removedOutput schema / $defs
Removed value: -{
- "AcceleratorConfig": {
- "description": "AcceleratorConfig represents a Hardware Accelerator request.",
- "properties": {
- "acceleratorCount": {
- "description": "The number of the accelerator cards exposed to an instance.",
- "format": "int64",
- "type": "string"
- },
- "acceleratorType": {
- "description": "The accelerator type resource name. List of supported accelerators [here](https://cloud.google.com/compute/docs/gpus)",
- "type": "string"
- },
- "gpuDriverInstallationConfig": {
- "$ref": "#/$defs/GPUDriverInstallationConfig",
- "description": "The configuration for auto installation of GPU driver."
- },
- "gpuPartitionSize": {
- "description": "Size of partitions to create on the GPU. Valid values are described in the NVIDIA [mig user guide](https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).",
- "type": "string"
- },
- "gpuSharingConfig": {
- "$ref": "#/$defs/GPUSharingConfig",
- "description": "The configuration for GPU sharing options."
- }
- },
- "type": "object"
- },
- "AdditionalNodeNetworkConfig": {
- "description": "AdditionalNodeNetworkConfig is the configuration for additional node networks within the NodeNetworkConfig message",
- "properties": {
- "network": {
- "description": "Name of the VPC where the additional interface belongs",
- "type": "string"
- },
- "subnetwork": {
- "description": "Name of the subnetwork where the additional interface belongs",
- "type": "string"
- }
- },
- "type": "object"
- },
- "AdditionalPodNetworkConfig": {
- "description": "AdditionalPodNetworkConfig is the configuration for additional pod networks within the NodeNetworkConfig message",
- "properties": {
- "maxPodsPerNode": {
- "$ref": "#/$defs/MaxPodsConstraint",
- "description": "The maximum number of pods per node which use this pod network."
- },
- "networkAttachment": {
- "description": "The name of the network attachment for pods to communicate to; cannot be specified along with subnetwork or secondary_pod_range.",
- "type": "string"
- },
- "secondaryPodRange": {
- "description": "The name of the secondary range on the subnet which provides IP address for this pod range.",
- "type": "string"
- },
- "subnetwork": {
- "description": "Name of the subnetwork where the additional pod network belongs.",
- "type": "string"
- }
- },
- "type": "object"
- },
- "AdvancedMachineFeatures": {
- "description": "Specifies options for controlling advanced machine features.",
- "properties": {
- "enableNestedVirtualization": {
- "description": "Whether or not to enable nested virtualization (defaults to false).",
- "type": "boolean"
- },
- "performanceMonitoringUnit": {
- "description": "Type of Performance Monitoring Unit (PMU) requested on node pool instances. If unset, PMU will not be available to the node.",
- "enum": [
- "PERFORMANCE_MONITORING_UNIT_UNSPECIFIED",
- "ARCHITECTURAL",
- "STANDARD",
- "ENHANCED"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "PMU not enabled.",
- "Architecturally defined non-LLC events.",
- "Most documented core/L2 events.",
- "Most documented core/L2 and LLC events."
- ]
- },
- "threadsPerCore": {
- "description": "The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.",
- "format": "int64",
- "type": "string"
- }
- },
- "type": "object"
- },
- "AutoUpgradeOptions": {
- "description": "AutoUpgradeOptions defines the set of options for the user to control how the Auto Upgrades will proceed.",
- "properties": {
- "autoUpgradeStartTime": {
- "description": "Output only. This field is set when upgrades are about to commence with the approximate start time for the upgrades, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.",
- "readOnly": true,
- "type": "string"
- },
- "description": {
- "description": "Output only. This field is set when upgrades are about to commence with the description of the upgrade.",
- "readOnly": true,
- "type": "string"
- }
- },
- "type": "object"
- },
- "AutopilotConfig": {
- "description": "AutopilotConfig contains configuration of autopilot feature for this nodepool.",
- "properties": {
- "enabled": {
- "description": "Denotes that nodes belonging to this node pool are Autopilot nodes.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "AutoscaledRolloutPolicy": {
- "description": "Autoscaled rollout policy utilizes the cluster autoscaler during blue-green upgrade to scale both the blue and green pools.",
- "properties": {
- "waitForDrainDuration": {
- "description": "Optional. Time to wait after cordoning the blue pool before draining the nodes. Defaults to 3 days. The value can be set between 0 and 7 days, inclusive.",
- "format": "google-duration",
- "type": "string"
- }
- },
- "type": "object"
- },
- "BestEffortProvisioning": {
- "description": "Best effort provisioning.",
- "properties": {
- "enabled": {
- "description": "When this is enabled, cluster/node pool creations will ignore non-fatal errors like stockout to best provision as many nodes as possible right now and eventually bring up all target number of nodes",
- "type": "boolean"
- },
- "minProvisionNodes": {
- "description": "Minimum number of nodes to be provisioned to be considered as succeeded, and the rest of nodes will be provisioned gradually and eventually when stockout issue has been resolved.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "BlueGreenInfo": {
- "description": "Information relevant to blue-green upgrade.",
- "properties": {
- "blueInstanceGroupUrls": {
- "description": "The resource URLs of the [managed instance groups] (/compute/docs/instance-groups/creating-groups-of-managed-instances) associated with blue pool.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "bluePoolDeletionStartTime": {
- "description": "Time to start deleting blue pool to complete blue-green upgrade, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.",
- "type": "string"
- },
- "greenInstanceGroupUrls": {
- "description": "The resource URLs of the [managed instance groups] (/compute/docs/instance-groups/creating-groups-of-managed-instances) associated with green pool.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "greenPoolVersion": {
- "description": "Version of green pool.",
- "type": "string"
- },
- "phase": {
- "description": "Current blue-green upgrade phase.",
- "enum": [
- "PHASE_UNSPECIFIED",
- "UPDATE_STARTED",
- "CREATING_GREEN_POOL",
- "CORDONING_BLUE_POOL",
- "DRAINING_BLUE_POOL",
- "NODE_POOL_SOAKING",
- "DELETING_BLUE_POOL",
- "ROLLBACK_STARTED"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Unspecified phase.",
- "blue-green upgrade has been initiated.",
- "Start creating green pool nodes.",
- "Start cordoning blue pool nodes.",
- "Start draining blue pool nodes.",
- "Start soaking time after draining entire blue pool.",
- "Start deleting blue nodes.",
- "Rollback has been initiated."
- ]
- }
- },
- "type": "object"
- },
- "BlueGreenSettings": {
- "description": "Settings for blue-green upgrade.",
- "properties": {
- "autoscaledRolloutPolicy": {
- "$ref": "#/$defs/AutoscaledRolloutPolicy",
- "description": "Autoscaled policy for cluster autoscaler enabled blue-green upgrade."
- },
- "nodePoolSoakDuration": {
- "description": "Time needed after draining entire blue pool. After this period, blue pool will be cleaned up.",
- "format": "google-duration",
- "type": "string"
- },
- "standardRolloutPolicy": {
- "$ref": "#/$defs/StandardRolloutPolicy",
- "description": "Standard policy for the blue-green upgrade."
- }
- },
- "type": "object"
- },
- "BootDisk": {
- "description": "BootDisk specifies the boot disk configuration for nodepools.",
- "properties": {
- "diskType": {
- "description": "Disk type of the boot disk. (i.e. Hyperdisk-Balanced, PD-Balanced, etc.)",
- "type": "string"
- },
- "provisionedIops": {
- "description": "For Hyperdisk-Balanced only, the provisioned IOPS config value.",
- "format": "int64",
- "type": "string"
- },
- "provisionedThroughput": {
- "description": "For Hyperdisk-Balanced only, the provisioned throughput config value.",
- "format": "int64",
- "type": "string"
- },
- "sizeGb": {
- "description": "Disk size in GB. Replaces NodeConfig.disk_size_gb",
- "format": "int64",
- "type": "string"
- }
- },
- "type": "object"
- },
- "BootDiskProfile": {
- "description": "Swap on the node's boot disk.",
- "properties": {
- "swapSizeGib": {
- "description": "Specifies the size of the swap space in gibibytes (GiB).",
- "format": "int64",
- "type": "string"
- },
- "swapSizePercent": {
- "description": "Specifies the size of the swap space as a percentage of the boot disk size.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "CertificateAuthorityDomainConfig": {
- "description": "CertificateAuthorityDomainConfig configures one or more fully qualified domain names (FQDN) to a specific certificate.",
- "properties": {
- "fqdns": {
- "description": "List of fully qualified domain names (FQDN). Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "gcpSecretManagerCertificateConfig": {
- "$ref": "#/$defs/GCPSecretManagerCertificateConfig",
- "description": "Secret Manager certificate configuration."
- }
- },
- "type": "object"
- },
- "CertificateConfig": {
- "description": "CertificateConfig configures certificate for the registry.",
- "properties": {
- "gcpSecretManagerSecretUri": {
- "description": "The URI configures a secret from [Secret Manager](https://cloud.google.com/secret-manager) in the format \"projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION\" for global secret or \"projects/$PROJECT_ID/locations/$REGION/secrets/$SECRET_NAME/versions/$VERSION\" for regional secret. Version can be fixed (e.g. \"2\") or \"latest\"",
- "type": "string"
- }
- },
- "type": "object"
- },
- "CertificateConfigPair": {
- "description": "CertificateConfigPair configures pairs of certificates, which is used for client certificate and key pairs under a registry.",
- "properties": {
- "cert": {
- "$ref": "#/$defs/CertificateConfig",
- "description": "Cert configures the client certificate."
- },
- "key": {
- "$ref": "#/$defs/CertificateConfig",
- "description": "Key configures the client private key. Optional."
- }
- },
- "type": "object"
- },
- "ConfidentialNodes": {
- "description": "ConfidentialNodes is configuration for the confidential nodes feature, which makes nodes run on confidential VMs.",
- "properties": {
- "confidentialInstanceType": {
- "description": "Defines the type of technology used by the confidential node.",
- "enum": [
- "CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED",
- "SEV",
- "SEV_SNP",
- "TDX"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "No type specified. Do not use this value.",
- "AMD Secure Encrypted Virtualization.",
- "AMD Secure Encrypted Virtualization - Secure Nested Paging.",
- "Intel Trust Domain eXtension."
- ]
- },
- "enabled": {
- "description": "Whether Confidential Nodes feature is enabled.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "ContainerdConfig": {
- "description": "ContainerdConfig contains configuration to customize containerd.",
- "properties": {
- "privateRegistryAccessConfig": {
- "$ref": "#/$defs/PrivateRegistryAccessConfig",
- "description": "PrivateRegistryAccessConfig is used to configure access configuration for private container registries."
