and create/delete node pools based on the current needs of the cluster's
workload. See the guide to using Node Auto-Provisioning for more
details.
properties:
autoProvisioningDefaults:
description: Contains defaults for a node pool created by NAP.
properties:
minCpuPlatform:
description: Minimum CPU platform to be used by this instance.
The instance may be scheduled on the specified or newer
CPU platform. Applicable values are the friendly names of
CPU platforms, such as Intel Haswell.
type: string
oauthScopes:
description: Scopes that are used by NAP when creating node
pools.
items:
type: string
type: array
serviceAccountRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The email of an IAMServiceAccount.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
type: object
autoscalingProfile:
description: Configuration options for the Autoscaling profile
feature, which lets you choose whether the cluster autoscaler
should optimize for resource utilization or resource availability
when deciding to remove nodes from a cluster. Can be BALANCED
or OPTIMIZE_UTILIZATION. Defaults to BALANCED.
type: string
enabled:
description: Whether node auto-provisioning is enabled. Resource
limits for cpu and memory must be defined to enable node auto-provisioning.
type: boolean
resourceLimits:
description: Global constraints for machine resources in the cluster.
Configuring the cpu and memory types is required if node auto-provisioning
is enabled. These limits will apply to node pool autoscaling
in addition to node auto-provisioning.
items:
properties:
maximum:
description: Maximum amount of the resource in the cluster.
type: integer
minimum:
description: Minimum amount of the resource in the cluster.
type: integer
resourceType:
description: The type of the resource. For example, cpu
and memory. See the guide to using Node Auto-Provisioning
for a list of types.
type: string
required:
- resourceType
type: object
type: array
required:
- enabled
type: object
clusterIpv4Cidr:
description: Immutable. The IP address range of the Kubernetes pods
in this cluster in CIDR notation (e.g. 10.96.0.0/14). Leave blank
to have one automatically chosen or specify a /14 block in 10.0.0.0/8.
This field will only work for routes-based clusters, where ip_allocation_policy
is not defined.
type: string
clusterTelemetry:
description: Telemetry integration for the cluster.
properties:
type:
description: Type of the integration.
type: string
required:
- type
type: object
confidentialNodes:
description: 'Immutable. Configuration for the confidential nodes
feature, which makes nodes run on confidential VMs. Warning: This
configuration can''t be changed (or added/removed) after cluster
creation without deleting and recreating the entire cluster.'
properties:
enabled:
description: Immutable. Whether Confidential Nodes feature is
enabled for all nodes in this cluster.
type: boolean
required:
- enabled
type: object
databaseEncryption:
description: 'Application-layer Secrets Encryption settings. The object
format is {state = string, key_name = string}. Valid values of state
are: "ENCRYPTED"; "DECRYPTED". key_name is the name of a CloudKMS
key.'
properties:
keyName:
description: The key to use to encrypt/decrypt secrets.
type: string
state:
description: ENCRYPTED or DECRYPTED.
type: string
required:
- state
type: object
datapathProvider:
description: The desired datapath provider for this cluster. By default,
uses the IPTables-based kube-proxy implementation.
type: string
defaultMaxPodsPerNode:
description: Immutable. The default maximum number of pods per node
in this cluster. This doesn't work on "routes-based" clusters, clusters
that don't have IP Aliasing enabled.
type: integer
defaultSnatStatus:
description: Whether the cluster disables default in-node sNAT rules.
In-node sNAT rules will be disabled when defaultSnatStatus is disabled.
properties:
disabled:
description: When disabled is set to false, default IP masquerade
rules will be applied to the nodes to prevent sNAT on cluster
internal traffic.
type: boolean
required:
- disabled
type: object
description:
description: Immutable. Description of the cluster.
type: string
dnsConfig:
description: Immutable. Configuration for Cloud DNS for Kubernetes
Engine.
properties:
clusterDns:
description: Which in-cluster DNS provider should be used.
type: string
clusterDnsDomain:
description: The suffix used for all cluster service records.
type: string
clusterDnsScope:
description: The scope of access to cluster DNS records.
type: string
type: object
enableAutopilot:
description: Immutable. Enable Autopilot for this cluster.
type: boolean
enableBinaryAuthorization:
description: Enable Binary Authorization for this cluster. If enabled,
all container images will be validated by Google Binary Authorization.
type: boolean
enableIntranodeVisibility:
description: Whether Intra-node visibility is enabled for this cluster.
This makes same node pod to pod traffic visible for VPC network.
type: boolean
enableKubernetesAlpha:
description: Immutable. Whether to enable Kubernetes Alpha features
for this cluster. Note that when this option is enabled, the cluster
cannot be upgraded and will be automatically deleted after 30 days.
type: boolean
enableL4IlbSubsetting:
description: Whether L4ILB Subsetting is enabled for this cluster.
type: boolean
enableLegacyAbac:
description: Whether the ABAC authorizer is enabled for this cluster.
