Kubermatic CRDs Reference

Packages

kubermatic.k8c.io/v1

Resource Types

AKS

Appears in:

FieldDescription
ProviderPreset ProviderPreset
tenantID string
subscriptionID string
clientID string
clientSecret string

Back to top

APIServerSettings

Appears in:

FieldDescription
DeploymentSettings DeploymentSettings
endpointReconcilingDisabled boolean
nodePortRange string

Back to top

AWS

Appears in:

FieldDescription
ProviderPreset ProviderPreset
accessKeyID string
secretAccessKey string
assumeRoleARN string
assumeRoleExternalID string
vpcID string
routeTableID string
instanceProfileName string
securityGroupID string
roleARN string

Back to top

AWSCloudSpec

AWSCloudSpec specifies access data to Amazon Web Services.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
accessKeyID string
secretAccessKey string
assumeRoleARN string
assumeRoleExternalID string
vpcID string
roleARN stringThe IAM role, the control plane will use. The control plane will perform an assume-role
routeTableID string
instanceProfileName string
securityGroupID string
nodePortsAllowedIPRange string

Back to top

Addon

Addon specifies a add-on.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAddon
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec AddonSpec
status AddonStatus

Back to top

AddonCondition

Appears in:

FieldDescription
status ConditionStatusStatus of the condition, one of True, False, Unknown.
lastHeartbeatTime TimeLast time we got an update on a given condition.
lastTransitionTime TimeLast time the condition transit from one status to another.

Back to top

AddonConditionType

Underlying type: string

Appears in:

AddonConfig

AddonConfig specifies addon configuration.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAddonConfig
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec AddonConfigSpec

Back to top

AddonConfigList

AddonConfigList is a list of addon configs.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAddonConfigList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items AddonConfig array

Back to top

AddonConfigSpec

AddonConfigSpec specifies configuration of addon.

Appears in:

FieldDescription
shortDescription stringShortDescription of the configured addon that contains more detailed information about the addon, it will be displayed in the addon details view in the UI
description stringDescription of the configured addon, it will be displayed in the addon overview in the UI
logo stringLogo of the configured addon, encoded in base64
logoFormat stringLogoFormat contains logo format of the configured addon, i.e. svg+xml
formSpec AddonFormControl arrayControls that can be set for configured addon

Back to top

AddonFormControl

AddonFormControl specifies addon form control.

Appears in:

FieldDescription
displayName stringDisplayName is visible in the UI
internalName stringInternalName is used internally to save in the addon object
helpText stringHelpText is visible in the UI next to the control
required booleanRequired indicates if the control has to be set
type stringType of displayed control

Back to top

AddonList

AddonList is a list of addons.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAddonList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Addon array

Back to top

AddonSpec

AddonSpec specifies details of an addon.

Appears in:

FieldDescription
name stringName defines the name of the addon to install
cluster ObjectReferenceCluster is the reference to the cluster the addon should be installed in
variables RawExtensionVariables is free form data to use for parsing the manifest templates
requiredResourceTypes GroupVersionKind arrayRequiredResourceTypes allows to indicate that this addon needs some resource type before it can be installed. This can be used to indicate that a specific CRD and/or extension apiserver must be installed before this addon can be installed. The addon will not be installed until that resource is served.
isDefault booleanIsDefault indicates whether the addon is default

Back to top

AddonStatus

Appears in:

FieldDescription
conditions object (keys:AddonConditionType, values:AddonCondition)

Back to top

AdmissionPlugin

AdmissionPlugin is the type representing a AdmissionPlugin.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAdmissionPlugin
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec AdmissionPluginSpec

Back to top

AdmissionPluginList

AdmissionPluginList is the type representing a AdmissionPluginList.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAdmissionPluginList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items AdmissionPlugin arrayList of Admission Plugins

Back to top

AdmissionPluginSpec

AdmissionPluginSpec specifies admission plugin name and from which k8s version is supported.

Appears in:

FieldDescription
pluginName string
fromVersion SemverFromVersion flag can be empty. It means the plugin fit to all k8s versions

Back to top

Alertmanager

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAlertmanager
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec AlertmanagerSpec
status AlertmanagerStatus

Back to top

AlertmanagerConfigurationStatus

AlertmanagerConfigurationStatus stores status information about the AlertManager configuration.

Appears in:

FieldDescription
lastUpdated TimeLastUpdated stores the last successful time when the configuration was successfully applied
status ConditionStatusStatus of whether the configuration was applied, one of True, False
errorMessage stringErrorMessage contains a default error message in case the configuration could not be applied. Will be reset if the error was resolved and condition becomes True

Back to top

AlertmanagerList

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAlertmanagerList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Alertmanager array

Back to top

AlertmanagerSpec

Appears in:

FieldDescription
configSecret LocalObjectReferenceConfigSecret refers to the Secret in the same namespace as the Alertmanager object, which contains configuration for this Alertmanager.

Back to top

AlertmanagerStatus

AlertmanagerStatus stores status information about the AlertManager.

Appears in:

FieldDescription
configStatus AlertmanagerConfigurationStatus

Back to top

Alibaba

Appears in:

FieldDescription
ProviderPreset ProviderPreset
accessKeyID string
accessKeySecret string

Back to top

AlibabaCloudSpec

AlibabaCloudSpec specifies the access data to Alibaba.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
accessKeyID string
accessKeySecret string

Back to top

AllowedRegistry

AllowedRegistry is the object representing an allowed registry.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAllowedRegistry
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec AllowedRegistrySpec

Back to top

AllowedRegistryList

AllowedRegistryList specifies a list of allowed registries.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringAllowedRegistryList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items AllowedRegistry array

Back to top

AllowedRegistrySpec

AllowedRegistrySpec specifies the data for allowed registry spec.

Appears in:

FieldDescription
registryPrefix stringRegistryPrefix contains the prefix of the registry which will be allowed. User clusters will be able to deploy only images which are prefixed with one of the allowed image registry prefixes.

Back to top

Anexia

Appears in:

FieldDescription
ProviderPreset ProviderPreset
token stringToken is used to authenticate with the Anexia API.

Back to top

AnexiaCloudSpec

AnexiaCloudSpec specifies the access data to Anexia.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
token string

Back to top

AuditLoggingSettings

Appears in:

FieldDescription
enabled boolean
policyPreset AuditPolicyPreset

Back to top

AuditPolicyPreset

Underlying type: string

Appears in:

Azure

Appears in:

FieldDescription
ProviderPreset ProviderPreset
tenantID string
subscriptionID string
clientID string
clientSecret string
resourceGroup string
vnetResourceGroup string
vnet string
subnet string
routeTable string
securityGroup string
loadBalancerSKU LBSKULoadBalancerSKU sets the LB type that will be used for the Azure cluster, possible values are “basic” and “standard”, if empty, “basic” will be used

Back to top

AzureCloudSpec

AzureCloudSpec specifies access credentials to Azure cloud.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
tenantID string
subscriptionID string
clientID string
clientSecret string
resourceGroup string
vnetResourceGroup string
vnet string
subnet string
routeTable string
securityGroup string
nodePortsAllowedIPRange string
assignAvailabilitySet boolean
availabilitySet string
loadBalancerSKU LBSKULoadBalancerSKU sets the LB type that will be used for the Azure cluster, possible values are “basic” and “standard”, if empty, “basic” will be used

Back to top

BackupDestination

BackupDestination defines the bucket name and endpoint as a backup destination, and holds reference to the credentials secret.

Appears in:

FieldDescription
endpoint stringEndpoint is the API endpoint to use for backup and restore.
bucketName stringBucketName is the bucket name to use for backup and restore.
credentials SecretReferenceCredentials hold the ref to the secret with backup credentials

Back to top

BackupStatus

Appears in:

FieldDescription
scheduledTime TimeScheduledTime will always be set when the BackupStatus is created, so it’ll never be nil
backupName string
jobName string
backupStartTime Time
backupFinishedTime Time
backupPhase BackupStatusPhase
backupMessage string
deleteJobName string
deleteStartTime Time
deleteFinishedTime Time
deletePhase BackupStatusPhase
deleteMessage string

Back to top

BackupStatusPhase

Underlying type: string

Appears in:

BringYourOwnCloudSpec

BringYourOwnCloudSpec specifies access data for a bring your own cluster.

Appears in:

CNIPluginSettings

CNIPluginSettings contains the spec of the CNI plugin used by the Cluster.

Appears in:

FieldDescription
type CNIPluginType
version string

Back to top

CNIPluginType

Underlying type: string

CNIPluginType define the type of CNI plugin installed. e.g. Canal.

Appears in:

CleanupOptions

Appears in:

FieldDescription
enabled boolean
enforced boolean

Back to top

CloudSpec

CloudSpec mutually stores access data to a cloud provider.

