v1beta1 API Reference

v1beta1

APIEndpoint
AWSSpec
Addons
AzureSpec
CNI
CanalSpec
CloudProviderSpec
ClusterNetworkConfig
ControlPlaneConfig
DNSConfig
DigitalOceanSpec
DynamicAuditLog
DynamicWorkerConfig
ExternalCNISpec
Features
GCESpec
HetznerSpec
HostConfig
KubeOneCluster
MachineControllerConfig
MetricsServer
NoneSpec
OpenIDConnect
OpenIDConnectConfig
OpenstackSpec
PacketSpec
PodNodeSelector
PodNodeSelectorConfig
PodPresets
PodSecurityPolicy
ProviderSpec
ProviderStaticNetworkConfig
ProxyConfig
StaticAuditLog
StaticAuditLogConfig
StaticWorkersConfig
SystemPackages
VersionConfig
VsphereSpec
WeaveNetSpec

APIEndpoint

APIEndpoint is the endpoint used to communicate with the Kubernetes API

Field	Description	Scheme	Required
host	Host is the hostname or IP on which API is running.	string	true
port	Port is the port used to reach to the API. Default value is 6443.	int	false

Back to Group

AWSSpec

AWSSpec defines the AWS cloud provider

Field	Description	Scheme	Required

Back to Group

Addons

Addons config

Field	Description	Scheme	Required
enable	Enable	bool	false
path	Path on the local file system to the directory with addons manifests.	string	true

Back to Group

AzureSpec

AzureSpec defines the Azure cloud provider

Field	Description	Scheme	Required

Back to Group

CNI

CNI config. Only one CNI provider must be used at the single time.

Field	Description	Scheme	Required
canal	Canal	*CanalSpec	false
weaveNet	WeaveNet	*WeaveNetSpec	false
external	External	*ExternalCNISpec	false

Back to Group

CanalSpec

CanalSpec defines the Canal CNI plugin

Field	Description	Scheme	Required
mtu	MTU automatically detected based on the cloudProvider default value is 1450	int	false

Back to Group

CloudProviderSpec

CloudProviderSpec describes the cloud provider that is running the machines. Only one cloud provider must be defined at the single time.

Field	Description	Scheme	Required
external	External	bool	false
cloudConfig	CloudConfig	string	false
aws	AWS	*AWSSpec	false
azure	Azure	*AzureSpec	false
digitalocean	DigitalOcean	*DigitalOceanSpec	false
gce	GCE	*GCESpec	false
hetzner	Hetzner	*HetznerSpec	false
openstack	Openstack	*OpenstackSpec	false
packet	Packet	*PacketSpec	false
vsphere	Vsphere	*VsphereSpec	false
none	None	*NoneSpec	false

Back to Group

ClusterNetworkConfig

ClusterNetworkConfig describes the cluster network

Field	Description	Scheme	Required
podSubnet	PodSubnet default value is "10.244.0.0/16"	string	false
serviceSubnet	ServiceSubnet default value is "10.96.0.0/12"	string	false
serviceDomainName	ServiceDomainName default value is "cluster.local"	string	false
nodePortRange	NodePortRange default value is "30000-32767"	string	false
cni	CNI default value is {canal: {mtu: 1450}}	*CNI	false

Back to Group

ControlPlaneConfig

ControlPlaneConfig defines control plane nodes

Field	Description	Scheme	Required
hosts	Hosts array of all control plane hosts.	[]HostConfig	true

Back to Group

DNSConfig

DNSConfig contains a machine’s DNS configuration

Field	Description	Scheme	Required
servers	Servers	[]string	true

Back to Group

DigitalOceanSpec

DigitalOceanSpec defines the DigitalOcean cloud provider

Field	Description	Scheme	Required

Back to Group

DynamicAuditLog

DynamicAuditLog feature flag

Field	Description	Scheme	Required
enable	Enable Default value is false.	bool	false

Back to Group

DynamicWorkerConfig

DynamicWorkerConfig describes a set of worker machines

Field	Description	Scheme	Required
name	Name	string	true
replicas	Replicas	*int	true
providerSpec	Config	ProviderSpec	true

Back to Group

ExternalCNISpec

ExternalCNISpec defines the external CNI plugin. It’s up to the user’s responsibility to deploy the external CNI plugin manually or as an addon