When enabled, identities in the system, including service accounts,
nodes, and controllers, will have statically granted permissions
beyond those provided by the RBAC configuration or IAM. Defaults
to false.
type: boolean
enableShieldedNodes:
description: Enable Shielded Nodes features on all nodes in this cluster.
type: boolean
enableTpu:
description: Immutable. Whether to enable Cloud TPU resources in this
cluster.
type: boolean
initialNodeCount:
description: Immutable. The number of nodes to create in this cluster's
default node pool. In regional or multi-zonal clusters, this is
the number of nodes per zone. Must be set if node_pool is not set.
If you're using google_container_node_pool objects with no default
node pool, you'll need to set this to a value of at least 1, alongside
setting remove_default_node_pool to true.
type: integer
ipAllocationPolicy:
description: Immutable. Configuration of cluster IP allocation for
VPC-native clusters. Adding this block enables IP aliasing, making
the cluster VPC-native instead of routes-based.
properties:
clusterIpv4CidrBlock:
description: Immutable. The IP address range for the cluster pod
IPs. Set to blank to have a range chosen with the default size.
Set to /netmask (e.g. /14) to have a range chosen with a specific
netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) from the
RFC-1918 private networks (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
to pick a specific range to use.
type: string
clusterSecondaryRangeName:
description: Immutable. The name of the existing secondary range
in the cluster's subnetwork to use for pod IP addresses. Alternatively,
cluster_ipv4_cidr_block can be used to automatically create
a GKE-managed one.
type: string
servicesIpv4CidrBlock:
description: Immutable. The IP address range of the services IPs
in this cluster. Set to blank to have a range chosen with the
default size. Set to /netmask (e.g. /14) to have a range chosen
with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14)
from the RFC-1918 private networks (e.g. 10.0.0.0/8, 172.16.0.0/12,
192.168.0.0/16) to pick a specific range to use.
type: string
servicesSecondaryRangeName:
description: Immutable. The name of the existing secondary range
in the cluster's subnetwork to use for service ClusterIPs. Alternatively,
services_ipv4_cidr_block can be used to automatically create
a GKE-managed one.
type: string
type: object
location:
description: Immutable. The location (region or zone) in which the
cluster master will be created, as well as the default node location.
If you specify a zone (such as us-central1-a), the cluster will
be a zonal cluster with a single cluster master. If you specify
a region (such as us-west1), the cluster will be a regional cluster
with multiple masters spread across zones in the region, and with
default node locations in those zones as well.
type: string
loggingConfig:
description: Logging configuration for the cluster.
properties:
enableComponents:
description: GKE components exposing logs. Valid values include
SYSTEM_COMPONENTS and WORKLOADS.
items:
type: string
type: array
required:
- enableComponents
type: object
loggingService:
description: The logging service that the cluster should write logs
to. Available options include logging.googleapis.com(Legacy Stackdriver),
logging.googleapis.com/kubernetes(Stackdriver Kubernetes Engine
Logging), and none. Defaults to logging.googleapis.com/kubernetes.
type: string
maintenancePolicy:
description: The maintenance policy to use for the cluster.
properties:
dailyMaintenanceWindow:
description: 'Time window specified for daily maintenance operations.
Specify start_time in RFC3339 format "HH:MM”, where HH : [00-23]
and MM : [00-59] GMT.'
properties:
duration:
type: string
startTime:
type: string
required:
- startTime
type: object
maintenanceExclusion:
description: Exceptions to maintenance window. Non-emergency maintenance
should not occur in these windows.
items:
properties:
endTime:
type: string
exclusionName:
type: string
startTime:
type: string
required:
- endTime
- exclusionName
- startTime
type: object
type: array
recurringWindow:
description: Time window for recurring maintenance operations.
properties:
endTime:
type: string
recurrence:
type: string
startTime:
type: string
required:
- endTime
- recurrence
- startTime
type: object
type: object
masterAuth:
description: DEPRECATED — Basic authentication was removed for GKE
cluster versions >= 1.19. The authentication information for accessing
the Kubernetes master. Some values in this block are only returned
by the API if your service account has permission to get credentials
for your GKE cluster. If you see an unexpected diff removing a username/password
or unsetting your client cert, ensure you have the container.clusters.getCredentials
permission.
properties:
clientCertificate:
description: Base64 encoded public certificate used by clients
to authenticate to the cluster endpoint.
type: string
clientCertificateConfig:
description: Immutable. Whether client certificate authorization
is enabled for this cluster.
properties:
issueClientCertificate:
description: Immutable. Whether client certificate authorization
is enabled for this cluster.