Appears in:

FieldDescription
dc stringDatacenterName where the users ‘cloud’ lives in.
providerName stringProviderName is the name of the cloud provider used for this cluster. This must match the given provider spec (e.g. if the providerName is “aws”, then the AWSCloudSpec must be set)
fake FakeCloudSpec
digitalocean DigitaloceanCloudSpec
bringyourown BringYourOwnCloudSpec
aws AWSCloudSpec
azure AzureCloudSpec
openstack OpenstackCloudSpec
packet PacketCloudSpec
hetzner HetznerCloudSpec
vsphere VSphereCloudSpec
gcp GCPCloudSpec
kubevirt KubevirtCloudSpec
alibaba AlibabaCloudSpec
anexia AnexiaCloudSpec
nutanix NutanixCloudSpec

Back to top

Cluster

Cluster is the object representing a cluster.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringCluster
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ClusterSpec
address ClusterAddress
status ClusterStatus

Back to top

ClusterAddress

ClusterAddress stores access and address information of a cluster.

Appears in:

FieldDescription
url stringURL under which the Apiserver is available
port integerPort is the port the API server listens on
externalName stringExternalName is the DNS name for this cluster
internalURL stringInternalName is the seed cluster internal absolute DNS name to the API server
adminToken stringAdminToken is the token for the kubeconfig, the user can download
ip stringIP is the external IP under which the apiserver is available

Back to top

ClusterCondition

Appears in:

FieldDescription
status ConditionStatusStatus of the condition, one of True, False, Unknown.
kubermaticVersion stringKubermaticVersion current kubermatic version.
lastHeartbeatTime TimeLast time we got an update on a given condition.
lastTransitionTime TimeLast time the condition transit from one status to another.
reason string(brief) reason for the condition’s last transition.
message stringHuman readable message indicating details about last transition.

Back to top

ClusterConditionType

Underlying type: string

ClusterConditionType is used to indicate the type of a cluster condition. For all condition types, the true value must indicate success. All condition types must be registered within the AllClusterConditionTypes variable.

Appears in:

ClusterList

ClusterList specifies a list of clusters.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringClusterList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Cluster array

Back to top

ClusterNetworkingConfig

ClusterNetworkingConfig specifies the different networking parameters for a cluster.

Appears in:

FieldDescription
services NetworkRangesThe network ranges from which service VIPs are allocated.
pods NetworkRangesThe network ranges from which POD networks are allocated.
dnsDomain stringDomain name for services.
proxyMode stringProxyMode defines the kube-proxy mode (“ipvs” / “iptables” / “ebpf”). Defaults to “ipvs”. “ebpf” disables kube-proxy and requires CNI support.
ipvs IPVSConfigurationIPVS defines kube-proxy ipvs configuration options
nodeLocalDNSCacheEnabled booleanNodeLocalDNSCacheEnabled controls whether the NodeLocal DNS Cache feature is enabled. Defaults to true.
konnectivityEnabled booleanKonnectivityEnabled enables konnectivity for controlplane to node network communication.

Back to top

ClusterSpec

ClusterSpec specifies the data for a new cluster.

Appears in:

FieldDescription
cloud CloudSpec
clusterNetwork ClusterNetworkingConfig
machineNetworks MachineNetworkingConfig array
version SemverVersion defines the wanted version of the control plane
humanReadableName stringHumanReadableName is the cluster name provided by the user
exposeStrategy ExposeStrategyExposeStrategy is the approach we use to expose this cluster, either via NodePort or via a dedicated LoadBalancer
pause booleanPause tells that this cluster is currently not managed by the controller. It indicates that the user needs to do some action to resolve the pause.
pauseReason stringPauseReason is the reason why the cluster is no being managed.
debugLog booleanDebugLog enables more verbose logging by KKP’s usercluster-controller-manager.
componentsOverride ComponentSettingsOptional component specific overrides
oidc OIDCSettings
features object (keys:string, values:boolean)Feature flags This unfortunately has to be a string map, because we use it in templating and that can not cope with string types
updateWindow UpdateWindow
usePodSecurityPolicyAdmissionPlugin boolean
usePodNodeSelectorAdmissionPlugin boolean
useEventRateLimitAdmissionPlugin boolean
enableUserSSHKeyAgent booleanEnableUserSSHKeyAgent control whether the UserSSHKeyAgent will be deployed in the user cluster or not. If it was enabled, the agent will be deployed and used to sync the user ssh keys, that the user attach to the created cluster. If the agent was disabled, it won’t be deployed in the user cluster, thus after the cluster creation any attached ssh keys won’t be synced to the worker nodes. Once the agent is enabled/disabled it cannot be changed after the cluster is being created.
enableOperatingSystemManager booleanEnableOperatingSystemManager enables OSM which in-turn is responsible for creating and managing worker node configuration
podNodeSelectorAdmissionPluginConfig object (keys:string, values:string)PodNodeSelectorAdmissionPluginConfig provides the configuration for the PodNodeSelector. It’s used by the backend to create a configuration file for this plugin. The key:value from the map is converted to the namespace: in the file. The format in a file: podNodeSelectorPluginConfig: clusterDefaultNodeSelector: namespace1: namespace2:
eventRateLimitConfig EventRateLimitConfigEventRateLimitConfig allows configuring the EventRateLimit admission plugin (if enabled via useEventRateLimitAdmissionPlugin) to create limits on Kubernetes event generation. The EventRateLimit plugin is capable of comparing incoming Events to several configured buckets based on the type of event rate limit.
admissionPlugins string arrayAdmissionPlugins provides the ability to pass arbitrary names of admission plugins to kube-apiserver
auditLogging AuditLoggingSettings
opaIntegration OPAIntegrationSettingsOPAIntegration is a preview feature that enables OPA integration with Kubermatic for the cluster. Enabling it causes gatekeeper and its resources to be deployed on the user cluster. By default it is disabled.
serviceAccount ServiceAccountSettingsServiceAccount contains service account related settings for the kube-apiserver of user cluster.
mla MLASettingsMLA contains monitoring, logging and alerting related settings for the user cluster.
containerRuntime stringContainerRuntime to use, i.e. Docker or containerd. By default containerd will be used.
cniPlugin CNIPluginSettingsCNIPlugin contains the spec of the CNI plugin to be installed in the cluster.

Back to top

ClusterStatus

ClusterStatus stores status information about a cluster.

Appears in:

FieldDescription
lastUpdated Time
extendedHealth ExtendedClusterHealthExtendedHealth exposes information about the current health state. Extends standard health status for new states.
lastProviderReconciliation TimeLastProviderReconciliation is the time when the cloud provider resources were last fully reconciled (during normal cluster reconciliation, KKP does not re-check things like security groups, networks etc.).
namespaceName stringNamespaceName defines the namespace the control plane of this cluster is deployed in
userName stringUserName contains the name of the owner of this cluster
userEmail stringUserEmail contains the email of the owner of this cluster
errorReason ClusterStatusErrorErrorReason contains a error reason in case the controller encountered an error. Will be reset if the error was resolved
errorMessage stringErrorMessage contains a default error message in case the controller encountered an error. Will be reset if the error was resolved
conditions object (keys:ClusterConditionType, values:ClusterCondition)Conditions contains conditions the cluster is in, its primary use case is status signaling between controllers or between controllers and the API
cloudMigrationRevision integerCloudMigrationRevision describes the latest version of the migration that has been done It is used to avoid redundant and potentially costly migrations
inheritedLabels object (keys:string, values:string)InheritedLabels are labels the cluster inherited from the project. They are read-only for users.

Back to top

ClusterStatusError

Underlying type: string

Appears in:

ClusterTemplate

ClusterTemplate is the object representing a cluster template.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringClusterTemplate
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
clusterLabels object (keys:string, values:string)
inheritedClusterLabels object (keys:string, values:string)
credential string
userSSHKeys ClusterTemplateSSHKey array
spec ClusterSpec

Back to top

ClusterTemplateInstance

ClusterTemplateInstance is the object representing a cluster template instance.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringClusterTemplateInstance
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ClusterTemplateInstanceSpec

Back to top

ClusterTemplateInstanceList

ClusterTemplateInstanceList specifies a list of cluster template instances.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringClusterTemplateInstanceList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items ClusterTemplateInstance array

Back to top

ClusterTemplateInstanceSpec

ClusterTemplateInstanceSpec specifies the data for cluster instances.

Appears in:

FieldDescription
projectID string
clusterTemplateID string
clusterTemplateName string
replicas integer

Back to top

ClusterTemplateList

ClusterTemplateList specifies a list of cluster templates.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringClusterTemplateList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items ClusterTemplate array

Back to top

ClusterTemplateSSHKey

ClusterTemplateSSHKey is the object for holding SSH key.

Appears in:

FieldDescription
name string
id string

Back to top

ComponentSettings

Appears in:

FieldDescription
apiserver APIServerSettings
controllerManager ControllerSettings
scheduler ControllerSettings
etcd EtcdStatefulSetSettings
prometheus StatefulSetSettings
nodePortProxyEnvoy NodeportProxyComponent

Back to top

Constraint

Constraint specifies a kubermatic wrapper for the gatekeeper constraints.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringConstraint
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ConstraintSpec

Back to top

ConstraintList

ConstraintList specifies a list of constraints.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringConstraintList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Constraint array

Back to top

ConstraintSelector

ConstraintSelector is the object holding the cluster selection filters.