Field	Description	Scheme	Required

Back to Group

Features

Features controls what features will be enabled on the cluster

Field	Description	Scheme	Required
podNodeSelector	PodNodeSelector	*PodNodeSelector	false
podPresets	PodPresets	*PodPresets	false
podSecurityPolicy	PodSecurityPolicy	*PodSecurityPolicy	false
staticAuditLog	StaticAuditLog	*StaticAuditLog	false
dynamicAuditLog	DynamicAuditLog	*DynamicAuditLog	false
metricsServer	MetricsServer	*MetricsServer	false
openidConnect	OpenIDConnect	*OpenIDConnect	false

Back to Group

GCESpec

GCESpec defines the GCE cloud provider

Field	Description	Scheme	Required

Back to Group

HetznerSpec

HetznerSpec defines the Hetzner cloud provider

Field	Description	Scheme	Required
networkID	NetworkID	string	false

Back to Group

HostConfig

HostConfig describes a single control plane node.

Field	Description	Scheme	Required
publicAddress	PublicAddress is externally accessible IP address from public internet.	string	true
privateAddress	PrivateAddress is internal RFC-1918 IP address.	string	true
sshPort	SSHPort is port to connect ssh to. Default value is 22.	int	false
sshUsername	SSHUsername is system login name. Default value is "root".	string	false
sshPrivateKeyFile	SSHPrivateKeyFile is path to the file with PRIVATE AND CLEANTEXT ssh key. Default value is "".	string	false
sshAgentSocket	SSHAgentSocket path (or reference to the environment) to the SSH agent unix domain socket. Default vaulue is "env:SSH_AUTH_SOCK".	string	false
bastion	Bastion is an IP or hostname of the bastion (or jump) host to connect to. Default value is "".	string	false
bastionPort	BastionPort is SSH port to use when connecting to the bastion if it’s configured in .Bastion. Default value is 22.	int	false
bastionUser	BastionUser is system login name to use when connecting to bastion host. Default value is "root".	string	false
hostname	Hostname is the hostname(1) of the host. Default value is populated at the runtime via running `hostname -f` command over ssh.	string	false
isLeader	IsLeader indicates this host as a session leader. Default value is populated at the runtime.	bool	false
taints	Taints if not provided (i.e. nil) defaults to TaintEffectNoSchedule, with key node-role.kubernetes.io/master for control plane nodes. Explicitly empty (i.e. []corev1.Taint{}) means no taints will be applied (this is default for worker nodes).	[]corev1.Taint	false

Back to Group

KubeOneCluster

KubeOneCluster is KubeOne Cluster API Schema

Field	Description	Scheme	Required
name	Name is the name of the cluster.	string	true
controlPlane	ControlPlane describes the control plane nodes and how to access them.	ControlPlaneConfig	true
apiEndpoint	APIEndpoint are pairs of address and port used to communicate with the Kubernetes API.	APIEndpoint	true
cloudProvider	CloudProvider configures the cloud provider specific features.	CloudProviderSpec	true
versions	Versions defines which Kubernetes version will be installed.	VersionConfig	true
clusterNetwork	ClusterNetwork configures the in-cluster networking.	ClusterNetworkConfig	false
proxy	Proxy configures proxy used while installing Kubernetes and by the Docker daemon.	ProxyConfig	false
staticWorkers	StaticWorkers describes the worker nodes that are managed by KubeOne/kubeadm.	StaticWorkersConfig	false
dynamicWorkers	DynamicWorkers describes the worker nodes that are managed by Kubermatic machine-controller/Cluster-API.	[]DynamicWorkerConfig	false
machineController	MachineController configures the Kubermatic machine-controller component.	*MachineControllerConfig	false
features	Features enables and configures additional cluster features.	Features	false
addons	Addons are used to deploy additional manifests.	*Addons	false
systemPackages	SystemPackages configure kubeone behaviour regarding OS packages.	*SystemPackages	false

Back to Group

MachineControllerConfig

MachineControllerConfig configures kubermatic machine-controller deployment

Field	Description	Scheme	Required
deploy	Deploy	bool	false

Back to Group

MetricsServer

MetricsServer feature flag

Field	Description	Scheme	Required
enable	Enable deployment of metrics-server. Default value is true.	bool	false

Back to Group

NoneSpec

NoneSpec defines a none provider

Field	Description	Scheme	Required

Back to Group

OpenIDConnect

OpenIDConnect feature flag

Field	Description	Scheme	Required
enable	Enable	bool	false
config	Config	OpenIDConnectConfig	true

Back to Group

OpenIDConnectConfig

OpenIDConnectConfig config

Field	Description	Scheme	Required
issuerUrl	IssuerURL	string	true
clientId	ClientID	string	true
usernameClaim	UsernameClaim	string	true
usernamePrefix	UsernamePrefix	string	true
groupsClaim	GroupsClaim	string	true
groupsPrefix	GroupsPrefix	string	true
requiredClaim	RequiredClaim	string	true
signingAlgs	SigningAlgs	string	true
caFile	CAFile	string	true

Back to Group

OpenstackSpec

OpenstackSpec defines the Openstack provider

Field	Description	Scheme	Required

Back to Group

PacketSpec

PacketSpec defines the Packet cloud provider

Field	Description	Scheme	Required

Back to Group

PodNodeSelector

PodNodeSelector feature flag

Field	Description	Scheme	Required
enable	Enable	bool	false
config	Config	PodNodeSelectorConfig	true

Back to Group

PodNodeSelectorConfig

PodNodeSelectorConfig config

Field	Description	Scheme	Required
configFilePath	ConfigFilePath is a path on the local file system to the PodNodeSelector configuration file. ConfigFilePath is a required field. More info: https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#podnodeselector	string	true

Back to Group

PodPresets

PodPresets feature flag

Field	Description	Scheme	Required
enable	Enable	bool	false

Back to Group

PodSecurityPolicy

PodSecurityPolicy feature flag

Field	Description	Scheme	Required
enable	Enable	bool	false

Back to Group

ProviderSpec

ProviderSpec describes a worker node

Field	Description	Scheme	Required
cloudProviderSpec	CloudProviderSpec	json.RawMessage	true
labels	Labels	map[string]string	false
taints	Taints	[]corev1.Taint	false
sshPublicKeys	SSHPublicKeys	[]string	false
operatingSystem	OperatingSystem	string	true
operatingSystemSpec	OperatingSystemSpec	json.RawMessage	false
network	Network	*ProviderStaticNetworkConfig	false
overwriteCloudConfig	OverwriteCloudConfig	*string	false

Back to Group

ProviderStaticNetworkConfig

ProviderStaticNetworkConfig contains a machine’s static network configuration

Field	Description	Scheme	Required
cidr	CIDR	string	true
gateway	Gateway	string	true
dns	DNS	DNSConfig	true

Back to Group

ProxyConfig

ProxyConfig configures proxy for the Docker daemon and is used by KubeOne scripts

Field	Description	Scheme	Required
http	HTTP	string	false
https	HTTPS	string	false
noProxy	NoProxy	string	false

Back to Group

StaticAuditLog

StaticAuditLog feature flag

Field	Description	Scheme	Required
enable	Enable	bool	false
config	Config	StaticAuditLogConfig	true

Back to Group

StaticAuditLogConfig

StaticAuditLogConfig config

Field	Description	Scheme	Required
policyFilePath	PolicyFilePath is a path on local file system to the audit policy manifest which defines what events should be recorded and what data they should include. PolicyFilePath is a required field. More info: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#audit-policy	string	true
logPath	LogPath is path on control plane instances where audit log files are stored. Default value is /var/log/kubernetes/audit.log	string	false
logMaxAge	LogMaxAge is maximum number of days to retain old audit log files. Default value is 30	int	false
logMaxBackup	LogMaxBackup is maximum number of audit log files to retain. Default value is 3.	int	false
logMaxSize	LogMaxSize is maximum size in megabytes of audit log file before it gets rotated. Default value is 100.	int	false

Back to Group

StaticWorkersConfig

StaticWorkersConfig defines static worker nodes provisioned by KubeOne and kubeadm

Field	Description	Scheme	Required
hosts	Hosts	[]HostConfig	false

Back to Group

SystemPackages

SystemPackages controls configurations of APT/YUM

Field	Description	Scheme	Required
configureRepositories	ConfigureRepositories (true by default) is a flag to control automatic configuration of kubeadm / docker repositories.	bool	false

Back to Group

VersionConfig

VersionConfig describes the versions of components that are installed on the machines

Field	Description	Scheme	Required
kubernetes		string	true

Back to Group

VsphereSpec

VsphereSpec defines the vSphere provider

Field	Description	Scheme	Required

Back to Group

WeaveNetSpec

WeaveNetSpec defines the WeaveNet CNI plugin

Field	Description	Scheme	Required
encrypted	Encrypted	bool	false

Back to Group