type: boolean
required:
- issueClientCertificate
type: object
clientKey:
description: Base64 encoded private key used by clients to authenticate
to the cluster endpoint.
type: string
clusterCaCertificate:
description: Base64 encoded public certificate that is the root
of trust for the cluster.
type: string
password:
description: The password to use for HTTP basic authentication
when accessing the Kubernetes master endpoint.
oneOf:
- not:
required:
- valueFrom
required:
- value
- not:
required:
- value
required:
- valueFrom
properties:
value:
description: Value of the field. Cannot be used if 'valueFrom'
is specified.
type: string
valueFrom:
description: Source for the field's value. Cannot be used
if 'value' is specified.
properties:
secretKeyRef:
description: Reference to a value with the given key in
the given Secret in the resource's namespace.
properties:
key:
description: Key that identifies the value to be extracted.
type: string
name:
description: Name of the Secret to extract a value
from.
type: string
required:
- name
- key
type: object
type: object
type: object
username:
description: The username to use for HTTP basic authentication
when accessing the Kubernetes master endpoint. If not present
basic auth will be disabled.
type: string
type: object
masterAuthorizedNetworksConfig:
description: The desired configuration options for master authorized
networks. Omit the nested cidr_blocks attribute to disallow external
access (except the cluster node IPs, which GKE automatically whitelists).
properties:
cidrBlocks:
description: External networks that can access the Kubernetes
cluster master through HTTPS.
items:
properties:
cidrBlock:
description: External network that can access Kubernetes
master through HTTPS. Must be specified in CIDR notation.
type: string
displayName:
description: Field for users to identify CIDR blocks.
type: string
required:
- cidrBlock
type: object
type: array
type: object
minMasterVersion:
description: The minimum version of the master. GKE will auto-update
the master to new versions, so this does not guarantee the current
master version--use the read-only master_version field to obtain
that. If unset, the cluster's version will be set by GKE to the
version of the most recent official release (which is not necessarily
the latest version).
type: string
monitoringConfig:
description: Monitoring configuration for the cluster.
properties:
enableComponents:
description: GKE components exposing metrics. Valid values include
SYSTEM_COMPONENTS and WORKLOADS.
items:
type: string
type: array
required:
- enableComponents
type: object
monitoringService:
description: The monitoring service that the cluster should write
metrics to. Automatically send metrics from pods in the cluster
to the Google Cloud Monitoring API. VM metrics will be collected
by Google Compute Engine regardless of this setting Available options
include monitoring.googleapis.com(Legacy Stackdriver), monitoring.googleapis.com/kubernetes(Stackdriver
Kubernetes Engine Monitoring), and none. Defaults to monitoring.googleapis.com/kubernetes.
type: string
networkPolicy:
description: Configuration options for the NetworkPolicy feature.
properties:
enabled:
description: Whether network policy is enabled on the cluster.
type: boolean
provider:
description: The selected network policy provider. Defaults to
PROVIDER_UNSPECIFIED.
type: string
required:
- enabled
type: object
networkRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The selfLink of a ComputeNetwork.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
networkingMode:
description: Immutable. Determines whether alias IPs or routes will
be used for pod IPs in the cluster.
type: string
nodeConfig:
description: Immutable. The configuration of the nodepool.
properties:
bootDiskKMSCryptoKeyRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The selfLink of a KMSCryptoKey.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
diskSizeGb:
description: Immutable. Size of the disk attached to each node,
specified in GB. The smallest allowed disk size is 10GB.
type: integer
diskType:
description: Immutable. Type of the disk attached to each node.
type: string
ephemeralStorageConfig:
description: Immutable. Parameters for the ephemeral storage filesystem.
properties:
localSsdCount:
description: Immutable. Number of local SSDs to use to back
ephemeral storage. Uses NVMe interfaces. Each local SSD
is 375 GB in size.
type: integer
required:
- localSsdCount
type: object
guestAccelerator:
description: Immutable. List of the type and count of accelerator
cards attached to the instance.
items:
properties:
count:
description: Immutable. The number of the accelerator cards
exposed to an instance.
type: integer
gpuPartitionSize:
description: Immutable. Size of partitions to create on
the GPU. Valid values are described in the NVIDIA mig
user guide (https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).
type: string
type:
description: Immutable. The accelerator type resource name.
type: string
required:
- count
- type
type: object
type: array
imageType:
description: The image type to use for this node. Note that for
a given image type, the latest version of it will be used.
type: string
kubeletConfig:
description: Node kubelet configs.
properties:
cpuCfsQuota:
description: Enable CPU CFS quota enforcement for containers
that specify CPU limits.
type: boolean
cpuCfsQuotaPeriod:
description: Set the CPU CFS quota period value 'cpu.cfs_period_us'.
type: string
cpuManagerPolicy:
description: Control the CPU management policy on the node.