Appears in:

FieldDescription
providers string arrayProviders is a list of cloud providers to which the Constraint applies to. Empty means all providers are selected.
labelSelector LabelSelectorLabelSelector selects the Clusters to which the Constraint applies based on their labels

Back to top

ConstraintSpec

ConstraintSpec specifies the data for the constraint.

Appears in:

FieldDescription
constraintType stringConstraintType specifies the type of gatekeeper constraint that the constraint applies to
disabled booleanDisabled is the flag for disabling OPA constraints
match MatchMatch contains the constraint to resource matching data
parameters object (keys:string, values:integer array)Parameters specifies the parameters used by the constraint template REGO. It supports both the legacy rawJSON parameters, in which all the parameters are set in a JSON string, and regular parameters like in Gatekeeper Constraints. If rawJSON is set, during constraint syncing to the user cluster, the other parameters are ignored Example with rawJSON parameters:
parameters: rawJSON: ‘{“labels”:[“gatekeeper”]}’
And with regular parameters:
parameters: labels: [“gatekeeper”]
selector ConstraintSelectorSelector specifies the cluster selection filters

Back to top

ConstraintTemplate

ConstraintTemplate is the object representing a kubermatic wrapper for a gatekeeper constraint template.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringConstraintTemplate
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ConstraintTemplateSpec

Back to top

ConstraintTemplateList

ConstraintTemplateList specifies a list of constraint templates.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringConstraintTemplateList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items ConstraintTemplate array

Back to top

ConstraintTemplateSelector

ConstraintTemplateSelector is the object holding the cluster selection filters.

Appears in:

FieldDescription
providers string arrayProviders is a list of cloud providers to which the Constraint Template applies to. Empty means all providers are selected.
labelSelector LabelSelectorLabelSelector selects the Clusters to which the Constraint Template applies based on their labels

Back to top

ConstraintTemplateSpec

ConstraintTemplateSpec is the object representing the gatekeeper constraint template spec and kubermatic related spec.

Appears in:

FieldDescription
crd CRD
targets Target array
selector ConstraintTemplateSelector

Back to top

ControllerSettings

Appears in:

FieldDescription
DeploymentSettings DeploymentSettings
leaderElection LeaderElectionSettings

Back to top

Appears in:

FieldDescription
label string
url string
icon string
location string

Back to top

Datacenter

Appears in:

FieldDescription
country stringOptional: Country of the seed as ISO-3166 two-letter code, e.g. DE or UK. For informational purposes in the Kubermatic dashboard only.
location stringOptional: Detailed location of the cluster, like “Hamburg” or “Datacenter 7”. For informational purposes in the Kubermatic dashboard only.
node NodeSettingsNode holds node-specific settings, like e.g. HTTP proxy, Docker registries and the like. Proxy settings are inherited from the seed if not specified here.
spec DatacenterSpecSpec describes the cloud provider settings used to manage resources in this datacenter. Exactly one cloud provider must be defined.

Back to top

DatacenterSpec

DatacenterSpec mutually points to provider datacenter spec.

Appears in:

FieldDescription
digitalocean DatacenterSpecDigitalocean
bringyourown DatacenterSpecBringYourOwnBringYourOwn contains settings for clusters using manually created nodes via kubeadm.
aws DatacenterSpecAWS
azure DatacenterSpecAzure
openstack DatacenterSpecOpenstack
packet DatacenterSpecPacket
hetzner DatacenterSpecHetzner
vsphere DatacenterSpecVSphere
gcp DatacenterSpecGCP
kubevirt DatacenterSpecKubevirt
alibaba DatacenterSpecAlibaba
anexia DatacenterSpecAnexia
nutanix DatacenterSpecNutanixNutanix is experimental and unsupported
requiredEmails string arrayOptional: When defined, only users with an e-mail address on the given domains can make use of this datacenter. You can define multiple domains, e.g. “example.com”, one of which must match the email domain exactly (i.e. “example.com” will not match “user@test.example.com”).
enforceAuditLogging booleanEnforceAuditLogging enforces audit logging on every cluster within the DC, ignoring cluster-specific settings.
enforcePodSecurityPolicy booleanEnforcePodSecurityPolicy enforces pod security policy plugin on every clusters within the DC, ignoring cluster-specific settings
providerReconciliationInterval DurationProviderReconciliationInterval is the time that must have passed since a Cluster’s status.lastProviderReconciliation to make the cliuster controller perform an in-depth provider reconciliation, where for example missing security groups will be reconciled. Setting this too low can cause rate limits by the cloud provider, setting this too high means that if a resource at a cloud provider is removed/changed outside of KKP, it will take this long to fix it.

Back to top

DatacenterSpecAWS

DatacenterSpecAWS describes an AWS datacenter.

Appears in:

FieldDescription
region stringThe AWS region to use, e.g. “us-east-1”. For a list of available regions, see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
images object (keys:OperatingSystem, values:string)List of AMIs to use for a given operating system. This gets defaulted by querying for the latest AMI for the given distribution when machines are created, so under normal circumstances it is not necessary to define the AMIs statically.

Back to top

DatacenterSpecAlibaba

DatacenterSpecAlibaba describes a alibaba datacenter.

Appears in:

FieldDescription
region stringRegion to use, for a full list of regions see https://www.alibabacloud.com/help/doc-detail/40654.htm

Back to top

DatacenterSpecAnexia

DatacenterSpecAnexia describes a anexia datacenter.

Appears in:

FieldDescription
locationID stringLocationID the location of the region

Back to top

DatacenterSpecAzure

DatacenterSpecAzure describes an Azure cloud datacenter.

Appears in:

FieldDescription
location stringRegion to use, for example “westeurope”. A list of available regions can be found at https://azure.microsoft.com/en-us/global-infrastructure/locations/

Back to top

DatacenterSpecBringYourOwn

DatacenterSpecBringYourOwn describes a datacenter our of bring your own nodes.

Appears in:

DatacenterSpecDigitalocean

DatacenterSpecDigitalocean describes a DigitalOcean datacenter.

Appears in:

FieldDescription
region stringDatacenter location, e.g. “ams3”. A list of existing datacenters can be found at https://www.digitalocean.com/docs/platform/availability-matrix/

Back to top

DatacenterSpecGCP

DatacenterSpecGCP describes a GCP datacenter.

Appears in:

FieldDescription
region stringRegion to use, for example “europe-west3”, for a full list of regions see https://cloud.google.com/compute/docs/regions-zones/
zoneSuffixes string arrayList of enabled zones, for example [a, c]. See the link above for the available zones in your chosen region.
regional booleanOptional: Regional clusters spread their resources across multiple availability zones. Refer to the official documentation for more details on this: https://cloud.google.com/kubernetes-engine/docs/concepts/regional-clusters

Back to top

DatacenterSpecHetzner

DatacenterSpecHetzner describes a Hetzner cloud datacenter.

Appears in:

FieldDescription
datacenter stringDatacenter location, e.g. “nbg1-dc3”. A list of existing datacenters can be found at https://wiki.hetzner.de/index.php/Rechenzentren_und_Anbindung/en
network stringNetwork is the pre-existing Hetzner network in which the machines are running. While machines can be in multiple networks, a single one must be chosen for the HCloud CCM to work.
location stringOptional: Detailed location of the datacenter, like “Hamburg” or “Datacenter 7”. For informational purposes only.

Back to top

DatacenterSpecKubevirt

DatacenterSpecKubevirt describes a kubevirt datacenter.

Appears in:

FieldDescription
dnsPolicy stringDNSPolicy represents the dns policy for the pod. Valid values are ‘ClusterFirstWithHostNet’, ‘ClusterFirst’, ‘Default’ or ‘None’. Defaults to “ClusterFirst”. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.
dnsConfig PodDNSConfigDNSConfig represents the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.

Back to top

DatacenterSpecNutanix

DatacenterSpecNutanix describes a Nutanix datacenter.

Appears in:

FieldDescription
endpoint stringEndpoint to use for accessing Nutanix Prism Central. No protocol or port should be passed, for example “nutanix.example.com” or “10.0.0.1”
port integerOptional: Port to use when connecting to the Nutanix Prism Central endpoint (defaults to 9440)
allowInsecure booleanOptional: AllowInsecure allows to disable the TLS certificate check against the endpoint (defaults to false)
images object (keys:OperatingSystem, values:string)Images to use for each supported operating system

Back to top

DatacenterSpecOpenstack

DatacenterSpecOpenstack describes an OpenStack datacenter.

Appears in:

FieldDescription
authURL string
availabilityZone string
region string
ignoreVolumeAZ booleanOptional
enforceFloatingIP booleanOptional
dnsServers string arrayUsed for automatic network creation
images object (keys:OperatingSystem, values:string)Images to use for each supported operating system.
manageSecurityGroups booleanOptional: Gets mapped to the “manage-security-groups” setting in the cloud config. See https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#load-balancer This setting defaults to true.
useOctavia booleanOptional: Gets mapped to the “use-octavia” setting in the cloud config. use-octavia is enabled by default in CCM since v1.17.0, and disabled by default with the in-tree cloud provider.
trustDevicePath booleanOptional: Gets mapped to the “trust-device-path” setting in the cloud config. See https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#block-storage This setting defaults to false.
nodeSizeRequirements OpenstackNodeSizeRequirements
enabledFlavors string arrayOptional: List of enabled flavors for the given datacenter

Back to top

DatacenterSpecPacket

DatacenterSpecPacket describes a Packet datacenter.