- },
- "registryHosts": {
- "description": "RegistryHostConfig configures containerd registry host configuration. Each registry_hosts represents a hosts.toml file. At most 25 registry_hosts are allowed.",
- "items": {
- "$ref": "#/$defs/RegistryHostConfig"
- },
- "type": "array"
- },
- "writableCgroups": {
- "$ref": "#/$defs/WritableCgroups",
- "description": "Optional. WritableCgroups defines writable cgroups configuration for the node pool."
- }
- },
- "type": "object"
- },
- "CrashLoopBackOffConfig": {
- "description": "Contains config to modify node-level parameters for container restart behavior.",
- "properties": {
- "maxContainerRestartPeriod": {
- "description": "Optional. The maximum duration the backoff delay can accrue to for container restarts, minimum 1 second, maximum 300 seconds. If not set, defaults to the internal crashloopbackoff maximum. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\". See https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#configurable-container-restart-delay for more details.",
- "type": "string"
- }
- },
- "type": "object"
- },
- "DedicatedLocalSsdProfile": {
- "description": "Provisions a new, separate local NVMe SSD exclusively for swap.",
- "properties": {
- "diskCount": {
- "description": "The number of physical local NVMe SSD disks to attach.",
- "format": "int64",
- "type": "string"
- }
- },
- "type": "object"
- },
- "EncryptionConfig": {
- "description": "Defines encryption settings for the swap space.",
- "properties": {
- "disabled": {
- "description": "Optional. If true, swap space will not be encrypted. Defaults to false (encrypted).",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "EphemeralLocalSsdProfile": {
- "description": "Swap on the local SSD shared with pod ephemeral storage.",
- "properties": {
- "swapSizeGib": {
- "description": "Specifies the size of the swap space in gibibytes (GiB).",
- "format": "int64",
- "type": "string"
- },
- "swapSizePercent": {
- "description": "Specifies the size of the swap space as a percentage of the ephemeral local SSD capacity.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "EphemeralStorageLocalSsdConfig": {
- "description": "EphemeralStorageLocalSsdConfig contains configuration for the node ephemeral storage using Local SSDs.",
- "properties": {
- "dataCacheCount": {
- "description": "Number of local SSDs to use for GKE Data Cache.",
- "format": "int32",
- "type": "integer"
- },
- "localSsdCount": {
- "description": "Number of local SSDs to use to back ephemeral storage. Uses NVMe interfaces. A zero (or unset) value has different meanings depending on machine type being used: 1. For pre-Gen3 machines, which support flexible numbers of local ssds, zero (or unset) means to disable using local SSDs as ephemeral storage. The limit for this value is dependent upon the maximum number of disk available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information. 2. For Gen3 machines which dictate a specific number of local ssds, zero (or unset) means to use the default number of local ssds that goes with that machine type. For example, for a c3-standard-8-lssd machine, 2 local ssds would be provisioned. For c3-standard-8 (which doesn't support local ssds), 0 will be provisioned. See https://cloud.google.com/compute/docs/disks/local-ssd#choose_number_local_ssds for more info.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "EvictionGracePeriod": {
- "description": "Eviction grace periods are grace periods for each eviction signal.",
- "properties": {
- "imagefsAvailable": {
- "description": "Optional. Grace period for eviction due to imagefs available signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "imagefsInodesFree": {
- "description": "Optional. Grace period for eviction due to imagefs inodes free signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "memoryAvailable": {
- "description": "Optional. Grace period for eviction due to memory available signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsAvailable": {
- "description": "Optional. Grace period for eviction due to nodefs available signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsInodesFree": {
- "description": "Optional. Grace period for eviction due to nodefs inodes free signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "pidAvailable": {
- "description": "Optional. Grace period for eviction due to pid available signal. Sample format: \"10s\". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- }
- },
- "type": "object"
- },
- "EvictionMinimumReclaim": {
- "description": "Eviction minimum reclaims are the resource amounts of minimum reclaims for each eviction signal.",
- "properties": {
- "imagefsAvailable": {
- "description": "Optional. Minimum reclaim for eviction due to imagefs available signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "imagefsInodesFree": {
- "description": "Optional. Minimum reclaim for eviction due to imagefs inodes free signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "memoryAvailable": {
- "description": "Optional. Minimum reclaim for eviction due to memory available signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsAvailable": {
- "description": "Optional. Minimum reclaim for eviction due to nodefs available signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsInodesFree": {
- "description": "Optional. Minimum reclaim for eviction due to nodefs inodes free signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "pidAvailable": {
- "description": "Optional. Minimum reclaim for eviction due to pid available signal. Only take percentage value for now. Sample format: \"10%\". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- }
- },
- "type": "object"
- },
- "EvictionSignals": {
- "description": "Eviction signals are the current state of a particular resource at a specific point in time. The kubelet uses eviction signals to make eviction decisions by comparing the signals to eviction thresholds, which are the minimum amount of the resource that should be available on the node.",
- "properties": {
- "imagefsAvailable": {
- "description": "Optional. Amount of storage available on filesystem that container runtime uses for storing images layers. If the container filesystem and image filesystem are not separate, then imagefs can store both image layers and writeable layers. Defines the amount of \"imagefs.available\" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: \"30%\". Must be >= 15% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "imagefsInodesFree": {
- "description": "Optional. Amount of inodes available on filesystem that container runtime uses for storing images layers. Defines the amount of \"imagefs.inodesFree\" signal in kubelet. Default is unset, if not specified in the kubelet config. Linux only. It takses percentage value for now. Sample format: \"30%\". Must be >= 5% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "memoryAvailable": {
- "description": "Optional. Memory available (i.e. capacity - workingSet), in bytes. Defines the amount of \"memory.available\" signal in kubelet. Default is unset, if not specified in the kubelet config. Format: positive number + unit, e.g. 100Ki, 10Mi, 5Gi. Valid units are Ki, Mi, Gi. Must be >= 100Mi and <= 50% of the node's memory. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsAvailable": {
- "description": "Optional. Amount of storage available on filesystem that kubelet uses for volumes, daemon logs, etc. Defines the amount of \"nodefs.available\" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: \"30%\". Must be >= 10% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "nodefsInodesFree": {
- "description": "Optional. Amount of inodes available on filesystem that kubelet uses for volumes, daemon logs, etc. Defines the amount of \"nodefs.inodesFree\" signal in kubelet. Default is unset, if not specified in the kubelet config. Linux only. It takses percentage value for now. Sample format: \"30%\". Must be >= 5% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- },
- "pidAvailable": {
- "description": "Optional. Amount of PID available for pod allocation. Defines the amount of \"pid.available\" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: \"30%\". Must be >= 10% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/#eviction-signals",
- "type": "string"
- }
- },
- "type": "object"
- },
- "FastSocket": {
- "description": "Configuration of Fast Socket feature.",
- "properties": {
- "enabled": {
- "description": "Whether Fast Socket features are enabled in the node pool.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "GCPSecretManagerCertificateConfig": {
- "description": "GCPSecretManagerCertificateConfig configures a secret from [Secret Manager](https://cloud.google.com/secret-manager).",
- "properties": {
- "secretUri": {
- "description": "Secret URI, in the form \"projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION\". Version can be fixed (e.g. \"2\") or \"latest\"",
- "type": "string"
- }
- },
- "type": "object"
- },
- "GPUDirectConfig": {
- "description": "GPUDirectConfig specifies the GPU direct strategy on the node pool.",
- "properties": {
- "gpuDirectStrategy": {
- "description": "The type of GPU direct strategy to enable on the node pool.",
- "enum": [
- "GPU_DIRECT_STRATEGY_UNSPECIFIED",
- "RDMA"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. No GPU Direct strategy is enabled on the node.",
- "GPUDirect-RDMA on A3 Ultra, and A4 machine types"
- ]
- }
- },
- "type": "object"
- },
- "GPUDriverInstallationConfig": {
- "description": "GPUDriverInstallationConfig specifies the version of GPU driver to be auto installed.",
- "properties": {
- "gpuDriverVersion": {
- "description": "Mode for how the GPU driver is installed.",
- "enum": [
- "GPU_DRIVER_VERSION_UNSPECIFIED",
- "INSTALLATION_DISABLED",
- "DEFAULT",
- "LATEST"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value is to not install any GPU driver.",
- "Disable GPU driver auto installation and needs manual installation",
- "\"Default\" GPU driver in COS and Ubuntu.",
- "\"Latest\" GPU driver in COS."
- ]
- }
- },
- "type": "object"
- },
- "GPUSharingConfig": {
- "description": "GPUSharingConfig represents the GPU sharing configuration for Hardware Accelerators.",
- "properties": {
- "gpuSharingStrategy": {
- "description": "The type of GPU sharing strategy to enable on the GPU node.",
- "enum": [
- "GPU_SHARING_STRATEGY_UNSPECIFIED",
- "TIME_SHARING",
- "MPS"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value.",
- "GPUs are time-shared between containers.",
- "GPUs are shared between containers with NVIDIA MPS."
- ]
- },
- "maxSharedClientsPerGpu": {
- "description": "The max number of containers that can share a physical GPU.",
- "format": "int64",
- "type": "string"
- }
- },
- "type": "object"
- },
- "GcfsConfig": {
- "description": "GcfsConfig contains configurations of Google Container File System (image streaming).",
- "properties": {
- "enabled": {
- "description": "Whether to use GCFS.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "HostConfig": {
- "description": "HostConfig configures the registry host under a given Server.",
- "properties": {
- "ca": {
- "description": "CA configures the registry host certificate.",
- "items": {
- "$ref": "#/$defs/CertificateConfig"
- },
- "type": "array"
- },
- "capabilities": {
- "description": "Capabilities represent the capabilities of the registry host, specifying what operations a host is capable of performing. If not set, containerd enables all capabilities by default.",
- "items": {
- "enum": [
- "HOST_CAPABILITY_UNSPECIFIED",
- "HOST_CAPABILITY_PULL",
- "HOST_CAPABILITY_RESOLVE",
- "HOST_CAPABILITY_PUSH"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "UNKNOWN should never be set.",
- "Pull represents the capability to fetch manifests and blobs by digest.",
- "Resolve represents the capability to fetch manifests by name.",
- "Push represents the capability to push blobs and manifests."