type: string
required:
- cpuManagerPolicy
type: object
labels:
additionalProperties:
type: string
description: Immutable. The map of Kubernetes labels (key/value
pairs) to be applied to each node. These will added in addition
to any default label(s) that Kubernetes may apply to the node.
type: object
linuxNodeConfig:
description: Parameters that can be configured on Linux nodes.
properties:
sysctls:
additionalProperties:
type: string
description: The Linux kernel parameters to be applied to
the nodes and all pods running on the nodes.
type: object
required:
- sysctls
type: object
localSsdCount:
description: Immutable. The number of local SSD disks to be attached
to the node.
type: integer
machineType:
description: Immutable. The name of a Google Compute Engine machine
type.
type: string
metadata:
additionalProperties:
type: string
description: Immutable. The metadata key/value pairs assigned
to instances in the cluster.
type: object
minCpuPlatform:
description: Immutable. Minimum CPU platform to be used by this
instance. The instance may be scheduled on the specified or
newer CPU platform.
type: string
oauthScopes:
description: Immutable. The set of Google API scopes to be made
available on all of the node VMs.
items:
type: string
type: array
preemptible:
description: Immutable. Whether the nodes are created as preemptible
VM instances.
type: boolean
sandboxConfig:
description: Immutable. Sandbox configuration for this node.
properties:
sandboxType:
description: Type of the sandbox to use for the node (e.g.
'gvisor').
type: string
required:
- sandboxType
type: object
serviceAccountRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The email of an IAMServiceAccount.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
shieldedInstanceConfig:
description: Immutable. Shielded Instance options.
properties:
enableIntegrityMonitoring:
description: Immutable. Defines whether the instance has integrity
monitoring enabled.
type: boolean
enableSecureBoot:
description: Immutable. Defines whether the instance has Secure
Boot enabled.
type: boolean
type: object
tags:
description: Immutable. The list of instance tags applied to all
nodes.
items:
type: string
type: array
taint:
description: Immutable. List of Kubernetes taints to be applied
to each node.
items:
properties:
effect:
description: Immutable. Effect for taint.
type: string
key:
description: Immutable. Key for taint.
type: string
value:
description: Immutable. Value for taint.
type: string
required:
- effect
- key
- value
type: object
type: array
workloadMetadataConfig:
description: Immutable. The workload metadata configuration for
this node.
properties:
mode:
description: Mode is the configuration for how to expose metadata
to workloads running on the node.
type: string
nodeMetadata:
description: DEPRECATED — Deprecated in favor of mode. NodeMetadata
is the configuration for how to expose metadata to the workloads
running on the node.
type: string
type: object
type: object
nodeLocations:
description: The list of zones in which the cluster's nodes are located.
Nodes must be in the region of their regional cluster or in the
same region as their cluster's zone for zonal clusters. If this
is specified for a zonal cluster, omit the cluster's zone.
items:
type: string
type: array
nodeVersion:
type: string
notificationConfig:
description: The notification config for sending cluster upgrade notifications.
properties:
pubsub:
description: Notification config for Cloud Pub/Sub.
properties:
enabled:
description: Whether or not the notification config is enabled.
type: boolean
topicRef:
description: The PubSubTopic to send the notification to.
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The name of a PubSubTopic.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
required:
- enabled
type: object
required:
- pubsub
type: object
podSecurityPolicyConfig:
description: Configuration for the PodSecurityPolicy feature.
properties:
enabled:
description: Enable the PodSecurityPolicy controller for this
cluster. If enabled, pods must be valid under a PodSecurityPolicy
to be created.
type: boolean
required:
- enabled
type: object
privateClusterConfig:
description: Configuration for private clusters, clusters with private
nodes.
properties:
enablePrivateEndpoint:
description: Immutable. Enables the private cluster feature, creating
a private endpoint on the cluster. In a private cluster, nodes
only have RFC 1918 private addresses and communicate with the
master's private endpoint via private networking.
type: boolean
enablePrivateNodes:
description: Immutable. When true, the cluster's private endpoint
is used as the cluster endpoint and access through the public
endpoint is disabled. When false, either endpoint can be used.
This field only applies to private clusters, when enable_private_nodes
is true.
type: boolean
masterGlobalAccessConfig:
description: Controls cluster master global access settings.
properties:
enabled:
description: Whether the cluster master is accessible globally
or not.
type: boolean
required:
- enabled
type: object
masterIpv4CidrBlock:
description: Immutable. The IP range in CIDR notation to use for
the hosted master network. This range will be used for assigning
private IP addresses to the cluster master(s) and the ILB VIP.
This range must not overlap with any other ranges in use within
the cluster's network, and it must be a /28 subnet. See Private
Cluster Limitations for more details. This field only applies
to private clusters, when enable_private_nodes is true.