forked from GoogleCloudPlatform/k8s-config-connector
-
Notifications
You must be signed in to change notification settings - Fork 0
/
container_v1beta1_containercluster.yaml
1019 lines (1018 loc) · 44.9 KB
/
container_v1beta1_containercluster.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
annotations:
cnrm.cloud.google.com/version: 1.29.0
creationTimestamp: null
labels:
cnrm.cloud.google.com/managed-by-kcc: "true"
cnrm.cloud.google.com/system: "true"
cnrm.cloud.google.com/tf2crd: "true"
name: containerclusters.container.cnrm.cloud.google.com
spec:
group: container.cnrm.cloud.google.com
names:
categories:
- gcp
kind: ContainerCluster
plural: containerclusters
shortNames:
- gcpcontainercluster
- gcpcontainerclusters
singular: containercluster
scope: Namespaced
validation:
openAPIV3Schema:
properties:
apiVersion:
description: 'apiVersion defines the versioned schema of this representation
of an object. Servers should convert recognized schemas to the latest
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
type: string
kind:
description: 'kind is a string value representing the REST resource this
object represents. Servers may infer this from the endpoint the client
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
type: string
metadata:
type: object
spec:
properties:
addonsConfig:
description: The configuration for addons supported by GKE.
properties:
cloudrunConfig:
description: The status of the CloudRun addon. It is disabled by
default. Set disabled = false to enable.
properties:
disabled:
type: boolean
loadBalancerType:
type: string
required:
- disabled
type: object
configConnectorConfig:
description: The of the Config Connector addon.
properties:
enabled:
type: boolean
required:
- enabled
type: object
dnsCacheConfig:
description: The status of the NodeLocal DNSCache addon. It is disabled
by default. Set enabled = true to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
gcePersistentDiskCsiDriverConfig:
description: Whether this cluster should enable the Google Compute
Engine Persistent Disk Container Storage Interface (CSI) Driver.
Defaults to disabled; set enabled = true to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
horizontalPodAutoscaling:
description: The status of the Horizontal Pod Autoscaling addon,
which increases or decreases the number of replica pods a replication
controller has based on the resource usage of the existing pods.
It ensures that a Heapster pod is running in the cluster, which
is also used by the Cloud Monitoring service. It is enabled by
default; set disabled = true to disable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
httpLoadBalancing:
description: The status of the HTTP (L7) load balancing controller
addon, which makes it easy to set up HTTP load balancers for services
in a cluster. It is enabled by default; set disabled = true to
disable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
istioConfig:
description: The status of the Istio addon.
properties:
auth:
description: The authentication type between services in Istio.
Available options include AUTH_MUTUAL_TLS.
type: string
disabled:
description: The status of the Istio addon, which makes it easy
to set up Istio for services in a cluster. It is disabled
by default. Set disabled = false to enable.
type: boolean
required:
- disabled
type: object
kalmConfig:
description: Configuration for the KALM addon, which manages the
lifecycle of k8s. It is disabled by default; Set enabled = true
to enable.
properties:
enabled:
type: boolean
required:
- enabled
type: object
networkPolicyConfig:
description: Whether we should enable the network policy addon for
the master. This must be enabled in order to enable network policy
for the nodes. To enable this, you must also define a network_policy
block, otherwise nothing will happen. It can only be disabled
if the nodes already do not have network policies enabled. Defaults
to disabled; set disabled = false to enable.
properties:
disabled:
type: boolean
required:
- disabled
type: object
type: object
authenticatorGroupsConfig:
description: Immutable. Configuration for the Google Groups for GKE
feature.
properties:
securityGroup:
description: Immutable. The name of the RBAC security group for
use with Google security groups in Kubernetes RBAC. Group name
must be in format gke-security-groups@yourdomain.com.
type: string
required:
- securityGroup
type: object
clusterAutoscaling:
description: Per-cluster configuration of Node Auto-Provisioning with
Cluster Autoscaler to automatically adjust the size of the cluster
and create/delete node pools based on the current needs of the cluster's
workload. See the guide to using Node Auto-Provisioning for more details.
properties:
autoProvisioningDefaults:
description: Contains defaults for a node pool created by NAP.
properties:
minCpuPlatform:
description: Minimum CPU platform to be used by this instance.