- ]
- },
- "type": "array"
- },
- "client": {
- "description": "Client configures the registry host client certificate and key.",
- "items": {
- "$ref": "#/$defs/CertificateConfigPair"
- },
- "type": "array"
- },
- "dialTimeout": {
- "description": "Specifies the maximum duration allowed for a connection attempt to complete. A shorter timeout helps reduce delays when falling back to the original registry if the mirror is unreachable. Maximum allowed value is 180s. If not set, containerd sets default 30s. The value should be a decimal number of seconds with an `s` suffix.",
- "format": "google-duration",
- "type": "string"
- },
- "header": {
- "description": "Header configures the registry host headers.",
- "items": {
- "$ref": "#/$defs/RegistryHeader"
- },
- "type": "array"
- },
- "host": {
- "description": "Host configures the registry host/mirror. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
- "type": "string"
- },
- "overridePath": {
- "description": "OverridePath is used to indicate the host's API root endpoint is defined in the URL path rather than by the API specification. This may be used with non-compliant OCI registries which are missing the /v2 prefix. If not set, containerd sets default false.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "HugepagesConfig": {
- "description": "Hugepages amount in both 2m and 1g size",
- "properties": {
- "hugepageSize1g": {
- "description": "Optional. Amount of 1G hugepages",
- "format": "int32",
- "type": "integer"
- },
- "hugepageSize2m": {
- "description": "Optional. Amount of 2M hugepages",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "LinuxNodeConfig": {
- "description": "Parameters that can be configured on Linux nodes.",
- "properties": {
- "cgroupMode": {
- "description": "cgroup_mode specifies the cgroup mode to be used on the node.",
- "enum": [
- "CGROUP_MODE_UNSPECIFIED",
- "CGROUP_MODE_V1",
- "CGROUP_MODE_V2"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "CGROUP_MODE_UNSPECIFIED is when unspecified cgroup configuration is used. The default for the GKE node OS image will be used.",
- "CGROUP_MODE_V1 specifies to use cgroupv1 for the cgroup configuration on the node image.",
- "CGROUP_MODE_V2 specifies to use cgroupv2 for the cgroup configuration on the node image."
- ]
- },
- "hugepages": {
- "$ref": "#/$defs/HugepagesConfig",
- "description": "Optional. Amounts for 2M and 1G hugepages"
- },
- "nodeKernelModuleLoading": {
- "$ref": "#/$defs/NodeKernelModuleLoading",
- "description": "Optional. Configuration for kernel module loading on nodes. When enabled, the node pool will be provisioned with a Container-Optimized OS image that enforces kernel module signature verification."
- },
- "swapConfig": {
- "$ref": "#/$defs/SwapConfig",
- "description": "Optional. Enables and configures swap space on nodes. If omitted, swap is disabled."
- },
- "sysctls": {
- "additionalProperties": {
- "type": "string"
- },
- "description": "The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes",
- "type": "object"
- },
- "transparentHugepageDefrag": {
- "description": "Optional. Defines the transparent hugepage defrag configuration on the node. VM hugepage allocation can be managed by either limiting defragmentation for delayed allocation or skipping it entirely for immediate allocation only. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details.",
- "enum": [
- "TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED",
- "TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS",
- "TRANSPARENT_HUGEPAGE_DEFRAG_DEFER",
- "TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE",
- "TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE",
- "TRANSPARENT_HUGEPAGE_DEFRAG_NEVER"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. GKE will not modify the kernel configuration.",
- "It means that an application requesting THP will stall on allocation failure and directly reclaim pages and compact memory in an effort to allocate a THP immediately.",
- "It means that an application will wake kswapd in the background to reclaim pages and wake kcompactd to compact memory so that THP is available in the near future. It's the responsibility of khugepaged to then install the THP pages later.",
- "It means that an application will enter direct reclaim and compaction like always, but only for regions that have used madvise(MADV_HUGEPAGE); all other regions will wake kswapd in the background to reclaim pages and wake kcompactd to compact memory so that THP is available in the near future.",
- "It means that an application will enter direct reclaim like always but only for regions that are have used madvise(MADV_HUGEPAGE). This is the default kernel configuration.",
- "It means that an application will never enter direct reclaim or compaction."
- ]
- },
- "transparentHugepageEnabled": {
- "description": "Optional. Transparent hugepage support for anonymous memory can be entirely disabled (mostly for debugging purposes) or only enabled inside MADV_HUGEPAGE regions (to avoid the risk of consuming more memory resources) or enabled system wide. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details.",
- "enum": [
- "TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED",
- "TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS",
- "TRANSPARENT_HUGEPAGE_ENABLED_MADVISE",
- "TRANSPARENT_HUGEPAGE_ENABLED_NEVER"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. GKE will not modify the kernel configuration.",
- "Transparent hugepage support for anonymous memory is enabled system wide.",
- "Transparent hugepage support for anonymous memory is enabled inside MADV_HUGEPAGE regions. This is the default kernel configuration.",
- "Transparent hugepage support for anonymous memory is disabled."
- ]
- }
- },
- "type": "object"
- },
- "LocalNvmeSsdBlockConfig": {
- "description": "LocalNvmeSsdBlockConfig contains configuration for using raw-block local NVMe SSDs",
- "properties": {
- "localSsdCount": {
- "description": "Number of local NVMe SSDs to use. The limit for this value is dependent upon the maximum number of disk available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information. A zero (or unset) value has different meanings depending on machine type being used: 1. For pre-Gen3 machines, which support flexible numbers of local ssds, zero (or unset) means to disable using local SSDs as ephemeral storage. 2. For Gen3 machines which dictate a specific number of local ssds, zero (or unset) means to use the default number of local ssds that goes with that machine type. For example, for a c3-standard-8-lssd machine, 2 local ssds would be provisioned. For c3-standard-8 (which doesn't support local ssds), 0 will be provisioned. See https://cloud.google.com/compute/docs/disks/local-ssd#choose_number_local_ssds for more info.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "LoggingVariantConfig": {
- "description": "LoggingVariantConfig specifies the behaviour of the logging component.",
- "properties": {
- "variant": {
- "description": "Logging variant deployed on nodes.",
- "enum": [
- "VARIANT_UNSPECIFIED",
- "DEFAULT",
- "MAX_THROUGHPUT"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. This shouldn't be used.",
- "default logging variant.",
- "maximum logging throughput variant."
- ]
- }
- },
- "type": "object"
- },
- "MaxPodsConstraint": {
- "description": "Constraints applied to pods.",
- "properties": {
- "maxPodsPerNode": {
- "description": "Constraint enforced on the max num of pods per node.",
- "format": "int64",
- "type": "string"
- }
- },
- "type": "object"
- },
- "MemoryManager": {
- "description": "The option enables the Kubernetes NUMA-aware Memory Manager feature. Detailed description about the feature can be found [here](https://kubernetes.io/docs/tasks/administer-cluster/memory-manager/).",
- "properties": {
- "policy": {
- "description": "Controls the memory management policy on the Node. See https://kubernetes.io/docs/tasks/administer-cluster/memory-manager/#policies The following values are allowed. * \"none\" * \"static\" The default value is 'none' if unspecified.",
- "type": "string"
- }
- },
- "type": "object"
- },
- "NetworkPerformanceConfig": {
- "description": "Configuration of all network bandwidth tiers",
- "properties": {
- "totalEgressBandwidthTier": {
- "description": "Specifies the total network bandwidth tier for the NodePool.",
- "enum": [
- "TIER_UNSPECIFIED",
- "TIER_1"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value",
- "Higher bandwidth, actual values based on VM size."
- ]
- }
- },
- "type": "object"
- },
- "NetworkTierConfig": {
- "description": "NetworkTierConfig contains network tier information.",
- "properties": {
- "networkTier": {
- "description": "Network tier configuration.",
- "enum": [
- "NETWORK_TIER_UNSPECIFIED",
- "NETWORK_TIER_DEFAULT",
- "NETWORK_TIER_PREMIUM",
- "NETWORK_TIER_STANDARD"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "By default, use project-level configuration. When unspecified, the behavior defaults to NETWORK_TIER_DEFAULT. For cluster updates, this implies no action (no-op).",
- "Default network tier. Use project-level configuration. User can specify this value, meaning they want to keep the same behaviour as before cluster level network tier configuration is introduced. This field ensures backward compatibility for the network tier of cluster resources, such as node pools and load balancers, for their external IP addresses.",
- "Premium network tier.",
- "Standard network tier."
- ]
- }
- },
- "type": "object"
- },
- "NodeAffinity": {
- "description": "Specifies the NodeAffinity key, values, and affinity operator according to [shared sole tenant node group affinities](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes#node_affinity_and_anti-affinity).",
- "properties": {
- "key": {
- "description": "Key for NodeAffinity.",
- "type": "string"
- },
- "operator": {
- "description": "Operator for NodeAffinity.",
- "enum": [
- "OPERATOR_UNSPECIFIED",
- "IN",
- "NOT_IN"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Invalid or unspecified affinity operator.",
- "Affinity operator.",
- "Anti-affinity operator."
- ]
- },
- "values": {
- "description": "Values for NodeAffinity.",
- "items": {
- "type": "string"
- },
- "type": "array"
- }
- },
- "type": "object"
- },
- "NodeConfig": {
- "description": "Parameters that describe the nodes in a cluster. GKE Autopilot clusters do not recognize parameters in `NodeConfig`. Use AutoprovisioningNodePoolDefaults instead.",
- "properties": {
- "accelerators": {
- "description": "A list of hardware accelerators to be attached to each node. See https://cloud.google.com/compute/docs/gpus for more information about support for GPUs.",
- "items": {
- "$ref": "#/$defs/AcceleratorConfig"
- },
- "type": "array"
- },
- "advancedMachineFeatures": {
- "$ref": "#/$defs/AdvancedMachineFeatures",
- "description": "Advanced features for the Compute Engine VM."
- },
- "bootDisk": {
- "$ref": "#/$defs/BootDisk",
- "description": "The boot disk configuration for the node pool."
- },
- "bootDiskKmsKey": {
- "description": " The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form projects/[KEY_PROJECT_ID]/locations/[LOCATION]/keyRings/[RING_NAME]/cryptoKeys/[KEY_NAME]. For more information about protecting resources with Cloud KMS Keys please see: https://cloud.google.com/compute/docs/disks/customer-managed-encryption",
- "type": "string"
- },
- "confidentialNodes": {
- "$ref": "#/$defs/ConfidentialNodes",
- "description": "Confidential nodes config. All the nodes in the node pool will be Confidential VM once enabled."
- },
- "consolidationDelay": {
- "description": "Consolidation delay defines duration after which the Cluster Autoscaler can scale down underutilized nodes. If not set, nodes are scaled down by default behavior, i.e. according to the chosen autoscaling profile.",
- "format": "google-duration",
- "type": "string"
- },
- "containerdConfig": {
- "$ref": "#/$defs/ContainerdConfig",
- "description": "Parameters for containerd customization."
