Marketplace
BrowsePublish
Marketplace
You are viewing an outdated version of provider-azure.Go to Latest
upbound/provider-azure@v0.30.0
KubernetesCluster
containerservice.azure.upbound.io
KubernetesCluster
upbound/provider-azure@v0.30.0containerservice.azure.upbound.io

KubernetesCluster is the Schema for the KubernetesClusters API. Manages a managed Kubernetes Cluster (also known as AKS / Azure Kubernetes Service)

Type

CRD

Group

containerservice.azure.upbound.io

Version

v1beta1

apiVersion: containerservice.azure.upbound.io/v1beta1

kind: KubernetesCluster

API Documentation
apiVersion
string
kind
string
metadata
object
spec
object
object

KubernetesClusterSpec defines the desired state of KubernetesCluster

forProvider
requiredobject
requiredobject

No description provided.

array

A aci_connector_linux block as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes.

object

Reference to a Subnet in network to populate subnetName.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a Subnet in network to populate subnetName.

policy
object
object

Policies for selection.

resolve
string
array

An api_server_access_profile block as defined below.

array

Set of authorized IP ranges to allow access to API server, e.g. ["198.51.100.0/24"].

subnetId
string
object

Reference to a Subnet in network to populate subnetId.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a Subnet in network to populate subnetId.

policy
object
object

Policies for selection.

resolve
string
array

No description provided.

array

A azure_active_directory_role_based_access_control block as defined below.

array

A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.

managed
boolean
object

The Server Secret of an Azure Active Directory Application.

key
requiredstring
name
requiredstring
namespace
requiredstring
tenantId
string
array

A confidential_computing block as defined below. For more details please the documentation

sgxQuoteHelperEnabled
requiredboolean
defaultNodePool
requiredarray
requiredarray

A default_node_pool block as defined below.

array

A kubelet_config block as defined below. Changing this forces a new resource to be created.

array

Specifies the allow list of unsafe sysctls command or patterns (ending in *). Changing this forces a new resource to be created.

podMaxPid
number
maxCount
number
maxPods
number
minCount
number
name
requiredstring
nodeCount
number
array

A node_network_profile block as documented below.

array

A list of the taints added to new nodes during node pool create and scale. Changing this forces a new resource to be created.

osSku
string
object

Reference to a Subnet in network to populate podSubnetId.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a Subnet in network to populate podSubnetId.

policy
object
object

Policies for selection.

resolve
string
tags
object
type
string
array

A upgrade_settings block as documented below.

maxSurge
requiredstring
vmSize
requiredstring
object

Reference to a Subnet in network to populate vnetSubnetId.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a Subnet in network to populate vnetSubnetId.

policy
object
object

Policies for selection.

resolve
string
zones
array
array

Specifies a list of Availability Zones in which this Kubernetes Cluster should be located. Changing this forces a new Kubernetes Cluster to be created.

dnsPrefix
string
edgeZone
string
array

A http_proxy_config block as defined below.

httpProxy
string
noProxy
array
array

The list of domains that will not use the proxy for communication. Changing this forces a new resource to be created.

object

The base64 encoded alternative CA certificate content in PEM format.

key
requiredstring
name
requiredstring
namespace
requiredstring
array

An identity block as defined below. One of either identity or service_principal must be specified.

array

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Kubernetes Cluster.

type
requiredstring
array

An ingress_application_gateway block as defined below.

gatewayId
string
subnetId
string
object

Reference to a Subnet in network to populate subnetId.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a Subnet in network to populate subnetId.

policy
object
object

Policies for selection.

resolve
string
array

A key_management_service block as defined below. For more details, please visit Key Management Service (KMS) etcd encryption to an AKS cluster.

array

A key_vault_secrets_provider block as defined below.

array

A kubelet_identity block as defined below.

array

A linux_profile block as defined below.

adminUsername
requiredstring
sshKey
requiredarray
requiredarray

An ssh_key block. Only one is currently allowed. Changing this will update the key on all node pools. More information can be found in the documentation.

keyData
requiredstring
location
requiredstring
array

A maintenance_window block as defined below.

allowed
array
array

One or more allowed blocks as defined below.

day
requiredstring
hours
requiredarray
requiredarray

An array of hour slots in a day. For example, specifying 1 will allow maintenance from 1:00am to 2:00am. Specifying 1, 2 will allow maintenance from 1:00am to 3:00m. Possible values are between 0 and 23.

array

One or more not_allowed block as defined below.

end
requiredstring
start
requiredstring
array

A microsoft_defender block as defined below.

array

Specifies a Prometheus add-on profile for the Kubernetes Cluster. A monitor_metrics block as defined below.

array

A network_profile block as defined below.

array

Specifies a list of IP versions the Kubernetes Cluster will use to assign IP addresses to its nodes and pods. Possible values are IPv4 and/or IPv6. IPv4 must always be specified. Changing this forces a new resource to be created.

array

A load_balancer_profile block as defined below. This can only be specified when load_balancer_sku is set to standard. Changing this forces a new resource to be created.

array

The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.

array

The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.

array

A nat_gateway_profile block as defined below.

networkPlugin
requiredstring
podCidr
string
array

A list of CIDRs to use for pod IP addresses. For single-stack networking a single IPv4 CIDR is expected. For dual-stack networking an IPv4 and IPv6 CIDR are expected. Changing this forces a new resource to be created.

array

A list of CIDRs to use for Kubernetes services. For single-stack networking a single IPv4 CIDR is expected. For dual-stack networking an IPv4 and IPv6 CIDR are expected. Changing this forces a new resource to be created.

array

An oms_agent block as defined below.

object

Reference to a PrivateDNSZone in network to populate privateDnsZoneId.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a PrivateDNSZone in network to populate privateDnsZoneId.

policy
object
object

Policies for selection.

resolve
string
object

Reference to a ResourceGroup in azure to populate resourceGroupName.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

Selector for a ResourceGroup in azure to populate resourceGroupName.

policy
object
object

Policies for selection.

resolve
string
array

A service_principal block as documented below. One of either identity or service_principal must be specified.

clientId
requiredstring
clientSecretSecretRef
requiredobject
requiredobject

The Client Secret for the Service Principal.

key
requiredstring
name
requiredstring
namespace
requiredstring
skuTier
string
array

A storage_profile block as defined below.

tags
object
array

A web_app_routing block as defined below.

dnsZoneId
requiredstring
array

A windows_profile block as defined below.

object

The Admin Password for Windows VMs. Length must be between 14 and 123 characters.

key
requiredstring
name
requiredstring
namespace
requiredstring
adminUsername
requiredstring
gmsa
array
array

A gmsa block as defined below.

dnsServer
requiredstring
rootDomain
requiredstring
license
string
array

A workload_autoscaler_profile block defined below.

object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. providerConfigRef

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
object

PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

configRef
object
object

SecretStoreConfigRef specifies which secret store config should be used for this ConnectionSecret.

name
requiredstring
policy
object
object

Policies for referencing.

resolve
string
metadata
object
object

Metadata is the metadata for connection secret.

labels
object
type
string
name
requiredstring
object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.

name
requiredstring
namespace
requiredstring
status
object
object

KubernetesClusterStatus defines the observed state of KubernetesCluster.

object

No description provided.

array

A aci_connector_linux block as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes.

array

A connector_identity block is exported. The exported attributes are defined below.

fqdn
string
id
string
array

An identity block as defined below. One of either identity or service_principal must be specified.

array

An ingress_application_gateway block as defined below.

array

An ingress_application_gateway_identity block is exported. The exported attributes are defined below.

array

A key_vault_secrets_provider block as defined below.

array

An secret_identity block is exported. The exported attributes are defined below.

array

A network_profile block as defined below.

array

A load_balancer_profile block as defined below. This can only be specified when load_balancer_sku is set to standard. Changing this forces a new resource to be created.

array

The outcome (resource IDs) of the specified arguments.

array

A nat_gateway_profile block as defined below.

array

The outcome (resource IDs) of the specified arguments.

array

An oms_agent block as defined below.

array

An oms_agent_identity block is exported. The exported attributes are defined below.

array

Conditions of the resource.

lastTransitionTime
requiredstring
message
string
reason
requiredstring
status
requiredstring
type
requiredstring
Marketplace

Discover the building blocks for your internal cloud platform.

© 2022 Upbound, Inc.

SolutionsProvidersConfigurations
LearnDocumentationTry for Free
MorePrivacy PolicyTerms & Conditions
Marketplace

© 2022 Upbound, Inc.

Marketplace

Discover the building blocksfor your internal cloud platform.