The instance may be scheduled on the specified or newer CPU
platform. Applicable values are the friendly names of CPU
platforms, such as Intel Haswell.
type: string
oauthScopes:
description: Scopes that are used by NAP when creating node
pools.
items:
type: string
type: array
serviceAccountRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The email of an IAMServiceAccount.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
type: object
autoscalingProfile:
description: Configuration options for the Autoscaling profile feature,
which lets you choose whether the cluster autoscaler should optimize
for resource utilization or resource availability when deciding
to remove nodes from a cluster. Can be BALANCED or OPTIMIZE_UTILIZATION.
Defaults to BALANCED.
type: string
enabled:
description: Whether node auto-provisioning is enabled. Resource
limits for cpu and memory must be defined to enable node auto-provisioning.
type: boolean
resourceLimits:
description: Global constraints for machine resources in the cluster.
Configuring the cpu and memory types is required if node auto-provisioning
is enabled. These limits will apply to node pool autoscaling in
addition to node auto-provisioning.
items:
properties:
maximum:
description: Maximum amount of the resource in the cluster.
type: integer
minimum:
description: Minimum amount of the resource in the cluster.
type: integer
resourceType:
description: The type of the resource. For example, cpu and
memory. See the guide to using Node Auto-Provisioning for
a list of types.
type: string
required:
- resourceType
type: object
type: array
required:
- enabled
type: object
clusterIpv4Cidr:
description: Immutable. The IP address range of the Kubernetes pods
in this cluster in CIDR notation (e.g. 10.96.0.0/14). Leave blank
to have one automatically chosen or specify a /14 block in 10.0.0.0/8.
This field will only work for routes-based clusters, where ip_allocation_policy
is not defined.
type: string
clusterTelemetry:
properties:
type:
type: string
required:
- type
type: object
databaseEncryption:
description: 'Application-layer Secrets Encryption settings. The object
format is {state = string, key_name = string}. Valid values of state
are: "ENCRYPTED"; "DECRYPTED". key_name is the name of a CloudKMS
key.'
properties:
keyName:
description: The key to use to encrypt/decrypt secrets.
type: string
state:
description: ENCRYPTED or DECRYPTED.
type: string
required:
- state
type: object
datapathProvider:
description: The desired datapath provider for this cluster. By default,
uses the IPTables-based kube-proxy implementation.
type: string
defaultMaxPodsPerNode:
description: Immutable. The default maximum number of pods per node
in this cluster. This doesn't work on "routes-based" clusters, clusters
that don't have IP Aliasing enabled.
type: integer
defaultSnatStatus:
description: Whether the cluster disables default in-node sNAT rules.
In-node sNAT rules will be disabled when defaultSnatStatus is disabled.
properties:
disabled:
description: When disabled is set to false, default IP masquerade
rules will be applied to the nodes to prevent sNAT on cluster
internal traffic.
type: boolean
required:
- disabled
type: object
description:
description: Immutable. Description of the cluster.
type: string
enableBinaryAuthorization:
description: Enable Binary Authorization for this cluster. If enabled,
all container images will be validated by Google Binary Authorization.
type: boolean
enableIntranodeVisibility:
description: Whether Intra-node visibility is enabled for this cluster.
This makes same node pod to pod traffic visible for VPC network.
type: boolean
enableKubernetesAlpha:
description: Immutable. Whether to enable Kubernetes Alpha features
for this cluster. Note that when this option is enabled, the cluster
cannot be upgraded and will be automatically deleted after 30 days.
type: boolean
enableLegacyAbac:
description: Whether the ABAC authorizer is enabled for this cluster.
When enabled, identities in the system, including service accounts,
nodes, and controllers, will have statically granted permissions beyond
those provided by the RBAC configuration or IAM. Defaults to false.
type: boolean
enableShieldedNodes:
description: Enable Shielded Nodes features on all nodes in this cluster.
Defaults to false.
type: boolean
enableTpu:
description: Immutable. Whether to enable Cloud TPU resources in this
cluster.
type: boolean
initialNodeCount:
description: Immutable. The number of nodes to create in this cluster's
default node pool. In regional or multi-zonal clusters, this is the
number of nodes per zone. Must be set if node_pool is not set. If
you're using google_container_node_pool objects with no default node
pool, you'll need to set this to a value of at least 1, alongside
setting remove_default_node_pool to true.
type: integer
ipAllocationPolicy:
description: Immutable. Configuration of cluster IP allocation for VPC-native
clusters. Adding this block enables IP aliasing, making the cluster
VPC-native instead of routes-based.
properties:
clusterIpv4CidrBlock:
description: Immutable. The IP address range for the cluster pod
IPs. Set to blank to have a range chosen with the default size.