- },
- "diskSizeGb": {
- "description": "Size of the disk attached to each node, specified in GB. The smallest allowed disk size is 10GB. If unspecified, the default disk size is 100GB.",
- "format": "int32",
- "type": "integer"
- },
- "diskType": {
- "description": "Type of the disk attached to each node (e.g. 'pd-standard', 'pd-ssd' or 'pd-balanced') If unspecified, the default disk type is 'pd-standard'",
- "type": "string"
- },
- "effectiveCgroupMode": {
- "description": "Output only. effective_cgroup_mode is the cgroup mode actually used by the node pool. It is determined by the cgroup mode specified in the LinuxNodeConfig or the default cgroup mode based on the cluster creation version.",
- "enum": [
- "EFFECTIVE_CGROUP_MODE_UNSPECIFIED",
- "EFFECTIVE_CGROUP_MODE_V1",
- "EFFECTIVE_CGROUP_MODE_V2"
- ],
- "readOnly": true,
- "type": "string",
- "x-google-enum-descriptions": [
- "EFFECTIVE_CGROUP_MODE_UNSPECIFIED means the cgroup configuration for the node pool is unspecified, i.e. the node pool is a Windows node pool.",
- "CGROUP_MODE_V1 means the node pool is configured to use cgroupv1 for the cgroup configuration.",
- "CGROUP_MODE_V2 means the node pool is configured to use cgroupv2 for the cgroup configuration."
- ]
- },
- "enableConfidentialStorage": {
- "description": "Optional. Reserved for future use.",
- "type": "boolean"
- },
- "ephemeralStorageLocalSsdConfig": {
- "$ref": "#/$defs/EphemeralStorageLocalSsdConfig",
- "description": "Parameters for the node ephemeral storage using Local SSDs. If unspecified, ephemeral storage is backed by the boot disk."
- },
- "fastSocket": {
- "$ref": "#/$defs/FastSocket",
- "description": "Enable or disable NCCL fast socket for the node pool."
- },
- "flexStart": {
- "description": "Flex Start flag for enabling Flex Start VM.",
- "type": "boolean"
- },
- "gcfsConfig": {
- "$ref": "#/$defs/GcfsConfig",
- "description": "Google Container File System (image streaming) configs."
- },
- "gpuDirectConfig": {
- "$ref": "#/$defs/GPUDirectConfig",
- "description": "The configuration for GPU Direct"
- },
- "gvnic": {
- "$ref": "#/$defs/VirtualNIC",
- "description": "Enable or disable gvnic in the node pool."
- },
- "imageType": {
- "description": "The image type to use for this node. Note that for a given image type, the latest version of it will be used. Please see https://cloud.google.com/kubernetes-engine/docs/concepts/node-images for available image types.",
- "type": "string"
- },
- "kubeletConfig": {
- "$ref": "#/$defs/NodeKubeletConfig",
- "description": "Node kubelet configs."
- },
- "labels": {
- "additionalProperties": {
- "type": "string"
- },
- "description": "The map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node. In case of conflict in label keys, the applied set may differ depending on the Kubernetes version -- it's best to assume the behavior is undefined and conflicts should be avoided. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/",
- "type": "object"
- },
- "linuxNodeConfig": {
- "$ref": "#/$defs/LinuxNodeConfig",
- "description": "Parameters that can be configured on Linux nodes."
- },
- "localNvmeSsdBlockConfig": {
- "$ref": "#/$defs/LocalNvmeSsdBlockConfig",
- "description": "Parameters for using raw-block Local NVMe SSDs."
- },
- "localSsdCount": {
- "description": "The number of local SSD disks to be attached to the node. The limit for this value is dependent upon the maximum number of disks available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information.",
- "format": "int32",
- "type": "integer"
- },
- "localSsdEncryptionMode": {
- "description": "Specifies which method should be used for encrypting the Local SSDs attached to the node.",
- "enum": [
- "LOCAL_SSD_ENCRYPTION_MODE_UNSPECIFIED",
- "STANDARD_ENCRYPTION",
- "EPHEMERAL_KEY_ENCRYPTION"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "The given node will be encrypted using keys managed by Google infrastructure and the keys will be deleted when the node is deleted.",
- "The given node will be encrypted using keys managed by Google infrastructure and the keys will be deleted when the node is deleted.",
- "The given node will opt-in for using ephemeral key for encryption of Local SSDs. The Local SSDs will not be able to recover data in case of node crash."
- ]
- },
- "loggingConfig": {
- "$ref": "#/$defs/NodePoolLoggingConfig",
- "description": "Logging configuration."
- },
- "machineType": {
- "description": "The name of a Google Compute Engine [machine type](https://cloud.google.com/compute/docs/machine-types) If unspecified, the default machine type is `e2-medium`.",
- "type": "string"
- },
- "maxRunDuration": {
- "description": "The maximum duration for the nodes to exist. If unspecified, the nodes can exist indefinitely.",
- "format": "google-duration",
- "type": "string"
- },
- "metadata": {
- "additionalProperties": {
- "type": "string"
- },
- "description": "The metadata key/value pairs assigned to instances in the cluster. Keys must conform to the regexp `[a-zA-Z0-9-_]+` and be less than 128 bytes in length. These are reflected as part of a URL in the metadata server. Additionally, to avoid ambiguity, keys must not conflict with any other metadata keys for the project or be one of the reserved keys: - \"cluster-location\" - \"cluster-name\" - \"cluster-uid\" - \"configure-sh\" - \"containerd-configure-sh\" - \"enable-os-login\" - \"gci-ensure-gke-docker\" - \"gci-metrics-enabled\" - \"gci-update-strategy\" - \"instance-template\" - \"kube-env\" - \"startup-script\" - \"user-data\" - \"disable-address-manager\" - \"windows-startup-script-ps1\" - \"common-psm1\" - \"k8s-node-setup-psm1\" - \"install-ssh-psm1\" - \"user-profile-psm1\" Values are free-form strings, and only have meaning as interpreted by the image running in the instance. The only restriction placed on them is that each value's size must be less than or equal to 32 KB. The total size of all keys and values must be less than 512 KB.",
- "type": "object"
- },
- "minCpuPlatform": {
- "description": "Minimum CPU platform to be used by this instance. The instance may be scheduled on the specified or newer CPU platform. Applicable values are the friendly names of CPU platforms, such as `minCpuPlatform: \"Intel Haswell\"` or `minCpuPlatform: \"Intel Sandy Bridge\"`. For more information, read [how to specify min CPU platform](https://cloud.google.com/compute/docs/instances/specify-min-cpu-platform)",
- "type": "string"
- },
- "nodeGroup": {
- "description": "Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes).",
- "type": "string"
- },
- "oauthScopes": {
- "description": "The set of Google API scopes to be made available on all of the node VMs under the \"default\" service account. The following scopes are recommended, but not required, and by default are not included: * `https://www.googleapis.com/auth/compute` is required for mounting persistent storage on your nodes. * `https://www.googleapis.com/auth/devstorage.read_only` is required for communicating with **gcr.io** (the [Artifact Registry](https://cloud.google.com/artifact-registry/)). If unspecified, no scopes are added, unless Cloud Logging or Cloud Monitoring are enabled, in which case their required scopes will be added.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "preemptible": {
- "description": "Whether the nodes are created as preemptible VM instances. See: https://cloud.google.com/compute/docs/instances/preemptible for more information about preemptible VM instances.",
- "type": "boolean"
- },
- "reservationAffinity": {
- "$ref": "#/$defs/ReservationAffinity",
- "description": "The optional reservation affinity. Setting this field will apply the specified [Zonal Compute Reservation](https://cloud.google.com/compute/docs/instances/reserving-zonal-resources) to this node pool."
- },
- "resourceLabels": {
- "additionalProperties": {
- "type": "string"
- },
- "description": "The resource labels for the node pool to use to annotate any related Google Compute Engine resources.",
- "type": "object"
- },
- "resourceManagerTags": {
- "$ref": "#/$defs/ResourceManagerTags",
- "description": "A map of resource manager tag keys and values to be attached to the nodes."
- },
- "sandboxConfig": {
- "$ref": "#/$defs/SandboxConfig",
- "description": "Sandbox configuration for this node."
- },
- "secondaryBootDiskUpdateStrategy": {
- "$ref": "#/$defs/SecondaryBootDiskUpdateStrategy",
- "description": "Secondary boot disk update strategy."
- },
- "secondaryBootDisks": {
- "description": "List of secondary boot disks attached to the nodes.",
- "items": {
- "$ref": "#/$defs/SecondaryBootDisk"
- },
- "type": "array"
- },
- "serviceAccount": {
- "description": "The Google Cloud Platform Service Account to be used by the node VMs. Specify the email address of the Service Account; otherwise, if no Service Account is specified, the \"default\" service account is used.",
- "type": "string"
- },
- "shieldedInstanceConfig": {
- "$ref": "#/$defs/ShieldedInstanceConfig",
- "description": "Shielded Instance options."
- },
- "soleTenantConfig": {
- "$ref": "#/$defs/SoleTenantConfig",
- "description": "Parameters for node pools to be backed by shared sole tenant node groups."
- },
- "spot": {
- "description": "Spot flag for enabling Spot VM, which is a rebrand of the existing preemptible flag.",
- "type": "boolean"
- },
- "storagePools": {
- "description": "List of Storage Pools where boot disks are provisioned.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "tags": {
- "description": "The list of instance tags applied to all nodes. Tags are used to identify valid sources or targets for network firewalls and are specified by the client during cluster or node pool creation. Each tag within the list must comply with RFC1035.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "taintConfig": {
- "$ref": "#/$defs/TaintConfig",
- "description": "Optional. The taint configuration for the node pool."
- },
- "taints": {
- "description": "List of kubernetes taints to be applied to each node. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/",
- "items": {
- "$ref": "#/$defs/NodeTaint"
- },
- "type": "array"
- },
- "windowsNodeConfig": {
- "$ref": "#/$defs/WindowsNodeConfig",
- "description": "Parameters that can be configured on Windows nodes."
- },
- "workloadMetadataConfig": {
- "$ref": "#/$defs/WorkloadMetadataConfig",
- "description": "The workload metadata configuration for this node."
- }
- },
- "type": "object"
- },
- "NodeDrainConfig": {
- "description": "NodeDrainConfig contains the node drain related configurations for this nodepool.",
- "properties": {
- "respectPdbDuringNodePoolDeletion": {
- "description": "Whether to respect PDB during node pool deletion.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "NodeKernelModuleLoading": {
- "description": "Configuration for kernel module loading on nodes.",
- "properties": {
- "policy": {
- "description": "Set the node module loading policy for nodes in the node pool.",
- "enum": [
- "POLICY_UNSPECIFIED",
- "ENFORCE_SIGNED_MODULES",
- "DO_NOT_ENFORCE_SIGNED_MODULES"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default behavior. GKE selects the image based on node type. For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.",
- "Enforced signature verification: Node pools will use a Container-Optimized OS image configured to allow loading of *Google-signed* external kernel modules. Loadpin is enabled but configured to exclude modules, and kernel module signature checking is enforced.",
- "Mirrors existing DEFAULT behavior: For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not."
- ]
- }
- },
- "type": "object"
- },
- "NodeKubeletConfig": {
- "description": "Node kubelet configs.",
- "properties": {
- "allowedUnsafeSysctls": {
- "description": "Optional. Defines a comma-separated allowlist of unsafe sysctls or sysctl patterns (ending in `*`). The unsafe namespaced sysctl groups are `kernel.shm*`, `kernel.msg*`, `kernel.sem`, `fs.mqueue.*`, and `net.*`. Leaving this allowlist empty means they cannot be set on Pods. To allow certain sysctls or sysctl patterns to be set on Pods, list them separated by commas. For example: `kernel.msg*,net.ipv4.route.min_pmtu`. See https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/ for more details.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "containerLogMaxFiles": {
- "description": "Optional. Defines the maximum number of container log files that can be present for a container. See https://kubernetes.io/docs/concepts/cluster-administration/logging/#log-rotation The value must be an integer between 2 and 10, inclusive. The default value is 5 if unspecified.",
- "format": "int32",
- "type": "integer"
- },
- "containerLogMaxSize": {
- "description": "Optional. Defines the maximum size of the container log file before it is rotated. See https://kubernetes.io/docs/concepts/cluster-administration/logging/#log-rotation Valid format is positive number + unit, e.g. 100Ki, 10Mi. Valid units are Ki, Mi, Gi. The value must be between 10Mi and 500Mi, inclusive. Note that the total container log size (container_log_max_size * container_log_max_files) cannot exceed 1% of the total storage of the node, to avoid disk pressure caused by log files. The default value is 10Mi if unspecified.",
- "type": "string"
- },
- "cpuCfsQuota": {
- "description": "Enable CPU CFS quota enforcement for containers that specify CPU limits. This option is enabled by default which makes kubelet use CFS quota (https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt) to enforce container CPU limits. Otherwise, CPU limits will not be enforced at all. Disable this option to mitigate CPU throttling problems while still having your pods to be in Guaranteed QoS class by specifying the CPU limits. The default value is 'true' if unspecified.",
- "type": "boolean"
- },
- "cpuCfsQuotaPeriod": {
- "description": "Set the CPU CFS quota period value 'cpu.cfs_period_us'. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\". The value must be a positive duration between 1ms and 1 second, inclusive.",
- "type": "string"
- },
- "cpuManagerPolicy": {
- "description": "Control the CPU management policy on the node. See https://kubernetes.io/docs/tasks/administer-cluster/cpu-management-policies/ The following values are allowed. * \"none\": the default, which represents the existing scheduling behavior. * \"static\": allows pods with certain resource characteristics to be granted increased CPU affinity and exclusivity on the node. The default value is 'none' if unspecified.",
- "type": "string"
- },
- "crashLoopBackOff": {
- "$ref": "#/$defs/CrashLoopBackOffConfig",
- "description": "Optional. Contains configuration options to modify node-level parameters for container restart behavior."
- },
- "evictionMaxPodGracePeriodSeconds": {
- "description": "Optional. eviction_max_pod_grace_period_seconds is the maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. This value effectively caps the Pod's terminationGracePeriodSeconds value during soft evictions. Default: 0. Range: [0, 300].",
- "format": "int32",
- "type": "integer"
- },
- "evictionMinimumReclaim": {
- "$ref": "#/$defs/EvictionMinimumReclaim",
- "description": "Optional. eviction_minimum_reclaim is a map of signal names to quantities that defines minimum reclaims, which describe the minimum amount of a given resource the kubelet will reclaim when performing a pod eviction while that resource is under pressure."
- },
- "evictionSoft": {
- "$ref": "#/$defs/EvictionSignals",
- "description": "Optional. eviction_soft is a map of signal names to quantities that defines soft eviction thresholds. Each signal is compared to its corresponding threshold to determine if a pod eviction should occur."
- },
- "evictionSoftGracePeriod": {
- "$ref": "#/$defs/EvictionGracePeriod",
- "description": "Optional. eviction_soft_grace_period is a map of signal names to quantities that defines grace periods for each soft eviction signal. The grace period is the amount of time that a pod must be under pressure before an eviction occurs."
- },
- "imageGcHighThresholdPercent": {
- "description": "Optional. Defines the percent of disk usage after which image garbage collection is always run. The percent is calculated as this field value out of 100. The value must be between 10 and 85, inclusive and greater than image_gc_low_threshold_percent. The default value is 85 if unspecified.",
- "format": "int32",
- "type": "integer"
- },
- "imageGcLowThresholdPercent": {
- "description": "Optional. Defines the percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. The percent is calculated as this field value out of 100. The value must be between 10 and 85, inclusive and smaller than image_gc_high_threshold_percent. The default value is 80 if unspecified.",
- "format": "int32",
- "type": "integer"
- },
- "imageMaximumGcAge": {
- "description": "Optional. Defines the maximum age an image can be unused before it is garbage collected. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300s\", \"1.5h\", and \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\". The value must be a positive duration greater than image_minimum_gc_age or \"0s\". The default value is \"0s\" if unspecified, which disables this field, meaning images won't be garbage collected based on being unused for too long.",
- "type": "string"
- },
- "imageMinimumGcAge": {
- "description": "Optional. Defines the minimum age for an unused image before it is garbage collected. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300s\", \"1.5h\", and \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\". The value must be a positive duration less than or equal to 2 minutes. The default value is \"2m0s\" if unspecified.",
- "type": "string"
- },
- "insecureKubeletReadonlyPortEnabled": {
- "description": "Enable or disable Kubelet read only port.",
- "type": "boolean"
- },
- "maxParallelImagePulls": {
- "description": "Optional. Defines the maximum number of image pulls in parallel. The range is 2 to 5, inclusive. The default value is 2 or 3 depending on the disk type. See https://kubernetes.io/docs/concepts/containers/images/#maximum-parallel-image-pulls for more details.",
- "format": "int32",
- "type": "integer"
- },
- "memoryManager": {
- "$ref": "#/$defs/MemoryManager",
- "description": "Optional. Controls NUMA-aware Memory Manager configuration on the node. For more information, see: https://kubernetes.io/docs/tasks/administer-cluster/memory-manager/"
- },
- "podPidsLimit": {
- "description": "Set the Pod PID limits. See https://kubernetes.io/docs/concepts/policy/pid-limiting/#pod-pid-limits Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304.",
- "format": "int64",
- "type": "string"
- },
- "shutdownGracePeriodCriticalPodsSeconds": {
- "description": "Optional. shutdown_grace_period_critical_pods_seconds is the maximum allowed grace period (in seconds) used to terminate critical pods during a node shutdown. This value should be <= shutdown_grace_period_seconds, and is only valid if shutdown_grace_period_seconds is set. https://kubernetes.io/docs/concepts/cluster-administration/node-shutdown/ Range: [0, 120].",
- "format": "int32",
- "type": "integer"
- },
- "shutdownGracePeriodSeconds": {
- "description": "Optional. shutdown_grace_period_seconds is the maximum allowed grace period (in seconds) the total duration that the node should delay the shutdown during a graceful shutdown. This is the total grace period for pod termination for both regular and critical pods. https://kubernetes.io/docs/concepts/cluster-administration/node-shutdown/ If set to 0, node will not enable the graceful node shutdown functionality. This field is only valid for Spot VMs. Allowed values: 0, 30, 120.",
- "format": "int32",
- "type": "integer"
- },
- "singleProcessOomKill": {
- "description": "Optional. Defines whether to enable single process OOM killer. If true, will prevent the memory.oom.group flag from being set for container cgroups in cgroups v2. This causes processes in the container to be OOM killed individually instead of as a group.",
- "type": "boolean"
- },
- "topologyManager": {
- "$ref": "#/$defs/TopologyManager",
- "description": "Optional. Controls Topology Manager configuration on the node. For more information, see: https://kubernetes.io/docs/tasks/administer-cluster/topology-manager/"
- }
- },
- "type": "object"
- },
- "NodeManagement": {
- "description": "NodeManagement defines the set of node management services turned on for the node pool.",
- "properties": {
- "autoRepair": {
- "description": "A flag that specifies whether the node auto-repair is enabled for the node pool. If enabled, the nodes in this node pool will be monitored and, if they fail health checks too many times, an automatic repair action will be triggered.",
- "type": "boolean"
- },
- "autoUpgrade": {
- "description": "A flag that specifies whether node auto-upgrade is enabled for the node pool. If enabled, node auto-upgrade helps keep the nodes in your node pool up to date with the latest release version of Kubernetes.",
- "type": "boolean"
- },
- "upgradeOptions": {
- "$ref": "#/$defs/AutoUpgradeOptions",
- "description": "Specifies the Auto Upgrade knobs for the node pool."
- }
- },
- "type": "object"
- },
- "NodeNetworkConfig": {
- "description": "Parameters for node pool-level network config.",
- "properties": {
- "additionalNodeNetworkConfigs": {
- "description": "We specify the additional node networks for this node pool using this list. Each node network corresponds to an additional interface",
- "items": {
- "$ref": "#/$defs/AdditionalNodeNetworkConfig"
- },
- "type": "array"
- },
- "additionalPodNetworkConfigs": {
- "description": "We specify the additional pod networks for this node pool using this list. Each pod network corresponds to an additional alias IP range for the node",
- "items": {
- "$ref": "#/$defs/AdditionalPodNetworkConfig"
- },
- "type": "array"
- },
- "createPodRange": {
- "description": "Input only. Whether to create a new range for pod IPs in this node pool. Defaults are provided for `pod_range` and `pod_ipv4_cidr_block` if they are not specified. If neither `create_pod_range` or `pod_range` are specified, the cluster-level default (`ip_allocation_policy.cluster_ipv4_cidr_block`) is used. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created.",
- "type": "boolean",
- "writeOnly": true
- },
- "enablePrivateNodes": {
- "description": "Whether nodes have internal IP addresses only. If enable_private_nodes is not specified, then the value is derived from Cluster.NetworkConfig.default_enable_private_nodes",
- "type": "boolean"
- },
- "networkPerformanceConfig": {
- "$ref": "#/$defs/NetworkPerformanceConfig",
- "description": "Network bandwidth tier configuration."
- },
- "networkTierConfig": {
- "$ref": "#/$defs/NetworkTierConfig",
- "description": "Output only. The network tier configuration for the node pool inherits from the cluster-level configuration and remains immutable throughout the node pool's lifecycle, including during upgrades.",
- "readOnly": true
- },
- "podCidrOverprovisionConfig": {
- "$ref": "#/$defs/PodCIDROverprovisionConfig",
- "description": "[PRIVATE FIELD] Pod CIDR size overprovisioning config for the nodepool. Pod CIDR size per node depends on max_pods_per_node. By default, the value of max_pods_per_node is rounded off to next power of 2 and we then double that to get the size of pod CIDR block per node. Example: max_pods_per_node of 30 would result in 64 IPs (/26). This config can disable the doubling of IPs (we still round off to next power of 2) Example: max_pods_per_node of 30 will result in 32 IPs (/27) when overprovisioning is disabled."