Appears in:

FieldDescription
facilities string arrayThe list of enabled facilities, for example “ams1”, for a full list of available facilities see https://support.packet.com/kb/articles/data-centers

Back to top

DatacenterSpecVSphere

DatacenterSpecVSphere describes a vSphere datacenter.

Appears in:

FieldDescription
endpoint stringEndpoint URL to use, including protocol, for example “https://vcenter.example.com”.
allowInsecure booleanIf set to true, disables the TLS certificate check against the endpoint.
datastore stringThe default Datastore to be used for provisioning volumes using storage classes/dynamic provisioning and for storing virtual machine files in case no Datastore or DatastoreCluster is provided at Cluster level.
datacenter stringThe name of the datacenter to use.
cluster stringThe name of the vSphere cluster to use. Used for out-of-tree CSI Driver.
storagePolicy stringThe name of the storage policy to use for the storage class created in the user cluster.
rootPath stringOptional: The root path for cluster specific VM folders. Each cluster gets its own folder below the root folder. Must be the FQDN (for example “/datacenter-1/vm/all-kubermatic-vms-in-here”) and defaults to the root VM folder: “/datacenter-1/vm”
templates object (keys:OperatingSystem, values:string)A list of VM templates to use for a given operating system. You must define at least one template. See: https://github.com/kubermatic/machine-controller/blob/master/docs/vsphere.md#template-vms-preparation
infraManagementUser VSphereCredentialsOptional: Infra management user is the user that will be used for everything except the cloud provider functionality, which will still use the credentials passed in via the Kubermatic dashboard/API.

Back to top

DeploymentSettings

Appears in:

FieldDescription
replicas integer
resources ResourceRequirements
tolerations Toleration array

Back to top

Digitalocean

Appears in:

FieldDescription
ProviderPreset ProviderPreset
token stringToken is used to authenticate with the DigitalOcean API.

Back to top

DigitaloceanCloudSpec

DigitaloceanCloudSpec specifies access data to DigitalOcean.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
token string

Back to top

EKS

Appears in:

FieldDescription
ProviderPreset ProviderPreset
accessKeyID string
secretAccessKey string
region string

Back to top

EtcdBackupConfig

EtcdBackupConfig specifies a add-on.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringEtcdBackupConfig
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec EtcdBackupConfigSpec
status EtcdBackupConfigStatus

Back to top

EtcdBackupConfigCondition

Appears in:

FieldDescription
status ConditionStatusStatus of the condition, one of True, False, Unknown.
lastHeartbeatTime TimeLast time we got an update on a given condition.
lastTransitionTime TimeLast time the condition transit from one status to another.
reason string(brief) reason for the condition’s last transition.
message stringHuman readable message indicating details about last transition.

Back to top

EtcdBackupConfigConditionType

Underlying type: string

EtcdBackupConfigConditionType is used to indicate the type of a EtcdBackupConfig condition. For all condition types, the true value must indicate success. All condition types must be registered within the AllClusterConditionTypes variable.

Appears in:

EtcdBackupConfigList

EtcdBackupConfigList is a list of etcd backup configs.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringEtcdBackupConfigList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items EtcdBackupConfig array

Back to top

EtcdBackupConfigSpec

EtcdBackupConfigSpec specifies details of an etcd backup.

Appears in:

FieldDescription
name stringName defines the name of the backup The name of the backup file in S3 will be - If a schedule is set (see below), - will be appended.
cluster ObjectReferenceCluster is the reference to the cluster whose etcd will be backed up
schedule stringSchedule is a cron expression defining when to perform the backup. If not set, the backup is performed exactly once, immediately.
keep integerKeep is the number of backups to keep around before deleting the oldest one If not set, defaults to DefaultKeptBackupsCount. Only used if Schedule is set.
destination stringDestination indicates where the backup will be stored. The destination name must correspond to a destination in the cluster’s Seed.Spec.EtcdBackupRestore.

Back to top

EtcdBackupConfigStatus

Appears in:

FieldDescription
currentBackups BackupStatus arrayCurrentBackups tracks the creation and deletion progress of all backups managed by the EtcdBackupConfig
conditions object (keys:EtcdBackupConfigConditionType, values:EtcdBackupConfigCondition)Conditions contains conditions of the EtcdBackupConfig
cleanupRunning booleanIf the controller was configured with a cleanupContainer, CleanupRunning keeps track of the corresponding job

Back to top

EtcdBackupRestore

EtcdBackupRestore holds the configuration of the automatic backup and restores.

Appears in:

FieldDescription
destinations object (keys:string, values:BackupDestination)Destinations stores all the possible destinations where the backups for the Seed can be stored. If not empty, it enables automatic backup and restore for the seed.
defaultDestination stringDefaultDestination marks the default destination that will be used for the default etcd backup config which is created for every user cluster. Has to correspond to a destination in Destinations. If removed, it removes the related default etcd backup configs.

Back to top

EtcdRestore

EtcdRestore specifies a add-on.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringEtcdRestore
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec EtcdRestoreSpec
status EtcdRestoreStatus

Back to top

EtcdRestoreList

EtcdRestoreList is a list of etcd restores.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringEtcdRestoreList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items EtcdRestore array

Back to top

EtcdRestoreSpec

EtcdRestoreSpec specifies details of an etcd restore.

Appears in:

FieldDescription
name stringName defines the name of the restore The name of the restore file in S3 will be - If a schedule is set (see below), - will be appended.
cluster ObjectReferenceCluster is the reference to the cluster whose etcd will be backed up
backupName stringBackupName is the name of the backup to restore from
backupDownloadCredentialsSecret stringBackupDownloadCredentialsSecret is the name of a secret in the cluster-xxx namespace containing credentials needed to download the backup
destination stringDestination indicates where the backup was stored. The destination name should correspond to a destination in the cluster’s Seed.Spec.EtcdBackupRestore. If empty, it will use the legacy destination configured in Seed.Spec.BackupRestore

Back to top

EtcdRestoreStatus

Appears in:

FieldDescription
phase EtcdRestorePhase
restoreTime Time

Back to top

EtcdStatefulSetSettings

Appears in:

FieldDescription
clusterSize integer
storageClass string
resources ResourceRequirements
tolerations Toleration array

Back to top

EventRateLimitConfig

Appears in:

FieldDescription
server EventRateLimitConfigItem
namespace EventRateLimitConfigItem
user EventRateLimitConfigItem
sourceAndObject EventRateLimitConfigItem

Back to top

EventRateLimitConfigItem

Appears in:

FieldDescription
qps integer
burst integer
cacheSize integer

Back to top

ExposeStrategy

Underlying type: string

ExposeStrategy is the strategy to expose the cluster with.

Appears in:

ExtendedClusterHealth

ExtendedClusterHealth stores health information of a cluster.

Appears in:

FieldDescription
apiserver HealthStatus
scheduler HealthStatus
controller HealthStatus
machineController HealthStatus
etcd HealthStatus
openvpn HealthStatus
cloudProviderInfrastructure HealthStatus
userClusterControllerManager HealthStatus
gatekeeperController HealthStatus
gatekeeperAudit HealthStatus
monitoring HealthStatus
logging HealthStatus
alertmanagerConfig HealthStatus
mlaGateway HealthStatus

Back to top

ExternalCluster

ExternalCluster is the object representing an external kubernetes cluster.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringExternalCluster
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ExternalClusterSpec

Back to top

ExternalClusterAKSCloudSpec

Appears in:

FieldDescription
name string
tenantID string
subscriptionID string
clientID string
clientSecret string
resourceGroup string
credentialsReference GlobalSecretKeySelector

Back to top

ExternalClusterCloudSpec

ExternalClusterCloudSpec mutually stores access data to a cloud provider.

Appears in:

FieldDescription
gke ExternalClusterGKECloudSpec
eks ExternalClusterEKSCloudSpec
aks ExternalClusterAKSCloudSpec

Back to top

ExternalClusterEKSCloudSpec

Appears in:

FieldDescription
name string
accessKeyID string
secretAccessKey string
credentialsReference GlobalSecretKeySelector
region string

Back to top

ExternalClusterGKECloudSpec

Appears in:

FieldDescription
name string
serviceAccount string
credentialsReference GlobalSecretKeySelector
zone string

Back to top

ExternalClusterList

ExternalClusterList specifies a list of external kubernetes clusters.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringExternalClusterList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items ExternalCluster array

Back to top

ExternalClusterSpec

ExternalClusterSpec specifies the data for a new external kubernetes cluster.

Appears in:

FieldDescription
humanReadableName stringHumanReadableName is the cluster name provided by the user
kubeconfigReference GlobalSecretKeySelector
cloudSpec ExternalClusterCloudSpec

Back to top

FakeCloudSpec

FakeCloudSpec specifies access data for a fake cloud.