Set to /netmask (e.g. /14) to have a range chosen with a specific
netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) from the RFC-1918
private networks (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
to pick a specific range to use.
type: string
clusterSecondaryRangeName:
description: Immutable. The name of the existing secondary range
in the cluster's subnetwork to use for pod IP addresses. Alternatively,
cluster_ipv4_cidr_block can be used to automatically create a
GKE-managed one.
type: string
servicesIpv4CidrBlock:
description: Immutable. The IP address range of the services IPs
in this cluster. Set to blank to have a range chosen with the
default size. Set to /netmask (e.g. /14) to have a range chosen
with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14)
from the RFC-1918 private networks (e.g. 10.0.0.0/8, 172.16.0.0/12,
192.168.0.0/16) to pick a specific range to use.
type: string
servicesSecondaryRangeName:
description: Immutable. The name of the existing secondary range
in the cluster's subnetwork to use for service ClusterIPs. Alternatively,
services_ipv4_cidr_block can be used to automatically create a
GKE-managed one.
type: string
type: object
location:
description: Immutable. The location (region or zone) in which the cluster
master will be created, as well as the default node location. If you
specify a zone (such as us-central1-a), the cluster will be a zonal
cluster with a single cluster master. If you specify a region (such
as us-west1), the cluster will be a regional cluster with multiple
masters spread across zones in the region, and with default node locations
in those zones as well.
type: string
loggingService:
description: The logging service that the cluster should write logs
to. Available options include logging.googleapis.com(Legacy Stackdriver),
logging.googleapis.com/kubernetes(Stackdriver Kubernetes Engine Logging),
and none. Defaults to logging.googleapis.com/kubernetes.
type: string
maintenancePolicy:
description: The maintenance policy to use for the cluster.
properties:
dailyMaintenanceWindow:
description: 'Time window specified for daily maintenance operations.
Specify start_time in RFC3339 format "HH:MM”, where HH : [00-23]
and MM : [00-59] GMT.'
properties:
duration:
type: string
startTime:
type: string
required:
- startTime
type: object
recurringWindow:
description: Time window for recurring maintenance operations.
properties:
endTime:
type: string
recurrence:
type: string
startTime:
type: string
required:
- endTime
- recurrence
- startTime
type: object
type: object
masterAuth:
description: The authentication information for accessing the Kubernetes
master. Some values in this block are only returned by the API if
your service account has permission to get credentials for your GKE
cluster. If you see an unexpected diff removing a username/password
or unsetting your client cert, ensure you have the container.clusters.getCredentials
permission.
properties:
clientCertificate:
description: Base64 encoded public certificate used by clients to
authenticate to the cluster endpoint.
type: string
clientCertificateConfig:
description: Immutable. Whether client certificate authorization
is enabled for this cluster.
properties:
issueClientCertificate:
description: Immutable. Whether client certificate authorization
is enabled for this cluster.
type: boolean
required:
- issueClientCertificate
type: object
clientKey:
description: Base64 encoded private key used by clients to authenticate
to the cluster endpoint.
type: string
clusterCaCertificate:
description: Base64 encoded public certificate that is the root
of trust for the cluster.
type: string
password:
description: The password to use for HTTP basic authentication when
accessing the Kubernetes master endpoint.
oneOf:
- not:
required:
- valueFrom
required:
- value
- not:
required:
- value
required:
- valueFrom
properties:
value:
description: Value of the field. Cannot be used if 'valueFrom'
is specified.
type: string
valueFrom:
description: Source for the field's value. Cannot be used if
'value' is specified.
properties:
secretKeyRef:
description: Reference to a value with the given key in
the given Secret in the resource's namespace.
properties:
key:
description: Key that identifies the value to be extracted.
type: string
name:
description: Name of the Secret to extract a value from.
type: string
required:
- name
- key
type: object
type: object
type: object
username:
description: The username to use for HTTP basic authentication when
accessing the Kubernetes master endpoint. If not present basic
auth will be disabled.
type: string
type: object
masterAuthorizedNetworksConfig:
description: The desired configuration options for master authorized
networks. Omit the nested cidr_blocks attribute to disallow external
access (except the cluster node IPs, which GKE automatically whitelists).
properties:
cidrBlocks:
description: External networks that can access the Kubernetes cluster
master through HTTPS.
items:
properties:
cidrBlock:
description: External network that can access Kubernetes master
through HTTPS. Must be specified in CIDR notation.
type: string
displayName:
description: Field for users to identify CIDR blocks.
type: string
required:
- cidrBlock
type: object
type: array
type: object
minMasterVersion:
description: The minimum version of the master. GKE will auto-update
the master to new versions, so this does not guarantee the current
master version--use the read-only master_version field to obtain that.