- },
- "podIpv4CidrBlock": {
- "description": "The IP address range for pod IPs in this node pool. Only applicable if `create_pod_range` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) to pick a specific range to use. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created.",
- "type": "string"
- },
- "podIpv4RangeUtilization": {
- "description": "Output only. The utilization of the IPv4 range for the pod. The ratio is Usage/[Total number of IPs in the secondary range], Usage=numNodes*numZones*podIPsPerNode.",
- "format": "double",
- "readOnly": true,
- "type": "number"
- },
- "podRange": {
- "description": "The ID of the secondary range for pod IPs. If `create_pod_range` is true, this ID is used for the new range. If `create_pod_range` is false, uses an existing secondary range with this ID. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created.",
- "type": "string"
- },
- "subnetwork": {
- "description": "Optional. The subnetwork name/path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork can be either: - A user supplied subnetwork name during node pool creation (e.g., `my-subnet`). The name must be between 1 and 63 characters long, start with a letter, contain only letters, numbers, and hyphens, and end with a letter or a number. - A full subnetwork path during node pool creation, such as `projects/gke-project/regions/us-central1/subnetworks/my-subnet` - A subnetwork path picked based on the IP utilization during node pool creation and is immutable.",
- "type": "string"
- }
- },
- "type": "object"
- },
- "NodePool": {
- "description": "NodePool contains the name and configuration for a cluster's node pool. Node pools are a set of nodes (i.e. VM's), with a common configuration and specification, under the control of the cluster master. They may have a set of Kubernetes labels applied to them, which may be used to reference them during pod scheduling. They may also be resized up or down, to accommodate the workload.",
- "properties": {
- "autopilotConfig": {
- "$ref": "#/$defs/AutopilotConfig",
- "description": "Specifies the autopilot configuration for this node pool. This field is exclusively reserved for Cluster Autoscaler."
- },
- "autoscaling": {
- "$ref": "#/$defs/NodePoolAutoscaling",
- "description": "Autoscaler configuration for this NodePool. Autoscaler is enabled only if a valid configuration is present."
- },
- "bestEffortProvisioning": {
- "$ref": "#/$defs/BestEffortProvisioning",
- "description": "Enable best effort provisioning for nodes"
- },
- "conditions": {
- "description": "Which conditions caused the current node pool state.",
- "items": {
- "$ref": "#/$defs/StatusCondition"
- },
- "type": "array"
- },
- "config": {
- "$ref": "#/$defs/NodeConfig",
- "description": "The node configuration of the pool."
- },
- "etag": {
- "description": "This checksum is computed by the server based on the value of node pool fields, and may be sent on update requests to ensure the client has an up-to-date value before proceeding.",
- "type": "string"
- },
- "initialNodeCount": {
- "description": "The initial node count for the pool. You must ensure that your Compute Engine [resource quota](https://cloud.google.com/compute/quotas) is sufficient for this number of instances. You must also have available firewall and routes quota.",
- "format": "int32",
- "type": "integer"
- },
- "instanceGroupUrls": {
- "description": "Output only. The resource URLs of the [managed instance groups](https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances) associated with this node pool. During the node pool blue-green upgrade operation, the URLs contain both blue and green resources.",
- "items": {
- "type": "string"
- },
- "readOnly": true,
- "type": "array"
- },
- "locations": {
- "description": "The list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the NodePool's nodes should be located. If this value is unspecified during node pool creation, the [Cluster.Locations](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters#Cluster.FIELDS.locations) value will be used, instead. Warning: changing node pool locations will result in nodes being added and/or removed.",
- "items": {
- "type": "string"
- },
- "type": "array"
- },
- "management": {
- "$ref": "#/$defs/NodeManagement",
- "description": "NodeManagement configuration for this NodePool."
- },
- "maxPodsConstraint": {
- "$ref": "#/$defs/MaxPodsConstraint",
- "description": "The constraint on the maximum number of pods that can be run simultaneously on a node in the node pool."
- },
- "name": {
- "description": "The name of the node pool.",
- "type": "string"
- },
- "networkConfig": {
- "$ref": "#/$defs/NodeNetworkConfig",
- "description": "Networking configuration for this NodePool. If specified, it overrides the cluster-level defaults."
- },
- "nodeDrainConfig": {
- "$ref": "#/$defs/NodeDrainConfig",
- "description": "Specifies the node drain configuration for this node pool."
- },
- "placementPolicy": {
- "$ref": "#/$defs/PlacementPolicy",
- "description": "Specifies the node placement policy."
- },
- "podIpv4CidrSize": {
- "description": "Output only. The pod CIDR block size per node in this node pool.",
- "format": "int32",
- "readOnly": true,
- "type": "integer"
- },
- "queuedProvisioning": {
- "$ref": "#/$defs/QueuedProvisioning",
- "description": "Specifies the configuration of queued provisioning."
- },
- "selfLink": {
- "description": "Output only. Server-defined URL for the resource.",
- "readOnly": true,
- "type": "string"
- },
- "status": {
- "description": "Output only. The status of the nodes in this pool instance.",
- "enum": [
- "STATUS_UNSPECIFIED",
- "PROVISIONING",
- "RUNNING",
- "RUNNING_WITH_ERROR",
- "RECONCILING",
- "STOPPING",
- "ERROR"
- ],
- "readOnly": true,
- "type": "string",
- "x-google-enum-descriptions": [
- "Not set.",
- "The PROVISIONING state indicates the node pool is being created.",
- "The RUNNING state indicates the node pool has been created and is fully usable.",
- "The RUNNING_WITH_ERROR state indicates the node pool has been created and is partially usable. Some error state has occurred and some functionality may be impaired. Customer may need to reissue a request or trigger a new update.",
- "The RECONCILING state indicates that some work is actively being done on the node pool, such as upgrading node software. Details can be found in the `statusMessage` field.",
- "The STOPPING state indicates the node pool is being deleted.",
- "The ERROR state indicates the node pool may be unusable. Details can be found in the `statusMessage` field."
- ]
- },
- "statusMessage": {
- "deprecated": true,
- "description": "Output only. Deprecated. Use conditions instead. Additional information about the current status of this node pool instance, if available.",
- "readOnly": true,
- "type": "string"
- },
- "updateInfo": {
- "$ref": "#/$defs/UpdateInfo",
- "description": "Output only. Update info contains relevant information during a node pool update.",
- "readOnly": true
- },
- "upgradeSettings": {
- "$ref": "#/$defs/UpgradeSettings",
- "description": "Upgrade settings control disruption and speed of the upgrade."
- },
- "version": {
- "description": "The version of Kubernetes running on this NodePool's nodes. If unspecified, it defaults as described [here](https://cloud.google.com/kubernetes-engine/versioning#specifying_node_version).",
- "type": "string"
- }
- },
- "type": "object"
- },
- "NodePoolAutoscaling": {
- "description": "NodePoolAutoscaling contains information required by cluster autoscaler to adjust the size of the node pool to the current cluster usage.",
- "properties": {
- "autoprovisioned": {
- "description": "Can this node pool be deleted automatically.",
- "type": "boolean"
- },
- "enabled": {
- "description": "Is autoscaling enabled for this node pool.",
- "type": "boolean"
- },
- "locationPolicy": {
- "description": "Location policy used when scaling up a nodepool.",
- "enum": [
- "LOCATION_POLICY_UNSPECIFIED",
- "BALANCED",
- "ANY"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Not set.",
- "BALANCED is a best effort policy that aims to balance the sizes of different zones.",
- "ANY policy picks zones that have the highest capacity available."
- ]
- },
- "maxNodeCount": {
- "description": "Maximum number of nodes for one location in the node pool. Must be >= min_node_count. There has to be enough quota to scale up the cluster.",
- "format": "int32",
- "type": "integer"
- },
- "minNodeCount": {
- "description": "Minimum number of nodes for one location in the node pool. Must be greater than or equal to 0 and less than or equal to max_node_count.",
- "format": "int32",
- "type": "integer"
- },
- "totalMaxNodeCount": {
- "description": "Maximum number of nodes in the node pool. Must be greater than or equal to total_min_node_count. There has to be enough quota to scale up the cluster. The total_*_node_count fields are mutually exclusive with the *_node_count fields.",
- "format": "int32",
- "type": "integer"
- },
- "totalMinNodeCount": {
- "description": "Minimum number of nodes in the node pool. Must be greater than or equal to 0 and less than or equal to total_max_node_count. The total_*_node_count fields are mutually exclusive with the *_node_count fields.",
- "format": "int32",
- "type": "integer"
- }
- },
- "type": "object"
- },
- "NodePoolLoggingConfig": {
- "description": "NodePoolLoggingConfig specifies logging configuration for nodepools.",
- "properties": {
- "variantConfig": {
- "$ref": "#/$defs/LoggingVariantConfig",
- "description": "Logging variant configuration."
- }
- },
- "type": "object"
- },
- "NodeTaint": {
- "description": "Kubernetes taint is composed of three fields: key, value, and effect. Effect can only be one of three types: NoSchedule, PreferNoSchedule or NoExecute. See [here](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration) for more information, including usage and the valid values.",
- "properties": {
- "effect": {
- "description": "Effect for taint.",
- "enum": [
- "EFFECT_UNSPECIFIED",
- "NO_SCHEDULE",
- "PREFER_NO_SCHEDULE",
- "NO_EXECUTE"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Not set",
- "NoSchedule",
- "PreferNoSchedule",
- "NoExecute"
- ]
- },
- "key": {
- "description": "Key for taint.",
- "type": "string"
- },
- "value": {
- "description": "Value for taint.",
- "type": "string"
- }
- },
- "type": "object"
- },
- "PlacementPolicy": {
- "description": "PlacementPolicy defines the placement policy used by the node pool.",
- "properties": {
- "policyName": {
- "description": "If set, refers to the name of a custom resource policy supplied by the user. The resource policy must be in the same project and region as the node pool. If not found, InvalidArgument error is returned.",
- "type": "string"
- },
- "tpuTopology": {
- "description": "Optional. TPU placement topology for pod slice node pool. https://cloud.google.com/tpu/docs/types-topologies#tpu_topologies",
- "type": "string"
- },
- "type": {
- "description": "The type of placement.",
- "enum": [
- "TYPE_UNSPECIFIED",
- "COMPACT"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "TYPE_UNSPECIFIED specifies no requirements on nodes placement.",
- "COMPACT specifies node placement in the same availability domain to ensure low communication latency."
- ]
- }
- },
- "type": "object"
- },
- "PodCIDROverprovisionConfig": {
- "description": "[PRIVATE FIELD] Config for pod CIDR size overprovisioning.",
- "properties": {
- "disable": {
- "description": "Whether Pod CIDR overprovisioning is disabled. Note: Pod CIDR overprovisioning is enabled by default.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "PrivateRegistryAccessConfig": {
- "description": "PrivateRegistryAccessConfig contains access configuration for private container registries.",
- "properties": {
- "certificateAuthorityDomainConfig": {
- "description": "Private registry access configuration.",
- "items": {
- "$ref": "#/$defs/CertificateAuthorityDomainConfig"
- },
- "type": "array"
- },
- "enabled": {
- "description": "Private registry access is enabled.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "QueuedProvisioning": {
- "description": "QueuedProvisioning defines the queued provisioning used by the node pool.",
- "properties": {
- "enabled": {
- "description": "Denotes that this nodepool is QRM specific, meaning nodes can be only obtained through queuing via the Cluster Autoscaler ProvisioningRequest API.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "RegistryHeader": {
- "description": "RegistryHeader configures headers for the registry.",
- "properties": {
- "key": {
- "description": "Key configures the header key.",
- "type": "string"
- },
- "value": {
- "description": "Value configures the header value.",
- "items": {
- "type": "string"
- },
- "type": "array"
- }
- },
- "type": "object"
- },
- "RegistryHostConfig": {
- "description": "RegistryHostConfig configures the top-level structure for a single containerd registry server's configuration, which represents one hosts.toml file on the node. It will override the same fqdns in PrivateRegistryAccessConfig.",
- "properties": {
- "hosts": {
- "description": "HostConfig configures a list of host-specific configurations for the server. Each server can have at most 10 host configurations.",
- "items": {
- "$ref": "#/$defs/HostConfig"
- },
- "type": "array"
- },
- "server": {
- "description": "Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
- "type": "string"
- }
- },
- "type": "object"
- },
- "ReservationAffinity": {
- "description": "[ReservationAffinity](https://cloud.google.com/compute/docs/instances/reserving-zonal-resources) is the configuration of desired reservation which instances could take capacity from.",
- "properties": {
- "consumeReservationType": {
- "description": "Corresponds to the type of reservation consumption.",
- "enum": [
- "UNSPECIFIED",
- "NO_RESERVATION",
- "ANY_RESERVATION",
- "SPECIFIC_RESERVATION"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. This should not be used.",
- "Do not consume from any reserved capacity.",
- "Consume any reservation available.",
- "Must consume from a specific reservation. Must specify key value fields for specifying the reservations."
- ]
- },
- "key": {
- "description": "Corresponds to the label key of a reservation resource. To target a SPECIFIC_RESERVATION by name, specify \"compute.googleapis.com/reservation-name\" as the key and specify the name of your reservation as its value.",
- "type": "string"
- },
- "values": {
- "description": "Corresponds to the label value(s) of reservation resource(s).",
- "items": {
- "type": "string"
- },
- "type": "array"
- }
- },
- "type": "object"
- },
- "ResourceManagerTags": {
- "description": "A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications in https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications. A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values.",
- "properties": {
- "tags": {
- "additionalProperties": {
- "type": "string"
- },
- "description": "TagKeyValue must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`",
- "type": "object"
- }
- },
- "type": "object"
- },
- "SandboxConfig": {
- "description": "SandboxConfig contains configurations of the sandbox to use for the node.",
- "properties": {
- "type": {
- "description": "Type of the sandbox to use for the node.",
- "enum": [
- "UNSPECIFIED",
- "GVISOR"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value. This should not be used.",
- "Run sandbox using gvisor."
- ]
- }
- },
- "type": "object"
- },
- "SecondaryBootDisk": {
- "description": "SecondaryBootDisk represents a persistent disk attached to a node with special configurations based on its mode.",
- "properties": {
- "diskImage": {
- "description": "Fully-qualified resource ID for an existing disk image.",
- "type": "string"
- },
- "mode": {
- "description": "Disk mode (container image cache, etc.)",
- "enum": [
- "MODE_UNSPECIFIED",
- "CONTAINER_IMAGE_CACHE"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "MODE_UNSPECIFIED is when mode is not set.",
- "CONTAINER_IMAGE_CACHE is for using the secondary boot disk as a container image cache."
- ]
- }
- },
- "type": "object"
- },
- "SecondaryBootDiskUpdateStrategy": {
- "description": "SecondaryBootDiskUpdateStrategy is a placeholder which will be extended in the future to define different options for updating secondary boot disks.",
- "type": "object"
- },
- "ShieldedInstanceConfig": {
- "description": "A set of Shielded Instance options.",
- "properties": {
- "enableIntegrityMonitoring": {
- "description": "Defines whether the instance has integrity monitoring enabled. Enables monitoring and attestation of the boot integrity of the instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the instance is created.",
- "type": "boolean"
- },
- "enableSecureBoot": {
- "description": "Defines whether the instance has Secure Boot enabled. Secure Boot helps ensure that the system only runs authentic software by verifying the digital signature of all boot components, and halting the boot process if signature verification fails.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "SoleTenantConfig": {
- "description": "SoleTenantConfig contains the NodeAffinities to specify what shared sole tenant node groups should back the node pool.",
- "properties": {
- "minNodeCpus": {
- "description": "Optional. The minimum number of virtual CPUs this instance will consume when running on a sole-tenant node. This field can only be set if the node pool is created in a shared sole-tenant node group.",
- "format": "int32",
- "type": "integer"
- },
- "nodeAffinities": {
- "description": "NodeAffinities used to match to a shared sole tenant node group.",
- "items": {
- "$ref": "#/$defs/NodeAffinity"
- },
- "type": "array"
- }
- },
- "type": "object"
- },
- "StandardRolloutPolicy": {
- "description": "Standard rollout policy is the default policy for blue-green.",
- "properties": {
- "batchNodeCount": {
- "description": "Number of blue nodes to drain in a batch.",
- "format": "int32",
- "type": "integer"
- },
- "batchPercentage": {
- "description": "Percentage of the blue pool nodes to drain in a batch. The range of this field should be (0.0, 1.0].",
- "format": "float",
- "type": "number"
- },
- "batchSoakDuration": {
- "description": "Soak time after each batch gets drained. Default to zero.",
- "format": "google-duration",
- "type": "string"
- }
- },
- "type": "object"
- },
- "StatusCondition": {
- "description": "StatusCondition describes why a cluster or a node pool has a certain status (e.g., ERROR or DEGRADED).",
- "properties": {
- "canonicalCode": {
- "description": "Canonical code of the condition.",
- "enum": [
- "OK",
- "CANCELLED",
- "UNKNOWN",
- "INVALID_ARGUMENT",
- "DEADLINE_EXCEEDED",
- "NOT_FOUND",
- "ALREADY_EXISTS",
- "PERMISSION_DENIED",
- "UNAUTHENTICATED",
- "RESOURCE_EXHAUSTED",
- "FAILED_PRECONDITION",
- "ABORTED",
- "OUT_OF_RANGE",
- "UNIMPLEMENTED",
- "INTERNAL",
- "UNAVAILABLE",
- "DATA_LOSS"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Not an error; returned on success. HTTP Mapping: 200 OK",
- "The operation was cancelled, typically by the caller. HTTP Mapping: 499 Client Closed Request",
- "Unknown error. For example, this error may be returned when a `Status` value received from another address space belongs to an error space that is not known in this address space. Also errors raised by APIs that do not return enough error information may be converted to this error. HTTP Mapping: 500 Internal Server Error",
- "The client specified an invalid argument. Note that this differs from `FAILED_PRECONDITION`. `INVALID_ARGUMENT` indicates arguments that are problematic regardless of the state of the system (e.g., a malformed file name). HTTP Mapping: 400 Bad Request",
- "The deadline expired before the operation could complete. For operations that change the state of the system, this error may be returned even if the operation has completed successfully. For example, a successful response from a server could have been delayed long enough for the deadline to expire. HTTP Mapping: 504 Gateway Timeout",
- "Some requested entity (e.g., file or directory) was not found. Note to server developers: if a request is denied for an entire class of users, such as gradual feature rollout or undocumented allowlist, `NOT_FOUND` may be used. If a request is denied for some users within a class of users, such as user-based access control, `PERMISSION_DENIED` must be used. HTTP Mapping: 404 Not Found",
- "The entity that a client attempted to create (e.g., file or directory) already exists. HTTP Mapping: 409 Conflict",
- "The caller does not have permission to execute the specified operation. `PERMISSION_DENIED` must not be used for rejections caused by exhausting some resource (use `RESOURCE_EXHAUSTED` instead for those errors). `PERMISSION_DENIED` must not be used if the caller can not be identified (use `UNAUTHENTICATED` instead for those errors). This error code does not imply the request is valid or the requested entity exists or satisfies other pre-conditions. HTTP Mapping: 403 Forbidden",
- "The request does not have valid authentication credentials for the operation. HTTP Mapping: 401 Unauthorized",
- "Some resource has been exhausted, perhaps a per-user quota, or perhaps the entire file system is out of space. HTTP Mapping: 429 Too Many Requests",
- "The operation was rejected because the system is not in a state required for the operation's execution. For example, the directory to be deleted is non-empty, an rmdir operation is applied to a non-directory, etc. Service implementors can use the following guidelines to decide between `FAILED_PRECONDITION`, `ABORTED`, and `UNAVAILABLE`: (a) Use `UNAVAILABLE` if the client can retry just the failing call. (b) Use `ABORTED` if the client should retry at a higher level. For example, when a client-specified test-and-set fails, indicating the client should restart a read-modify-write sequence. (c) Use `FAILED_PRECONDITION` if the client should not retry until the system state has been explicitly fixed. For example, if an \"rmdir\" fails because the directory is non-empty, `FAILED_PRECONDITION` should be returned since the client should not retry unless the files are deleted from the directory. HTTP Mapping: 400 Bad Request",
- "The operation was aborted, typically due to a concurrency issue such as a sequencer check failure or transaction abort. See the guidelines above for deciding between `FAILED_PRECONDITION`, `ABORTED`, and `UNAVAILABLE`. HTTP Mapping: 409 Conflict",
- "The operation was attempted past the valid range. E.g., seeking or reading past end-of-file. Unlike `INVALID_ARGUMENT`, this error indicates a problem that may be fixed if the system state changes. For example, a 32-bit file system will generate `INVALID_ARGUMENT` if asked to read at an offset that is not in the range [0,2^32-1], but it will generate `OUT_OF_RANGE` if asked to read from an offset past the current file size. There is a fair bit of overlap between `FAILED_PRECONDITION` and `OUT_OF_RANGE`. We recommend using `OUT_OF_RANGE` (the more specific error) when it applies so that callers who are iterating through a space can easily look for an `OUT_OF_RANGE` error to detect when they are done. HTTP Mapping: 400 Bad Request",
- "The operation is not implemented or is not supported/enabled in this service. HTTP Mapping: 501 Not Implemented",
- "Internal errors. This means that some invariants expected by the underlying system have been broken. This error code is reserved for serious errors. HTTP Mapping: 500 Internal Server Error",
- "The service is currently unavailable. This is most likely a transient condition, which can be corrected by retrying with a backoff. Note that it is not always safe to retry non-idempotent operations. See the guidelines above for deciding between `FAILED_PRECONDITION`, `ABORTED`, and `UNAVAILABLE`. HTTP Mapping: 503 Service Unavailable",
- "Unrecoverable data loss or corruption. HTTP Mapping: 500 Internal Server Error"
- ]
- },
- "code": {
- "deprecated": true,
- "description": "Machine-friendly representation of the condition Deprecated. Use canonical_code instead.",
- "enum": [
- "UNKNOWN",
- "GCE_STOCKOUT",
- "GKE_SERVICE_ACCOUNT_DELETED",
- "GCE_QUOTA_EXCEEDED",
- "SET_BY_OPERATOR",
- "CLOUD_KMS_KEY_ERROR",
- "CA_EXPIRING",
- "NODE_SERVICE_ACCOUNT_MISSING_PERMISSIONS",
- "CLOUD_KMS_KEY_DESTROYED"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "UNKNOWN indicates a generic condition.",
- "GCE_STOCKOUT indicates that Google Compute Engine resources are temporarily unavailable.",
- "GKE_SERVICE_ACCOUNT_DELETED indicates that the user deleted their robot service account.",
- "Google Compute Engine quota was exceeded.",
- "Cluster state was manually changed by an SRE due to a system logic error.",
- "Unable to perform an encrypt operation against the CloudKMS key used for etcd level encryption.",
- "Cluster CA is expiring soon.",
- "Node service account is missing permissions.",
- "Cloud KMS key version used for etcd level encryption has been destroyed. This is a permanent error."
- ]
- },
- "message": {
- "description": "Human-friendly representation of the condition",
- "type": "string"
- }
- },
- "type": "object"
- },
- "SwapConfig": {
- "description": "Configuration for swap memory on a node pool.",
- "properties": {
- "bootDiskProfile": {
- "$ref": "#/$defs/BootDiskProfile",
- "description": "Swap on the node's boot disk."
- },
- "dedicatedLocalSsdProfile": {
- "$ref": "#/$defs/DedicatedLocalSsdProfile",
- "description": "Provisions a new, separate local NVMe SSD exclusively for swap."
- },
- "enabled": {
- "description": "Optional. Enables or disables swap for the node pool.",
- "type": "boolean"
- },
- "encryptionConfig": {
- "$ref": "#/$defs/EncryptionConfig",
- "description": "Optional. If omitted, swap space is encrypted by default."
- },
- "ephemeralLocalSsdProfile": {
- "$ref": "#/$defs/EphemeralLocalSsdProfile",
- "description": "Swap on the local SSD shared with pod ephemeral storage."
- }
- },
- "type": "object"
- },
- "TaintConfig": {
- "description": "TaintConfig contains the configuration for the taints of the node pool.",
- "properties": {
- "architectureTaintBehavior": {
- "description": "Optional. Controls architecture tainting behavior.",
- "enum": [
- "ARCHITECTURE_TAINT_BEHAVIOR_UNSPECIFIED",
- "NONE",
- "ARM"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Specifies that the behavior is unspecified, defaults to ARM.",
- "Disables default architecture taints on the node pool.",
- "Taints all the nodes in the node pool with the default ARM taint."
- ]
- }
- },
- "type": "object"
- },
- "TopologyManager": {
- "description": "TopologyManager defines the configuration options for Topology Manager feature. See https://kubernetes.io/docs/tasks/administer-cluster/topology-manager/",
- "properties": {
- "policy": {
- "description": "Configures the strategy for resource alignment. Allowed values are: * none: the default policy, and does not perform any topology alignment. * restricted: the topology manager stores the preferred NUMA node affinity for the container, and will reject the pod if the affinity if not preferred. * best-effort: the topology manager stores the preferred NUMA node affinity for the container. If the affinity is not preferred, the topology manager will admit the pod to the node anyway. * single-numa-node: the topology manager determines if the single NUMA node affinity is possible. If it is, Topology Manager will store this and the Hint Providers can then use this information when making the resource allocation decision. If, however, this is not possible then the Topology Manager will reject the pod from the node. This will result in a pod in a Terminated state with a pod admission failure. The default policy value is 'none' if unspecified. Details about each strategy can be found [here](https://kubernetes.io/docs/tasks/administer-cluster/topology-manager/#topology-manager-policies).",
- "type": "string"
- },
- "scope": {
- "description": "The Topology Manager aligns resources in following scopes: * container * pod The default scope is 'container' if unspecified. See https://kubernetes.io/docs/tasks/administer-cluster/topology-manager/#topology-manager-scopes",
- "type": "string"
- }
- },
- "type": "object"
- },
- "UpdateInfo": {
- "description": "UpdateInfo contains resource (instance groups, etc), status and other intermediate information relevant to a node pool upgrade.",
- "properties": {
- "blueGreenInfo": {
- "$ref": "#/$defs/BlueGreenInfo",
- "description": "Information of a blue-green upgrade."
- }
- },
- "type": "object"
- },
- "UpgradeSettings": {
- "description": "These upgrade settings control the level of parallelism and the level of disruption caused by an upgrade. maxUnavailable controls the number of nodes that can be simultaneously unavailable. maxSurge controls the number of additional nodes that can be added to the node pool temporarily for the time of the upgrade to increase the number of available nodes. (maxUnavailable + maxSurge) determines the level of parallelism (how many nodes are being upgraded at the same time). Note: upgrades inevitably introduce some disruption since workloads need to be moved from old nodes to new, upgraded ones. Even if maxUnavailable=0, this holds true. (Disruption stays within the limits of PodDisruptionBudget, if it is configured.) Consider a hypothetical node pool with 5 nodes having maxSurge=2, maxUnavailable=1. This means the upgrade process upgrades 3 nodes simultaneously. It creates 2 additional (upgraded) nodes, then it brings down 3 old (not yet upgraded) nodes at the same time. This ensures that there are always at least 4 nodes available. These upgrade settings configure the upgrade strategy for the node pool. Use strategy to switch between the strategies applied to the node pool. If the strategy is ROLLING, use max_surge and max_unavailable to control the level of parallelism and the level of disruption caused by upgrade. 1. maxSurge controls the number of additional nodes that can be added to the node pool temporarily for the time of the upgrade to increase the number of available nodes. 2. maxUnavailable controls the number of nodes that can be simultaneously unavailable. 3. (maxUnavailable + maxSurge) determines the level of parallelism (how many nodes are being upgraded at the same time). If the strategy is BLUE_GREEN, use blue_green_settings to configure the blue-green upgrade related settings. 1. standard_rollout_policy is the default policy. The policy is used to control the way blue pool gets drained. The draining is executed in the batch mode. The batch size could be specified as either percentage of the node pool size or the number of nodes. batch_soak_duration is the soak time after each batch gets drained. 2. node_pool_soak_duration is the soak time after all blue nodes are drained. After this period, the blue pool nodes will be deleted.",
- "properties": {
- "blueGreenSettings": {
- "$ref": "#/$defs/BlueGreenSettings",
- "description": "Settings for blue-green upgrade strategy."
- },
- "maxSurge": {
- "description": "The maximum number of nodes that can be created beyond the current size of the node pool during the upgrade process.",
- "format": "int32",
- "type": "integer"
- },
- "maxUnavailable": {
- "description": "The maximum number of nodes that can be simultaneously unavailable during the upgrade process. A node is considered available if its status is Ready.",
- "format": "int32",
- "type": "integer"
- },
- "strategy": {
- "description": "Update strategy of the node pool.",
- "enum": [
- "NODE_POOL_UPDATE_STRATEGY_UNSPECIFIED",
- "BLUE_GREEN",
- "SURGE",
- "SHORT_LIVED"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Default value if unset. GKE internally defaults the update strategy to SURGE for unspecified strategies.",
- "blue-green upgrade.",
- "SURGE is the traditional way of upgrade a node pool. max_surge and max_unavailable determines the level of upgrade parallelism.",
- "SHORT_LIVED is the dedicated upgrade strategy for QueuedProvisioning and flex start nodepools scaled up only by enqueueing to the Dynamic Workload Scheduler (DWS)."
- ]
- }
- },
- "type": "object"
- },
- "VirtualNIC": {
- "description": "Configuration of gVNIC feature.",
- "properties": {
- "enabled": {
- "description": "Whether gVNIC features are enabled in the node pool.",
- "type": "boolean"
- }
- },
- "type": "object"
- },
- "WindowsNodeConfig": {
- "description": "Parameters that can be configured on Windows nodes. Windows Node Config that define the parameters that will be used to configure the Windows node pool settings.",
- "properties": {
- "osVersion": {
- "description": "OSVersion specifies the Windows node config to be used on the node.",
- "enum": [
- "OS_VERSION_UNSPECIFIED",
- "OS_VERSION_LTSC2019",
- "OS_VERSION_LTSC2022"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "When OSVersion is not specified.",
- "LTSC2019 specifies to use LTSC2019 as the Windows Servercore Base Image.",
- "LTSC2022 specifies to use LTSC2022 as the Windows Servercore Base Image."
- ]
- }
- },
- "type": "object"
- },
- "WorkloadMetadataConfig": {
- "description": "WorkloadMetadataConfig defines the metadata configuration to expose to workloads on the node pool.",
- "properties": {
- "mode": {
- "description": "Mode is the configuration for how to expose metadata to workloads running on the node pool.",
- "enum": [
- "MODE_UNSPECIFIED",
- "GCE_METADATA",
- "GKE_METADATA"
- ],
- "type": "string",
- "x-google-enum-descriptions": [
- "Not set.",
- "Expose all Compute Engine metadata to pods.",
- "Run the GKE Metadata Server on this node. The GKE Metadata Server exposes a metadata API to workloads that is compatible with the V1 Compute Metadata APIs exposed by the Compute Engine and App Engine Metadata Servers. This feature can only be enabled if Workload Identity is enabled at the cluster level."
- ]
- }
- },
- "type": "object"
- },
- "WritableCgroups": {
- "description": "Defines writable cgroups configuration.",
- "properties": {
- "enabled": {
- "description": "Optional. Whether writable cgroups is enabled.",
- "type": "boolean"
- }
- },
- "type": "object"
- }
-}