Appears in:

FieldDescription
token string

Back to top

GCP

Appears in:

FieldDescription
ProviderPreset ProviderPreset
serviceAccount string
network string
subnetwork string

Back to top

GCPCloudSpec

GCPCloudSpec specifies access data to GCP.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
serviceAccount string
network string
subnetwork string
nodePortsAllowedIPRange string

Back to top

GKE

Appears in:

FieldDescription
ProviderPreset ProviderPreset
serviceAccount string

Back to top

GroupVersionKind

GroupVersionKind unambiguously identifies a kind. It doesn’t anonymously include GroupVersion to avoid automatic coercion. It doesn’t use a GroupVersion to avoid custom marshalling.

Appears in:

FieldDescription
group string
version string

Back to top

HealthStatus

Underlying type: string

Appears in:

Hetzner

Appears in:

FieldDescription
ProviderPreset ProviderPreset
token stringToken is used to authenticate with the Hetzner API.
network stringNetwork is the pre-existing Hetzner network in which the machines are running. While machines can be in multiple networks, a single one must be chosen for the HCloud CCM to work. If this is empty, the network configured on the datacenter will be used.

Back to top

HetznerCloudSpec

HetznerCloudSpec specifies access data to hetzner cloud.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
token stringToken is used to authenticate with the Hetzner cloud API.
network stringNetwork is the pre-existing Hetzner network in which the machines are running. While machines can be in multiple networks, a single one must be chosen for the HCloud CCM to work. If this is empty, the network configured on the datacenter will be used.

Back to top

IPVSConfiguration

IPVSConfiguration contains ipvs-related configuration details for kube-proxy.

Appears in:

FieldDescription
strictArp booleanStrictArp configure arp_ignore and arp_announce to avoid answering ARP queries from kube-ipvs0 interface. defaults to true.

Back to top

Incompatibility

Incompatibility represents a version incompatibility for a user cluster.

Appears in:

FieldDescription
provider ProviderTypeProvider to which to apply the compatibility check
version stringVersion is the Kubernetes version that must be checked. Wildcards are allowed, e.g. “1.22.*”.
condition ConditionTypeCondition is the cluster or datacenter condition that must be met to block a specific version
operation OperationTypeOperation is the operation triggering the compatibility check (CREATE or UPDATE)

Back to top

Kind

Kind specifies the resource Kind and APIGroup.

Appears in:

FieldDescription
kinds string arrayKinds specifies the kinds of the resources
apiGroups string arrayAPIGroups specifies the APIGroups of the resources

Back to top

KubermaticAPIConfiguration

KubermaticAPIConfiguration configures the dashboard.

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the Kubermatic REST API image.
accessibleAddons string arrayAccessibleAddons is a list of addons that should be enabled in the API.
pprofEndpoint stringPProfEndpoint controls the port the API should listen on to provide pprof data. This port is never exposed from the container and only available via port-forwardings.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.
debugLog booleanDebugLog enables more verbose logging.
replicas integerReplicas sets the number of pod replicas for the API deployment.

Back to top

KubermaticAddonsConfiguration

KubermaticAddonConfiguration describes the addons for a given cluster runtime.

Appears in:

FieldDescription
default string arrayDefault is the list of addons to be installed by default into each cluster. Mutually exclusive with “defaultManifests”.
defaultManifests stringDefaultManifests is a list of addon manifests to install into all clusters. Mutually exclusive with “default”.
dockerRepository stringDockerRepository is the repository containing the Docker image containing the possible addon manifests.
dockerTagSuffix stringDockerTagSuffix is appended to the tag used for referring to the addons image. If left empty, the tag will be the KKP version (e.g. “v2.15.0”), with a suffix it becomes “v2.15.0-SUFFIX”.

Back to top

KubermaticAuthConfiguration

KubermaticAuthConfiguration defines keys and URLs for Dex.

Appears in:

FieldDescription
clientID string
tokenIssuer string
issuerRedirectURL string
issuerClientID string
issuerClientSecret string
issuerCookieKey string
serviceAccountKey string
skipTokenIssuerTLSVerify boolean

Back to top

KubermaticConfiguration

KubermaticConfiguration is the configuration required for running Kubermatic.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringKubermaticConfiguration
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec KubermaticConfigurationSpec

Back to top

KubermaticConfigurationList

KubermaticConfigurationList is a collection of KubermaticConfigurations.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringKubermaticConfigurationList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items KubermaticConfiguration array

Back to top

KubermaticConfigurationSpec

KubermaticConfigurationSpec is the spec for a Kubermatic installation.

Appears in:

FieldDescription
caBundle TypedLocalObjectReferenceCABundle references a ConfigMap in the same namespace as the KubermaticConfiguration. This ConfigMap must contain a ca-bundle.pem with PEM-encoded certificates. This bundle automatically synchronized into each seed and each usercluster. APIGroup and Kind are currently ignored.
imagePullSecret stringImagePullSecret is used to authenticate against Docker registries.
auth KubermaticAuthConfigurationAuth defines keys and URLs for Dex.
featureGates object (keys:string, values:boolean)FeatureGates are used to optionally enable certain features.
ui KubermaticUIConfigurationUI configures the dashboard.
api KubermaticAPIConfigurationAPI configures the frontend REST API used by the dashboard.
seedController KubermaticSeedControllerConfigurationSeedController configures the seed-controller-manager.
masterController KubermaticMasterControllerConfigurationMasterController configures the master-controller-manager.
userCluster KubermaticUserClusterConfigurationUserCluster configures various aspects of the user-created clusters.
exposeStrategy ExposeStrategyExposeStrategy is the strategy to expose the cluster with. Note: The seed_dns_overwrite setting of a Seed’s datacenter doesn’t have any effect if this is set to LoadBalancerStrategy.
ingress KubermaticIngressConfigurationIngress contains settings for making the API and UI accessible remotely.
versions KubermaticVersioningConfigurationVersions configures the available and default Kubernetes versions and updates.
verticalPodAutoscaler KubermaticVPAConfigurationVerticalPodAutoscaler configures the Kubernetes VPA integration.
proxy KubermaticProxyConfigurationProxy allows to configure Kubermatic to use proxies to talk to the world outside of its cluster.

Back to top

KubermaticIngressConfiguration

Appears in:

FieldDescription
domain stringDomain is the base domain where the dashboard shall be available. Even with a disabled Ingress, this must always be a valid hostname.
className stringClassName is the Ingress resource’s class name, used for selecting the appropriate ingress controller.
disable booleanDisable will prevent an Ingress from being created at all. This is mostly useful during testing. If the Ingress is disabled, the CertificateIssuer setting can also be left empty, as no Certificate resource will be created.
certificateIssuer TypedLocalObjectReferenceCertificateIssuer is the name of a cert-manager Issuer or ClusterIssuer (default) that will be used to acquire the certificate for the configured domain. To use a namespaced Issuer, set the Kind to “Issuer” and manually create the matching Issuer in Kubermatic’s namespace. Setting an empty name disables the automatic creation of certificates and disables the TLS settings on the Kubermatic Ingress.

Back to top

KubermaticMasterControllerConfiguration

KubermaticMasterControllerConfiguration configures the Kubermatic master controller-manager.

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the Kubermatic master-controller-manager image.
projectsMigrator KubermaticProjectsMigratorConfigurationProjectsMigrator configures the migrator for user projects.
pprofEndpoint stringPProfEndpoint controls the port the master-controller-manager should listen on to provide pprof data. This port is never exposed from the container and only available via port-forwardings.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.
debugLog booleanDebugLog enables more verbose logging.
replicas integerReplicas sets the number of pod replicas for the master-controller-manager.

Back to top

KubermaticProjectsMigratorConfiguration

KubermaticProjectsMigratorConfiguration configures the Kubermatic master controller-manager.

Appears in:

FieldDescription
dryRun booleanDryRun makes the migrator only log the actions it would take.

Back to top

KubermaticProxyConfiguration

KubermaticProxyConfiguration can be used to control how the various Kubermatic components reach external services / the Internet. These settings are reflected as environment variables for the Kubermatic pods.

Appears in:

FieldDescription
http stringHTTP is the full URL to the proxy to use for plaintext HTTP connections, e.g. “http://internalproxy.example.com:8080”.
https stringHTTPS is the full URL to the proxy to use for encrypted HTTPS connections, e.g. “http://secureinternalproxy.example.com:8080”.
noProxy stringNoProxy is a comma-separated list of hostnames / network masks for which no proxy shall be used. If you make use of proxies, this list should contain all local and cluster-internal domains and networks, e.g. “10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,mydomain”. The operator will always prepend the following elements to this list if proxying is configured (i.e. HTTP/HTTPS are not empty): “127.0.0.1/8”, “localhost”, “.local”, “.local.”, “kubernetes”, “.default”, “.svc”

Back to top

KubermaticSeedControllerConfiguration

KubermaticSeedControllerConfiguration configures the Kubermatic seed controller-manager.

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the Kubermatic seed-controller-manager image.
backupStoreContainer stringBackupStoreContainer is the container used for shipping etcd snapshots to a backup location.
backupDeleteContainer stringBackupDeleteContainer is the container used for deleting etcd snapshots from a backup location. This container is only relevant when the new backup/restore controllers are enabled.
backupCleanupContainer stringBackupCleanupContainer is the container used for removing expired backups from the storage location. This container is only relevant when the old, deprecated backup controllers are enabled.
maximumParallelReconciles integerMaximumParallelReconciles limits the number of cluster reconciliations that are active at any given time.
pprofEndpoint stringPProfEndpoint controls the port the seed-controller-manager should listen on to provide pprof data. This port is never exposed from the container and only available via port-forwardings.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.
debugLog booleanDebugLog enables more verbose logging.
replicas integerReplicas sets the number of pod replicas for the seed-controller-manager.

Back to top

KubermaticSetting

KubermaticSetting is the type representing a KubermaticSetting.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringKubermaticSetting
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec SettingSpec

Back to top

KubermaticSettingList

KubermaticSettingList is a list of settings.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringKubermaticSettingList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items KubermaticSetting array

Back to top

KubermaticUIConfiguration

KubermaticUIConfiguration configures the dashboard.

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the Kubermatic dashboard image.
dockerTag stringDockerTag is used to overwrite the dashboard Docker image tag and is only for development purposes. This field must not be set in production environments. —
config stringConfig sets flags for various dashboard features.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.
replicas integerReplicas sets the number of pod replicas for the UI deployment.

Back to top

KubermaticUserClusterConfiguration

KubermaticUserClusterConfiguration controls various aspects of the user-created clusters.

Appears in:

FieldDescription
kubermaticDockerRepository stringKubermaticDockerRepository is the repository containing the Kubermatic user-cluster-controller-manager image.
dnatControllerDockerRepository stringDNATControllerDockerRepository is the repository containing the dnat-controller image.
etcdLauncherDockerRepository stringEtcdLauncherDockerRepository is the repository containing the Kubermatic etcd-launcher image.
overwriteRegistry stringOverwriteRegistry specifies a custom Docker registry which will be used for all images used for user clusters (user cluster control plane + addons). This also applies to the KubermaticDockerRepository and DNATControllerDockerRepository fields.
addons KubermaticAddonsConfigurationAddons controls the optional additions installed into each user cluster.
nodePortRange stringNodePortRange is the port range for customer clusters - this must match the NodePort range of the seed cluster.
monitoring KubermaticUserClusterMonitoringConfigurationMonitoring can be used to fine-tune to in-cluster Prometheus.
disableApiserverEndpointReconciling booleanDisableAPIServerEndpointReconciling can be used to toggle the --endpoint-reconciler-type flag for the Kubernetes API server.
etcdVolumeSize stringEtcdVolumeSize configures the volume size to use for each etcd pod inside user clusters.
apiserverReplicas integerAPIServerReplicas configures the replica count for the API-Server deployment inside user clusters.
machineController MachineControllerConfigurationMachineController configures the Machine Controller

Back to top

KubermaticUserClusterMonitoringConfiguration

KubermaticUserClusterMonitoringConfiguration can be used to fine-tune to in-cluster Prometheus.

Appears in:

FieldDescription
disableDefaultRules booleanDisableDefaultRules disables the recording and alerting rules.
disableDefaultScrapingConfigs booleanDisableDefaultScrapingConfigs disables the default scraping targets.
customRules stringCustomRules can be used to inject custom recording and alerting rules. This field must be a YAML-formatted string with a group element at its root, as documented on https://prometheus.io/docs/prometheus/2.14/configuration/alerting_rules/.
customScrapingConfigs stringCustomScrapingConfigs can be used to inject custom scraping rules. This must be a YAML-formatted string containing an array of scrape configurations as documented on https://prometheus.io/docs/prometheus/2.14/configuration/configuration/#scrape_config.
scrapeAnnotationPrefix stringScrapeAnnotationPrefix (if set) is used to make the in-cluster Prometheus scrape pods inside the user clusters.

Back to top

KubermaticVPAComponent

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the component’s image.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.

Back to top

KubermaticVPAConfiguration

KubermaticVPAConfiguration configures the Kubernetes VPA.

Appears in:

FieldDescription
recommender KubermaticVPAComponent
updater KubermaticVPAComponent
admissionController KubermaticVPAComponent

Back to top

KubermaticVersioningConfiguration

KubermaticVersioningConfiguration configures the available and default Kubernetes versions.

Appears in:

FieldDescription
versions Semver arrayVersions lists the available versions.
default SemverDefault is the default version to offer users.
updates Update arrayUpdates is a list of available and automatic upgrades. All ‘to’ versions must be configured in the version list for this orchestrator. Each update may optionally be configured to be ‘automatic: true’, in which case the controlplane of all clusters whose version matches the ‘from’ directive will get updated to the ‘to’ version. If automatic is enabled, the ‘to’ version must be a version and not a version range. Also, updates may set ‘automaticNodeUpdate: true’, in which case Nodes will get updates as well. ‘automaticNodeUpdate: true’ implies ‘automatic: true’ as well, because Nodes may not have a newer version than the controlplane.
providerIncompatibilities Incompatibility arrayProviderIncompatibilities lists all the Kubernetes version incompatibilities

Back to top

Kubevirt

Appears in:

FieldDescription
ProviderPreset ProviderPreset
kubeconfig string

Back to top

KubevirtCloudSpec

KubevirtCloudSpec specifies the access data to Kubevirt.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
kubeconfig string

Back to top

LeaderElectionSettings

Appears in:

FieldDescription
leaseDurationSeconds integerLeaseDurationSeconds is the duration in seconds that non-leader candidates will wait to force acquire leadership. This is measured against time of last observed ack.
renewDeadlineSeconds integerRenewDeadlineSeconds is the duration in seconds that the acting controlplane will retry refreshing leadership before giving up.
retryPeriodSeconds integerRetryPeriodSeconds is the duration in seconds the LeaderElector clients should wait between tries of actions.

Back to top

LoggingRateLimitSettings

LoggingRateLimitSettings contains rate-limiting configuration for logging in the user cluster.

Appears in:

FieldDescription
ingestionRate integerIngestionRate represents ingestion rate limit in requests per second (nginx rate in r/s).
ingestionBurstSize integerIngestionBurstSize represents ingestion burst size in number of requests (nginx burst).
queryRate integerQueryRate represents query request rate limit per second (nginx rate in r/s).
queryBurstSize integerQueryBurstSize represents query burst size in number of requests (nginx burst).

Back to top

MLAAdminSetting

MLAAdminSetting is the object representing cluster-specific administrator settings for KKP user cluster MLA (monitoring, logging & alerting) stack.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringMLAAdminSetting
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec MLAAdminSettingSpec

Back to top

MLAAdminSettingList

MLAAdminSettingList specifies a list of administrtor settings for KKP user cluster MLA (monitoring, logging & alerting) stack.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringMLAAdminSettingList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items MLAAdminSetting array

Back to top

MLAAdminSettingSpec

MLAAdminSettingSpec specifies the cluster-specific administrator settings for KKP user cluster MLA (monitoring, logging & alerting) stack.

Appears in:

FieldDescription
clusterName stringClusterName is the name of the user cluster whose MLA settings are defined in this object.
monitoringRateLimits MonitoringRateLimitSettingsMonitoringRateLimits contains rate-limiting configuration for monitoring in the user cluster.
loggingRateLimits LoggingRateLimitSettingsLoggingRateLimits contains rate-limiting configuration logging in the user cluster.

Back to top

MLASettings

Appears in:

FieldDescription
monitoringEnabled booleanMonitoringEnabled is the flag for enabling monitoring in user cluster.
loggingEnabled booleanLoggingEnabled is the flag for enabling logging in user cluster.
monitoringResources ResourceRequirementsMonitoringResources is the resource requirements for user cluster prometheus.
loggingResources ResourceRequirementsLoggingResources is the resource requirements for user cluster promtail.
monitoringReplicas integerMonitoringReplicas is the number of desired pods of user cluster prometheus deployment.

Back to top

MachineControllerConfiguration

MachineControllerConfiguration configures Machine Controller.

Appears in:

FieldDescription
imageRepository stringImageRepository is used to override the Machine Controller image repository. It is only for development, tests and PoC purposes. This field must not be set in production environments.
imageTag stringImageTag is used to override the Machine Controller image. It is only for development, tests and PoC purposes. This field must not be set in production environments.

Back to top

MachineDeploymentVMResourceQuota

Appears in:

FieldDescription
minCPU integerMinimal number of vCPU
maxCPU integerMaximal number of vCPU
minRAM integerMinimal RAM size in GB
maxRAM integerMaximum RAM size in GB
enableGPU boolean

Back to top

MachineNetworkingConfig

MachineNetworkingConfig specifies the networking parameters used for IPAM.

Appears in:

FieldDescription
cidr string
gateway string
dnsServers string array

Back to top

Match

Match contains the constraint to resource matching data.

Appears in:

FieldDescription
kinds Kind arrayKinds accepts a list of objects with apiGroups and kinds fields that list the groups/kinds of objects to which the constraint will apply. If multiple groups/kinds objects are specified, only one match is needed for the resource to be in scope
scope stringScope accepts *, Cluster, or Namespaced which determines if cluster-scoped and/or namesapced-scoped resources are selected. (defaults to *)
namespaces string arrayNamespaces is a list of namespace names. If defined, a constraint will only apply to resources in a listed namespace.
excludedNamespaces string arrayExcludedNamespaces is a list of namespace names. If defined, a constraint will only apply to resources not in a listed namespace.
labelSelector LabelSelectorLabelSelector is a standard Kubernetes label selector.
namespaceSelector LabelSelectorNamespaceSelector is a standard Kubernetes namespace selector. If defined, make sure to add Namespaces to your configs.config.gatekeeper.sh object to ensure namespaces are synced into OPA

Back to top

MeteringConfiguration

MeteringConfiguration contains all the configuration for the metering tool.

Appears in:

FieldDescription
enabled boolean
storageClassName stringStorageClassName is the name of the storage class that the metering tool uses to save processed files before exporting it to s3 bucket. Default value is kubermatic-fast.
storageSize stringStorageSize is the size of the storage class. Default value is 100Gi.

Back to top

MlaOptions

Appears in:

FieldDescription
loggingEnabled boolean
loggingEnforced boolean
monitoringEnabled boolean
monitoringEnforced boolean

Back to top

MonitoringRateLimitSettings

MonitoringRateLimitSettings contains rate-limiting configuration for monitoring in the user cluster.

Appears in:

FieldDescription
ingestionRate integerIngestionRate represents the ingestion rate limit in samples per second (Cortex ingestion_rate).
ingestionBurstSize integerIngestionBurstSize represents ingestion burst size in samples per second (Cortex ingestion_burst_size).
maxSeriesPerMetric integerMaxSeriesPerMetric represents maximum number of series per metric (Cortex max_series_per_metric).
maxSeriesTotal integerMaxSeriesTotal represents maximum number of series per this user cluster (Cortex max_series_per_user).
queryRate integerQueryRate represents query request rate limit per second (nginx rate in r/s).
queryBurstSize integerQueryBurstSize represents query burst size in number of requests (nginx burst).
maxSamplesPerQuery integerMaxSamplesPerQuery represents maximum number of samples during a query (Cortex max_samples_per_query).
maxSeriesPerQuery integerMaxSeriesPerQuery represents maximum number of timeseries during a query (Cortex max_series_per_query).

Back to top

NetworkRanges

NetworkRanges represents ranges of network addresses.

Appears in:

FieldDescription
cidrBlocks string array

Back to top

NodeSettings

NodeSettings are node specific flags which can be configured on datacenter level.

Appears in:

FieldDescription
ProxySettings ProxySettingsOptional: Proxy settings for the Nodes in this datacenter. Defaults to the Proxy settings of the seed.
insecureRegistries string arrayOptional: These image registries will be configured as insecure on the container runtime.
registryMirrors string arrayOptional: These image registries will be configured as registry mirrors on the container runtime.
pauseImage stringOptional: Translates to –pod-infra-container-image on the kubelet. If not set, the kubelet will default it.

Back to top

NodeportProxyComponent

Appears in:

FieldDescription
dockerRepository stringDockerRepository is the repository containing the component’s image.
resources ResourceRequirementsResources describes the requested and maximum allowed CPU/memory usage.

Back to top

NodeportProxyConfig

Appears in:

FieldDescription
disable booleanDisable will prevent the Kubermatic Operator from creating a nodeport-proxy setup on the seed cluster. This should only be used if a suitable replacement is installed (like the nodeport-proxy Helm chart).
annotations object (keys:string, values:string)Annotations are used to further tweak the LoadBalancer integration with the cloud provider where the seed cluster is running.
envoy NodeportProxyComponentEnvoy configures the Envoy application itself.
envoyManager NodeportProxyComponentEnvoyManager configures the Kubermatic-internal Envoy manager.
updater NodeportProxyComponentUpdater configures the component responsible for updating the LoadBalancer service.

Back to top

Nutanix

Appears in:

FieldDescription
ProviderPreset ProviderPreset
proxyURL stringProxyURL is used to optionally configure a HTTP proxy to access Nutanix Prism Central.
username stringUsername is the username to access the Nutanix Prism Central API.
password stringPassword is the password corresponding to the provided user.
clusterName stringClusterName is the Nutanix cluster to deploy resources and nodes to.
projectName stringProjectName is the optional Nutanix project to use. If none is given, no project will be used.
csiUsername stringPrism Element Username for csi driver
csiPassword stringPrism Element Password for csi driver
csiEndpoint stringCSIEndpoint to access Nutanix Prism Element for csi driver
csiPort integerCSIPort to use when connecting to the Nutanix Prism Element endpoint (defaults to 9440)

Back to top

NutanixCSIConfig

NutanixCSIConfig contains credentials and the endpoint for the Nutanix Prism Element to which the CSI driver connects.

Appears in:

FieldDescription
username stringPrism Element Username for csi driver
password stringPrism Element Password for csi driver
endpoint stringPrism Element Endpoint to access Nutanix Prism Element for csi driver
port integerOptional: Port to use when connecting to the Nutanix Prism Element endpoint (defaults to 9440)
storageContainer stringOptional: defaults to “SelfServiceContainer”
fstype stringOptional: defaults to “xfs”
ssSegmentedIscsiNetwork booleanOptional: defaults to “false”

Back to top

NutanixCloudSpec

NutanixCloudSpec specifies the access data to Nutanix.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
clusterName stringClusterName is the Nutanix cluster that this user cluster will be deployed to.
projectName stringProjectName is the project that this cluster is deployed into. If none is given, no project will be used.
proxyURL string
username string
password string
csi NutanixCSIConfigNutanixCSIConfig for csi driver that connects to a prism element

Back to top

OIDCSettings

Appears in:

FieldDescription
issuerURL string
clientID string
clientSecret string
usernameClaim string
groupsClaim string
requiredClaim string
extraScopes string

Back to top

OPAIntegrationSettings

Appears in:

FieldDescription
enabled booleanEnabled is the flag for enabling OPA integration
webhookTimeoutSeconds integerWebhookTimeout is the timeout that is set for the gatekeeper validating webhook admission review calls. By default 10 seconds.
experimentalEnableMutation booleanEnable mutation
controllerResources ResourceRequirementsControllerResources is the resource requirements for user cluster gatekeeper controller.
auditResources ResourceRequirementsAuditResources is the resource requirements for user cluster gatekeeper audit.

Back to top

OpaOptions

Appears in:

FieldDescription
enabled boolean
enforced boolean

Back to top

Openstack

Appears in:

FieldDescription
ProviderPreset ProviderPreset
useToken boolean
applicationCredentialID string
applicationCredentialSecret string
username string
password string
project string
projectID string
domain string
network string
securityGroups string
floatingIPPool string
routerID string
subnetID string

Back to top

OpenstackCloudSpec

OpenstackCloudSpec specifies access data to an OpenStack cloud.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
username string
password string
project stringproject, formally known as tenant.
projectID stringproject id, formally known as tenantID.
domain string
applicationCredentialID string
applicationCredentialSecret string
useToken boolean
token stringUsed internally during cluster creation
network stringNetwork holds the name of the internal network When specified, all worker nodes will be attached to this network. If not specified, a network, subnet & router will be created
Note that the network is internal if the “External” field is set to false
securityGroups string
nodePortsAllowedIPRange string
floatingIPPool stringFloatingIPPool holds the name of the public network The public network is reachable from the outside world and should provide the pool of IP addresses to choose from.
When specified, all worker nodes will receive a public ip from this floating ip pool
Note that the network is external if the “External” field is set to true
routerID string
subnetID string
useOctavia booleanWhether or not to use Octavia for LoadBalancer type of Service implementation instead of using Neutron-LBaaS. Attention:Openstack CCM use Octavia as default load balancer implementation since v1.17.0
Takes precedence over the ‘use_octavia’ flag provided at datacenter level if both are specified.

Back to top

OpenstackNodeSizeRequirements

Appears in:

FieldDescription
minimumVCPUs integerVCPUs is the minimum required amount of (virtual) CPUs
minimumMemory integerMinimumMemory is the minimum required amount of memory, measured in MB

Back to top

Packet

Appears in:

FieldDescription
ProviderPreset ProviderPreset
apiKey string
projectID string
billingCycle string

Back to top

PacketCloudSpec

PacketCloudSpec specifies access data to a Packet cloud.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
apiKey string
projectID string
billingCycle string

Back to top

Preset

Preset is the type representing a Preset.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringPreset
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec PresetSpec

Back to top

PresetList

PresetList is the type representing a PresetList.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringPresetList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Preset arrayList of presets

Back to top

PresetSpec

Presets specifies default presets for supported providers.

Appears in:

FieldDescription
digitalocean Digitalocean
hetzner Hetzner
azure Azure
vsphere VSphere
aws AWS
openstack Openstack
packet Packet
gcp GCP
kubevirt Kubevirt
alibaba Alibaba
anexia Anexia
nutanix Nutanix
gke GKE
eks EKS
aks AKS
requiredEmails string array
enabled boolean

Back to top

Project

Project is the type describing a project.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringProject
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec ProjectSpec
status ProjectStatus

Back to top

ProjectList

ProjectList is a collection of projects.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringProjectList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Project array

Back to top

ProjectSpec

ProjectSpec is a specification of a project.

Appears in:

FieldDescription
name string

Back to top

ProjectStatus

ProjectStatus represents the current status of a project.

Appears in:

FieldDescription
phase ProjectPhase

Back to top

ProviderPreset

Appears in:

FieldDescription
enabled boolean
datacenter string

Back to top

ProviderType

Underlying type: string

Appears in:

ProxySettings

ProxySettings allow configuring a HTTP proxy for the controlplanes and nodes.

Appears in:

FieldDescription
httpProxy ProxyValueOptional: If set, this proxy will be configured for both HTTP and HTTPS.
noProxy ProxyValueOptional: If set this will be set as NO_PROXY environment variable on the node; The value must be a comma-separated list of domains for which no proxy should be used, e.g. “*.example.com,internal.dev”. Note that the in-cluster apiserver URL will be automatically prepended to this value.

Back to top

ProxyValue

Underlying type: string

Appears in:

RuleGroup

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringRuleGroup
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec RuleGroupSpec

Back to top

RuleGroupList

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringRuleGroupList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items RuleGroup array

Back to top

RuleGroupSpec

Appears in:

FieldDescription
ruleGroupType RuleGroupTypeRuleGroupType is the type of this ruleGroup applies to. It can be Metrics or Logs.
cluster ObjectReferenceCluster is the reference to the cluster the ruleGroup should be created in.
data integer arrayData contains the RuleGroup data. Ref: https://prometheus.io/docs/prometheus/latest/configuration/recording_rules/#rule_group

Back to top

RuleGroupType

Underlying type: string

Appears in:

SSHKeySpec

Appears in:

FieldDescription
owner string
name string
fingerprint string
publicKey string
clusters string array

Back to top

Seed

Seed is the type representing a SeedDatacenter.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringSeed
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec SeedSpec

Back to top

SeedList

SeedDatacenterList is the type representing a SeedDatacenterList.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringSeedList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items Seed arrayList of seeds

Back to top

SeedMLASettings

SeedMLASettings allow configuring seed level MLA (Monitoring, Logging & Alerting) stack settings.

Appears in:

FieldDescription
userClusterMLAEnabled booleanOptional: UserClusterMLAEnabled controls whether the user cluster MLA (Monitoring, Logging & Alerting) stack is enabled in the seed.

Back to top

SeedSpec

The spec for a seed data.

Appears in:

FieldDescription
country stringOptional: Country of the seed as ISO-3166 two-letter code, e.g. DE or UK. For informational purposes in the Kubermatic dashboard only.
location stringOptional: Detailed location of the cluster, like “Hamburg” or “Datacenter 7”. For informational purposes in the Kubermatic dashboard only.
kubeconfig ObjectReferenceA reference to the Kubeconfig of this cluster. The Kubeconfig must have cluster-admin privileges. This field is mandatory for every seed, even if there are no datacenters defined yet.
datacenters object (keys:string, values:Datacenter)Datacenters contains a map of the possible datacenters (DCs) in this seed. Each DC must have a globally unique identifier (i.e. names must be unique across all seeds).
seedDNSOverwrite stringOptional: This can be used to override the DNS name used for this seed. By default the seed name is used.
nodeportProxy NodeportProxyConfigNodeportProxy can be used to configure the NodePort proxy service that is responsible for making user-cluster control planes accessible from the outside.
proxySettings ProxySettingsOptional: ProxySettings can be used to configure HTTP proxy settings on the worker nodes in user clusters. However, proxy settings on nodes take precedence.
exposeStrategy ExposeStrategyOptional: ExposeStrategy explicitly sets the expose strategy for this seed cluster, if not set, the default provided by the master is used.
mla SeedMLASettingsOptional: MLA allows configuring seed level MLA (Monitoring, Logging & Alerting) stack settings.
defaultComponentSettings ComponentSettingsDefaultComponentSettings are default values to set for newly created clusters. Deprecated: Use DefaultClusterTemplate instead.
defaultClusterTemplate stringDefaultClusterTemplate is the name of a cluster template of scope “seed” that is used to default all new created clusters
metering MeteringConfigurationMetering configures the metering tool on user clusters across the seed.
etcdBackupRestore EtcdBackupRestoreEtcdBackupRestore holds the configuration of the automatic etcd backup restores for the Seed; if this is set, the new backup/restore controllers are enabled for this Seed.

Back to top

ServiceAccountSettings

Appears in:

FieldDescription
tokenVolumeProjectionEnabled boolean
issuer stringIssuer is the identifier of the service account token issuer If this is not specified, it will be set to the URL of apiserver by default
apiAudiences string arrayAPIAudiences are the Identifiers of the API If this is not specified, it will be set to a single element list containing the issuer URL

Back to top

SettingSpec

Appears in:

FieldDescription
customLinks CustomLink array
defaultNodeCount integer
displayDemoInfo boolean
displayAPIDocs boolean
displayTermsOfService boolean
enableDashboard boolean
enableOIDCKubeconfig boolean
userProjectsLimit integer
restrictProjectCreation boolean
enableExternalClusterImport boolean
cleanupOptions CleanupOptions
opaOptions OpaOptions
mlaOptions MlaOptions
mlaAlertmanagerPrefix string
mlaGrafanaPrefix string
machineDeploymentVMResourceQuota MachineDeploymentVMResourceQuota

Back to top

StatefulSetSettings

Appears in:

FieldDescription
resources ResourceRequirements

Back to top

Update

Update represents an update option for a user cluster.

Appears in:

FieldDescription
from stringFrom is the version from which an update is allowed. Wildcards are allowed, e.g. “1.18.*”.
to stringTo is the version to which an update is allowed. Must be a valid version if automatic is set to true, e.g. “1.20.13”. Can be a wildcard otherwise, e.g. “1.20.*”.
automatic booleanAutomatic controls whether this update is executed automatically for the control plane of all matching user clusters. —
automaticNodeUpdate booleanAutomatic controls whether this update is executed automatically for the worker nodes of all matching user clusters. —

Back to top

UpdateWindow

Appears in:

FieldDescription
start string
length string

Back to top

User

User specifies a user.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUser
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec UserSpec
status UserStatus

Back to top

UserList

UserList is a list of users.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUserList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items User array

Back to top

UserProjectBinding

UserProjectBinding specifies a binding between a user and a project This resource is used by the user management to manipulate members of the given project.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUserProjectBinding
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec UserProjectBindingSpec

Back to top

UserProjectBindingList

UserProjectBindingList is a list of users.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUserProjectBindingList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items UserProjectBinding array

Back to top

UserProjectBindingSpec

UserProjectBindingSpec specifies a user.

Appears in:

FieldDescription
userEmail string
projectID string
group string

Back to top

UserSSHKey

UserSSHKey specifies a users UserSSHKey.

Appears in:

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUserSSHKey
metadata ObjectMetaRefer to Kubernetes API documentation for fields of metadata.
spec SSHKeySpec

Back to top

UserSSHKeyList

UserSSHKeyList specifies a users UserSSHKey.

FieldDescription
apiVersion stringkubermatic.k8c.io/v1
kind stringUserSSHKeyList
metadata ListMetaRefer to Kubernetes API documentation for fields of metadata.
items UserSSHKey array

Back to top

UserSettings

UserSettings represent an user settings.

Appears in:

FieldDescription
selectedTheme string
itemsPerPage integer
selectedProjectID string
selectProjectTableView boolean
collapseSidenav boolean
displayAllProjectsForAdmin boolean
lastSeenChangelogVersion string

Back to top

UserSpec

UserSpec specifies a user.

Appears in:

FieldDescription
id string
name string
email string
admin boolean
settings UserSettings
invalidTokensReference GlobalSecretKeySelector

Back to top

UserStatus

UserStatus stores status information about a user.

Appears in:

FieldDescription
lastSeen Time

Back to top

VSphere

Appears in:

FieldDescription
ProviderPreset ProviderPreset
username string
password string
vmNetName string
datastore string
datastoreCluster string
resourcePool string

Back to top

VSphereCloudSpec

VSphereCloudSpec specifies access data to VSphere cloud.

Appears in:

FieldDescription
credentialsReference GlobalSecretKeySelector
username stringUsername is the vSphere user name.
password stringPassword is the vSphere user password.
vmNetName stringVMNetName is the name of the vSphere network.
folder stringFolder is the folder to be used to group the provisioned virtual machines.
datastore stringDatastore to be used for storing virtual machines and as a default for dynamic volume provisioning, it is mutually exclusive with DatastoreCluster.
datastoreCluster stringDatastoreCluster to be used for storing virtual machines, it is mutually exclusive with Datastore.
storagePolicy stringStoragePolicy to be used for storage provisioning
resourcePool stringResourcePool is used to manage resources such as cpu and memory for vSphere virtual machines. The resource pool should be defined on vSphere cluster level.
infraManagementUser VSphereCredentialsThis user will be used for everything except cloud provider functionality

Back to top

VSphereCredentials

VSphereCredentials credentials represents a credential for accessing vSphere.

Appears in:

FieldDescription
username string
password string

Back to top