If unset, the cluster's version will be set by GKE to the version
of the most recent official release (which is not necessarily the
latest version).
type: string
monitoringService:
description: The monitoring service that the cluster should write metrics
to. Automatically send metrics from pods in the cluster to the Google
Cloud Monitoring API. VM metrics will be collected by Google Compute
Engine regardless of this setting Available options include monitoring.googleapis.com(Legacy
Stackdriver), monitoring.googleapis.com/kubernetes(Stackdriver Kubernetes
Engine Monitoring), and none. Defaults to monitoring.googleapis.com/kubernetes.
type: string
networkPolicy:
description: Configuration options for the NetworkPolicy feature.
properties:
enabled:
description: Whether network policy is enabled on the cluster.
type: boolean
provider:
description: The selected network policy provider. Defaults to PROVIDER_UNSPECIFIED.
type: string
required:
- enabled
type: object
networkRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The selfLink of a ComputeNetwork.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
networkingMode:
description: Immutable. Determines whether alias IPs or routes will
be used for pod IPs in the cluster.
type: string
nodeConfig:
description: Immutable.
properties:
bootDiskKMSCryptoKeyRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The selfLink of a KMSCryptoKey.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
diskSizeGb:
description: Immutable.
type: integer
diskType:
description: Immutable.
type: string
guestAccelerator:
description: Immutable.
items:
properties:
count:
description: Immutable.
type: integer
type:
description: Immutable.
type: string
required:
- count
- type
type: object
type: array
imageType:
type: string
kubeletConfig:
properties:
cpuCfsQuota:
type: boolean
cpuCfsQuotaPeriod:
type: string
cpuManagerPolicy:
type: string
required:
- cpuManagerPolicy
type: object
labels:
additionalProperties:
type: string
description: Immutable.
type: object
linuxNodeConfig:
properties:
sysctls:
additionalProperties:
type: string
type: object
required:
- sysctls
type: object
localSsdCount:
description: Immutable.
type: integer
machineType:
description: Immutable.
type: string
metadata:
additionalProperties:
type: string
description: Immutable.
type: object
minCpuPlatform:
description: Immutable.
type: string
oauthScopes:
description: Immutable.
items:
type: string
type: array
preemptible:
description: Immutable.
type: boolean
sandboxConfig:
description: Immutable.
properties:
sandboxType:
type: string
required:
- sandboxType
type: object
serviceAccountRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The email of an IAMServiceAccount.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
shieldedInstanceConfig:
description: Immutable.
properties:
enableIntegrityMonitoring:
description: Immutable.
type: boolean
enableSecureBoot:
description: Immutable.
type: boolean
type: object
tags:
description: Immutable.
items:
type: string
type: array
taint:
description: Immutable.
items:
properties:
effect:
description: Immutable.
type: string
key:
description: Immutable.
type: string
value:
description: Immutable.
type: string
required:
- effect
- key
- value
type: object
type: array
workloadMetadataConfig:
description: Immutable.
properties:
nodeMetadata:
type: string
required:
- nodeMetadata
type: object
type: object
nodeLocations:
description: The list of zones in which the cluster's nodes are located.
Nodes must be in the region of their regional cluster or in the same
region as their cluster's zone for zonal clusters. If this is specified
for a zonal cluster, omit the cluster's zone.
items:
type: string
type: array
nodeVersion:
type: string
notificationConfig:
description: The notification config for sending cluster upgrade notifications
properties:
pubsub:
description: Notification config for Cloud Pub/Sub
properties:
enabled:
description: Whether or not the notification config is enabled
type: boolean
topicRef:
description: The PubSubTopic to send the notification to.
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The name of a PubSubTopic.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
required:
- enabled
type: object
required:
- pubsub
type: object
podSecurityPolicyConfig:
description: Configuration for the PodSecurityPolicy feature.
properties:
enabled:
description: Enable the PodSecurityPolicy controller for this cluster.
If enabled, pods must be valid under a PodSecurityPolicy to be
created.
type: boolean
required:
- enabled
type: object
privateClusterConfig:
description: Configuration for private clusters, clusters with private
nodes.
properties:
enablePrivateEndpoint:
description: Immutable. Enables the private cluster feature, creating
a private endpoint on the cluster. In a private cluster, nodes
only have RFC 1918 private addresses and communicate with the
master's private endpoint via private networking.
type: boolean
enablePrivateNodes:
description: Immutable. When true, the cluster's private endpoint
is used as the cluster endpoint and access through the public
endpoint is disabled. When false, either endpoint can be used.
This field only applies to private clusters, when enable_private_nodes
is true.
type: boolean
masterGlobalAccessConfig:
description: Controls cluster master global access settings.
properties:
enabled:
description: Whether the cluster master is accessible globally
or not.
type: boolean
required:
- enabled
type: object
masterIpv4CidrBlock:
description: Immutable. The IP range in CIDR notation to use for
the hosted master network. This range will be used for assigning
private IP addresses to the cluster master(s) and the ILB VIP.
This range must not overlap with any other ranges in use within
the cluster's network, and it must be a /28 subnet. See Private
Cluster Limitations for more details. This field only applies
to private clusters, when enable_private_nodes is true.
type: string
peeringName:
description: The name of the peering between this cluster and the
Google owned VPC.
type: string
privateEndpoint:
description: The internal IP address of this cluster's master endpoint.
type: string
publicEndpoint:
description: The external IP address of this cluster's master endpoint.
type: string
required:
- enablePrivateEndpoint
type: object
releaseChannel:
description: Configuration options for the Release channel feature,
which provide more control over automatic upgrades of your GKE clusters.
properties:
channel:
description: The selected release channel.
type: string
required:
- channel
type: object
resourceUsageExportConfig:
description: Configuration for the ResourceUsageExportConfig feature.
properties:
bigqueryDestination:
description: Parameters for using BigQuery as the destination of
resource usage export.
properties:
datasetId:
description: The ID of a BigQuery Dataset.
type: string
required:
- datasetId
type: object
enableNetworkEgressMetering:
description: Whether to enable network egress metering for this
cluster. If enabled, a daemonset will be created in the cluster
to meter network egress traffic.
type: boolean
enableResourceConsumptionMetering:
description: Whether to enable resource consumption metering on
this cluster. When enabled, a table will be created in the resource
export BigQuery dataset to store resource consumption data. The
resulting table can be joined with the resource usage table or
with BigQuery billing export. Defaults to true.
type: boolean
required:
- bigqueryDestination
type: object
subnetworkRef:
oneOf:
- not:
required:
- external
required:
- name
- not:
anyOf:
- required:
- name
- required:
- namespace
required:
- external
properties:
external:
description: The selfLink of a ComputeSubnetwork.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
type: string
namespace:
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
type: string
type: object
verticalPodAutoscaling:
description: Vertical Pod Autoscaling automatically adjusts the resources
of pods controlled by it.
properties:
enabled:
description: Enables vertical pod autoscaling.
type: boolean
required:
- enabled
type: object
workloadIdentityConfig:
properties:
identityNamespace:
type: string
required:
- identityNamespace
type: object
required:
- location
type: object
status:
properties:
conditions:
description: Conditions represents the latest available observation
of the resource's current state.
items:
properties:
lastTransitionTime:
description: Last time the condition transitioned from one status
to another.
type: string
message:
description: Human-readable message indicating details about last
transition.
type: string
reason:
description: Unique, one-word, CamelCase reason for the condition's
last transition.
type: string
status:
description: Status is the status of the condition. Can be True,
False, Unknown.
type: string
type:
description: Type is the type of the condition.
type: string
type: object
type: array
endpoint:
description: The IP address of this cluster's Kubernetes master.
type: string
instanceGroupUrls:
description: List of instance group URLs which have been assigned to
the cluster.
items:
type: string
type: array
labelFingerprint:
description: The fingerprint of the set of labels for this cluster.
type: string
masterVersion:
description: The current version of the master in the cluster. This
may be different than the min_master_version set in the config if
the master has been updated by GKE.
type: string
operation:
type: string
selfLink:
description: Server-defined URL for the resource.
type: string
servicesIpv4Cidr: