KOP EKS Clusters - Config Schema - Rafay Product Documentation
EKS Schema ¶
Cluster configuration consists of a multipart YAML file. The first part holds Cluster metadata configuration, the second holds the configuration consumed by EKS.
Cluster Metadata ¶
| kind: Cluster |
string | |
| name: myclustername |
Cluster name | string |
| project: myproject |
Project under which the cluster is created | string |
| labels: {} |
Cluster labels | object |
| type: eks |
Cluster Type | string |
| blueprint: myblueprint |
Blueprint associated with the cluster | string |
| blueprintversion: bpversion |
Blueprint version associated with the cluster | string |
| cloudprovider: myprovider |
Cloud credentials provider used to create and manage the cluster | string |
| crossAccountRoleArn: | ARN of target cross account role. Use this to create the cluster resource in the target role account. | string |
| cniprovider: Calico-v3.19.1 |
Cni provider used to specify different cni options for the cluster | string |
| proxyconfig: {} |
Configure Proxy if your infrastructure uses an Outbound Proxy | object |
| - key: |
taint key that toleration applies to. Empty means match all taint keys | string |
| - operator: |
represents a key's relationship to the value. | string |
| - value: |
taint value the toleration matches to. | string |
| - effect: |
Indicates the taint effect to match. | string |
| - tolerationSeconds: |
represents the period of time to tolerate the taint. | integer |
| nodeSelector: {} |
nodeSelector to apply to system components | object |
| nodeSelectionEnabled: false |
represents nodeSelector to be added in daemon sets | boolean |
| - key: |
taint key that toleration applies to. Empty means match all taint keys | string |
| - operator: |
represents a key's relationship to the value. | string |
| - value: |
taint value the toleration matches to. | string |
| - effect: |
Indicates the taint effect to match. | string |
| - tolerationSeconds: |
represents the period of time to tolerate the taint. | integer |
Cluster Specification ¶
| kind: ClusterConfig |
string | |
| apiVersion: rafay.io/v1alpha5 |
string | |
| name: | of the cluster | string |
| region: | the AWS region hosting this cluster | string |
| version: 1.29 |
Valid variants are: "1.23", "1.24", "1.25", "1.26", "1.27", "1.28", "1.29" (default), "1.30", "1.31". |
string |
| tags: {} |
used to tag AWS resources created by eksctl | object |
| annotations: {} |
arbitrary metadata ignored by eksctl. |
object |
| ipFamily: IPv4 |
Valid variants are: "IPv4" defines an IP family of v4 to be used when creating a new VPC and cluster., "IPv6" defines an IP family of v6 to be used when creating a new VPC and cluster.. |
string |
| serviceIPv4CIDR: | CIDR range from where ClusterIPs are assigned |
string |
| serviceRoleARN: | string | |
| serviceRolePermissionsBoundary: | permissions boundary for all identity-based entities created by eksctl. See AWS Permission Boundary | string |
| fargatePodExecutionRoleARN: | role used by pods to access AWS APIs. This role is added to the Kubernetes RBAC for authorization. See Pod Execution Role | string |
| fargatePodExecutionRolePermissionsBoundary: | permissions boundary for the fargate pod execution role`. See EKS Fargate Support | string |
| withOIDC: | enables the IAM OIDC provider as well as IRSA for the Amazon CNI plugin | boolean |
| name: | string | |
| namespace: | string | |
| labels: {} |
object | |
| annotations: {} |
object | |
| - attachPolicyARNs: |
list of ARNs of the IAM policies to attach | string[] |
| imageBuilder: false |
allows for full ECR (Elastic Container Registry) access. | boolean |
| autoScaler: false |
adds policies for cluster-autoscaler. See autoscaler AWS docs. | boolean |
| awsLoadBalancerController: false |
adds policies for using the aws-load-balancer-controller. See Load Balancer docs. | boolean |
| externalDNS: false |
adds external-dns policies for Amazon Route 53. See external-dns docs. | boolean |
| certManager: false |
adds cert-manager policies. See cert-manager docs. | boolean |
| ebsCSIController: false |
adds policies for using the ebs-csi-controller. See aws-ebs-csi-driver docs. | boolean |
| efsCSIController: false |
adds policies for using the efs-csi-controller. See aws-efs-csi-driver docs. | boolean |
| - attachRoleARN: |
ARN of the role to attach to the service account | string |
| - permissionsBoundary: |
ARN of the permissions boundary to associate with the service account | string |
| roleARN: | string | |
| stackName: | string | |
| tags: {} |
object | |
| capabilities: | string[] | |
| - roleName: |
Specific role name instead of the Cloudformation-generated role name | string |
| - roleOnly: |
Specify if only the IAM Service Account role should be created without creating/annotating the service account | boolean |
| - tags: {} |
AWS tags for the service account | object |
| - namespace: |
string | |
| - serviceAccountName: |
string | |
| - roleARN: |
string | |
| - createServiceAccount: false |
boolean | |
| - roleName: |
string | |
| - permissionsBoundaryARN: |
string | |
| - permissionPolicyARNs: |
string[] | |
| imageBuilder: false |
allows for full ECR (Elastic Container Registry) access. | boolean |
| autoScaler: false |
adds policies for cluster-autoscaler. See autoscaler AWS docs. | boolean |
| awsLoadBalancerController: false |
adds policies for using the aws-load-balancer-controller. See Load Balancer docs. | boolean |
| externalDNS: false |
adds external-dns policies for Amazon Route 53. See external-dns docs. | boolean |
| certManager: false |
adds cert-manager policies. See cert-manager docs. | boolean |
| ebsCSIController: false |
adds policies for using the ebs-csi-controller. See aws-ebs-csi-driver docs. | boolean |
| efsCSIController: false |
adds policies for using the efs-csi-controller. See aws-efs-csi-driver docs. | boolean |
| - tags: {} |
object | |
| vpcResourceControllerPolicy: true |
attaches the IAM policy necessary to run the VPC controller in the control plane | boolean |
| - arn: |
string | |
| - username: |
string | |
| - groups: |
string[] | |
| - account: |
string | |
| - serviceName: |
string | |
| - namespace: |
string | |
| - noDuplicateARNs: false |
boolean | |
| - type: oidc |
Valid variants are: "oidc": OIDC identity provider |
string |
| bootstrapClusterCreatorAdminPermissions: | specifies whether the cluster creator IAM principal was set as a cluster admin access entry during cluster creation time. | boolean |
| - type: |
EC2_LINUX, EC2_WINDOWS, FARGATE_LINUX or STANDARD |
string |
| - kubernetesGroups: |
set of Kubernetes groups to map to the principal ARN | string[] |
| - kubernetesUsername: |
username to map to the principal ARN | string |
| namespaces: | Scope access to namespace(s) | string[] |
| - tags: {} |
AWS tags to attach to the access entry | object |
| id: | string | |
| ipv6Cidr: | string | |
| ipv6Pool: | string | |
| securityGroup: | (aka the ControlPlaneSecurityGroup) for communication between control plane and nodes | string |
| hostnameType: | type of hostname to use for EC2 instances. | string |
| extraCIDRs: | for additional CIDR associations, e.g. a CIDR for private subnets or any ad-hoc subnets | string[] |
| extraIPv6CIDRs: | for additional IPv6 CIDR associations, e.g. a CIDR for private subnets or any ad-hoc subnets | string[] |
| sharedNodeSecurityGroup: | for pre-defined shared node SG | string |
| manageSharedNodeSecurityGroupRules: true |
Automatically add security group rules to and from the default cluster security group and the shared node security group. This allows unmanaged nodes to communicate with the control plane and managed nodes. This option cannot be disabled when using eksctl created security groups. | boolean |
| autoAllocateIPv6: | AutoAllocateIPV6 requests an IPv6 CIDR block with /56 prefix for the VPC | boolean |
| gateway: Single |
Valid variants are: "HighlyAvailable" configures a highly available NAT gateway, "Single" configures a single NAT gateway (default), "Disable" disables NAT. |
string |
| privateAccess: | boolean | |
| publicAccess: | boolean | |
| publicAccessCIDRs: | which CIDR blocks to allow access to public k8s API endpoint | string[] |
| controlPlaneSubnetIDs: | configures the subnets for the control plane. | string[] |
| controlPlaneSecurityGroupIDs: | configures the security groups for the control plane. | string[] |
| - name: |
string | |
| - version: |
string | |
| - serviceAccountRoleARN: |
string | |
| - attachPolicyARNs: |
list of ARNs of the IAM policies to attach | string[] |
| - permissionsBoundary: |
ARN of the permissions' boundary to associate | string |
| imageBuilder: false |
allows for full ECR (Elastic Container Registry) access. | boolean |
| autoScaler: false |
adds policies for cluster-autoscaler. See autoscaler AWS docs. | boolean |
| awsLoadBalancerController: false |
adds policies for using the aws-load-balancer-controller. See Load Balancer docs. | boolean |
| externalDNS: false |
adds external-dns policies for Amazon Route 53. See external-dns docs. | boolean |
| certManager: false |
adds cert-manager policies. See cert-manager docs. | boolean |
| ebsCSIController: false |
adds policies for using the ebs-csi-controller. See aws-ebs-csi-driver docs. | boolean |
| efsCSIController: false |
adds policies for using the efs-csi-controller. See aws-efs-csi-driver docs. | boolean |
| - tags: {} |
The metadata to apply to the cluster to assist with categorization and organization. Each tag consists of a key and an optional value, both of which you define. | object |
| - namespace: |
string | |
| - serviceAccountName: |
string | |
| - roleARN: |
string | |
| - createServiceAccount: false |
boolean | |
| - roleName: |
string | |
| - permissionsBoundaryARN: |
string | |
| - permissionPolicyARNs: |
string[] | |
| imageBuilder: false |
allows for full ECR (Elastic Container Registry) access. | boolean |
| autoScaler: false |
adds policies for cluster-autoscaler. See autoscaler AWS docs. | boolean |
| awsLoadBalancerController: false |
adds policies for using the aws-load-balancer-controller. See Load Balancer docs. | boolean |
| externalDNS: false |
adds external-dns policies for Amazon Route 53. See external-dns docs. | boolean |
| certManager: false |
adds cert-manager policies. See cert-manager docs. | boolean |
| ebsCSIController: false |
adds policies for using the ebs-csi-controller. See aws-ebs-csi-driver docs. | boolean |
| efsCSIController: false |
adds policies for using the efs-csi-controller. See aws-efs-csi-driver docs. | boolean |
| - tags: {} |
object | |
| - useDefaultPodIdentityAssociations: false |
uses the pod identity associations recommended by the EKS API. Defaults to false. | boolean |
| - configurationValues: |
defines the set of configuration properties for add-ons. For now, all properties will be specified as a JSON string and have to respect the schema from DescribeAddonConfiguration. | string |
| - publishers: |
string[] | |
| - types: |
string[] | |
| - owners: |
string[] | |
| autoApplyPodIdentityAssociations: false |
specifies whether to automatically apply pod identity associations for supported addons that require IAM permissions. | boolean |
| enabled: false |
enables creation of a fully-private cluster. | boolean |
| skipEndpointCreation: false |
skips the creation process for endpoints completely. This is only used in case of an already provided VPC and if the user decided to set it to true. | boolean |
| additionalEndpointServices: | specifies additional endpoint services that must be enabled for private access. Valid entries are "cloudformation", "autoscaling" and "logs". | string[] |
| - name: |
string | |
| - amiFamily: AmazonLinux2 |
Valid variants are: "AmazonLinux2" (default), "AmazonLinux2023", "UbuntuPro2204", "Ubuntu2204", "Ubuntu2004", "Ubuntu1804", "Bottlerocket", "WindowsServer2019CoreContainer", "WindowsServer2019FullContainer", "WindowsServer2022CoreContainer", "WindowsServer2022FullContainer". |
string |
| - instanceType: |
string | |
| - availabilityZones: |
Limit nodes to specific AZs | string[] |
| - subnets: |
Limit nodes to specific subnets | string[] |
| - instancePrefix: |
string | |
| - instanceName: |
string | |
| - desiredCapacity: |
integer | |
| - minSize: |
integer | |
| - maxSize: |
integer | |
| - volumeSize: 80 |
gigabytes | integer |
| allow: | If Allow is true the SSH configuration provided is used, otherwise it is ignored. Only one of PublicKeyPath, PublicKey and PublicKeyName can be configured | boolean |
| publicKeyPath: | The path to the SSH public key to be added to the nodes SSH keychain. If Allow is true this value defaults to "~/.ssh/id_rsa.pub", otherwise the value is ignored. | string |
| publicKey: | Public key to be added to the nodes SSH keychain. If Allow is false this value is ignored. | string |
| publicKeyName: | Public key name in EC2 to be added to the nodes SSH keychain. If Allow is false this value is ignored. | string |
| sourceSecurityGroupIds: | string[] | |
| enableSsm: | Enables the ability to SSH onto nodes using SSM | boolean |
| - labels: {} |
object | |
| - privateNetworking: false |
Enable private networking for nodegroup | boolean |
| - tags: {} |
Applied to the Autoscaling Group and to the EC2 instances (unmanaged), Applied to the EKS Nodegroup resource and to the EC2 instances (managed) | object |
| attachPolicyARNs: | list of ARNs of the IAM policies to attach | string[] |
| instanceProfileARN: | holds the ARN of instance profile, not supported for Managed NodeGroups | string |
| instanceRoleARN: | string | |
| instanceRoleName: | string | |
| instanceRolePermissionsBoundary: | string | |
| imageBuilder: | allows for full ECR (Elastic Container Registry) access. This is useful for building, for example, a CI server that needs to push images to ECR | boolean |
| autoScaler: | enables IAM policy for cluster-autoscaler | boolean |
| externalDNS: | adds the external-dns project policies for Amazon Route 53 | boolean |
| certManager: | enables the ability to add records to Route 53 in order to solve the DNS01 challenge. More information can be found here | boolean |
| appMesh: | enables full access to AppMesh | boolean |
| appMeshPreview: | enables full access to AppMesh Preview | boolean |
| ebs: | enables the new EBS CSI (Elastic Block Store Container Storage Interface) driver | boolean |
| fsx: | boolean | |
| efs: | boolean | |
| awsLoadBalancerController: | boolean | |
| albIngress: | boolean | |
| xRay: | boolean | |
| cloudWatch: | boolean | |
| - ami: |
Specify custom AMIs, auto-ssm, auto, or static |
string |
| attachIDs: | attaches additional security groups to the nodegroup | string[] |
| withShared: true |
attach the security group shared among all nodegroups in the cluster Not supported for managed nodegroups | boolean |
| withLocal: true |
attach a security group local to this nodegroup Not supported for managed nodegroups | boolean |
| - maxPodsPerNode: |
integer | |
| - asgSuspendProcesses: |
See relevant AWS docs | string[] |
| - ebsOptimized: |
enables EBS optimization | boolean |
| - volumeType: gp3 |
Valid variants are: "gp2" is General Purpose SSD, "gp3" is General Purpose SSD which can be optimised for high throughput (default), "io1" is Provisioned IOPS SSD, "sc1" is Cold HDD, "st1" is Throughput Optimized HDD. |
string |
| - volumeName: |
string | |
| - volumeEncrypted: |
boolean | |
| - volumeKmsKeyID: |
string | |
| - volumeIOPS: |
integer | |
| - volumeThroughput: |
integer | |
| - volumeSize: 80 |
gigabytes | integer |
| - volumeType: gp3 |
Valid variants are: "gp2" is General Purpose SSD, "gp3" is General Purpose SSD which can be optimised for high throughput (default), "io1" is Provisioned IOPS SSD, "sc1" is Cold HDD, "st1" is Throughput Optimized HDD. |
string |
| - volumeName: |
string | |
| - volumeEncrypted: |
boolean | |
| - volumeKmsKeyID: |
string | |
| - volumeIOPS: |
integer | |
| - volumeThroughput: |
integer | |
| - snapshotID: |
string | |
| - preBootstrapCommands: |
executed before bootstrapping instances to the cluster | string[] |
| - overrideBootstrapCommand: |
Override eksctl's bootstrapping script |
string |
| - propagateASGTags: |
Propagate all taints and labels to the ASG automatically. | boolean |
| - disableIMDSv1: true |
requires requests to the metadata service to use IMDSv2 tokens | boolean |
| - disablePodIMDS: false |
blocks all IMDS requests from non-host networking pods | boolean |
| groupName: | string | |
| - efaEnabled: |
creates the maximum allowed number of EFA-enabled network cards on nodes in this group. | boolean |
| vCPUs: | specifies the number of vCPUs | integer |
| memory: | specifies the memory The unit defaults to GiB | string |
| gpus: | specifies the number of GPUs. It can be set to 0 to select non-GPU instance types. | integer |
| cpuArchitecture: x86_64 |
CPU Architecture of the EC2 instance type. Valid variants are: "x86_64"``"amd64"``"arm64" |
string |
| enableAdminContainer: | boolean | |
| - enableDetailedMonitoring: |
Enable EC2 detailed monitoring | boolean |
| capacityReservationPreference: | defines a nodegroup's Capacity Reservation preferences (either 'open' or 'none') | string |
| capacityReservationID: | string | |
| capacityReservationResourceGroupARN: | string | |
| - outpostARN: |
specifies the Outpost ARN in which the nodegroup should be created. | string |
| instanceTypes: | string[] | |
| maxPrice: on demand price |
number | |
| onDemandBaseCapacity: 0 |
integer | |
| onDemandPercentageAboveBaseCapacity: 100 |
Range [0-100] | integer |
| spotInstancePools: 2 |
Range [1-20] | integer |
| spotAllocationStrategy: | string | |
| capacityRebalance: false |
Enable capacity rebalancing for spot instances | boolean |
| - granularity: |
string | |
| - metrics: |
string[] | |
| - cpuCredits: |
configures T3 Unlimited, valid only for T-type instances | string |
| - classicLoadBalancerNames: |
Associate load balancers with auto scaling group | string[] |
| - targetGroupARNs: |
Associate target group with auto scaling group | string[] |
| maxUnavailable: | sets the max number of nodes that can become unavailable when updating a nodegroup (specified as number) | integer |
| maxUnavailablePercentage: | sets the max number of nodes that can become unavailable when updating a nodegroup (specified as percentage) | integer |
| - clusterDNS: |
Custom address used for DNS lookups | string |
| - containerRuntime: |
defines the runtime (CRI) to use for containers on the node | string |
| - maxInstanceLifetime: |
defines the maximum amount of time in seconds an instance stays alive. | integer |
| - localZones: |
specifies a list of local zones where the nodegroup should be launched. The cluster should have been created with all of the local zones specified in this field. | string[] |
| - name: |
string | |
| - amiFamily: AmazonLinux2 |
Valid variants are: "AmazonLinux2" (default), "AmazonLinux2023", "UbuntuPro2204", "Ubuntu2204", "Ubuntu2004", "Ubuntu1804", "Bottlerocket", "WindowsServer2019CoreContainer", "WindowsServer2019FullContainer", "WindowsServer2022CoreContainer", "WindowsServer2022FullContainer". |
string |
| - instanceType: |
string | |
| - availabilityZones: |
Limit nodes to specific AZs | string[] |
| - subnets: |
Limit nodes to specific subnets | string[] |
| - instancePrefix: |
string | |
| - instanceName: |
string | |
| - desiredCapacity: |
integer | |
| - minSize: |
integer | |
| - maxSize: |
integer | |
| - volumeSize: 80 |
gigabytes | integer |
| allow: | If Allow is true the SSH configuration provided is used, otherwise it is ignored. Only one of PublicKeyPath, PublicKey and PublicKeyName can be configured | boolean |
| publicKeyPath: | The path to the SSH public key to be added to the nodes SSH keychain. If Allow is true this value defaults to "~/.ssh/id_rsa.pub", otherwise the value is ignored. | string |
| publicKey: | Public key to be added to the nodes SSH keychain. If Allow is false this value is ignored. | string |
| publicKeyName: | Public key name in EC2 to be added to the nodes SSH keychain. If Allow is false this value is ignored. | string |
| sourceSecurityGroupIds: | string[] | |
| enableSsm: | Enables the ability to SSH onto nodes using SSM | boolean |
| - labels: {} |
object | |
| - privateNetworking: false |
Enable private networking for nodegroup | boolean |
| - tags: {} |
Applied to the Autoscaling Group and to the EC2 instances (unmanaged), Applied to the EKS Nodegroup resource and to the EC2 instances (managed) | object |
| attachPolicyARNs: | list of ARNs of the IAM policies to attach | string[] |
| instanceProfileARN: | holds the ARN of instance profile, not supported for Managed NodeGroups | string |
| instanceRoleARN: | string | |
| instanceRoleName: | string | |
| instanceRolePermissionsBoundary: | string | |
| imageBuilder: | allows for full ECR (Elastic Container Registry) access. This is useful for building, for example, a CI server that needs to push images to ECR | boolean |
| autoScaler: | enables IAM policy for cluster-autoscaler | boolean |
| externalDNS: | adds the external-dns project policies for Amazon Route 53 | boolean |
| certManager: | enables the ability to add records to Route 53 in order to solve the DNS01 challenge. More information can be found here | boolean |
| appMesh: | enables full access to AppMesh | boolean |
| appMeshPreview: | enables full access to AppMesh Preview | boolean |
| ebs: | enables the new EBS CSI (Elastic Block Store Container Storage Interface) driver | boolean |
| fsx: | boolean | |
| efs: | boolean | |
| awsLoadBalancerController: | boolean | |
| albIngress: | boolean | |
| xRay: | boolean | |
| cloudWatch: | boolean | |
| - ami: |
Specify custom AMIs, auto-ssm, auto, or static |
string |
| attachIDs: | attaches additional security groups to the nodegroup | string[] |
| withShared: true |
attach the security group shared among all nodegroups in the cluster Not supported for managed nodegroups | boolean |
| withLocal: true |
attach a security group local to this nodegroup Not supported for managed nodegroups | boolean |
| - maxPodsPerNode: |
integer | |
| - asgSuspendProcesses: |
See relevant AWS docs | string[] |
| - ebsOptimized: |
enables EBS optimization | boolean |
| - volumeType: gp3 |
Valid variants are: "gp2" is General Purpose SSD, "gp3" is General Purpose SSD which can be optimised for high throughput (default), "io1" is Provisioned IOPS SSD, "sc1" is Cold HDD, "st1" is Throughput Optimized HDD. |
string |
| - volumeName: |
string | |
| - volumeEncrypted: |
boolean | |
| - volumeKmsKeyID: |
string | |
| - volumeIOPS: |
integer | |
| - volumeThroughput: |
integer | |
| - volumeSize: 80 |
gigabytes | integer |
| - volumeType: gp3 |
Valid variants are: "gp2" is General Purpose SSD, "gp3" is General Purpose SSD which can be optimised for high throughput (default), "io1" is Provisioned IOPS SSD, "sc1" is Cold HDD, "st1" is Throughput Optimized HDD. |
string |
| - volumeName: |
string | |
| - volumeEncrypted: |
boolean | |
| - volumeKmsKeyID: |
string | |
| - volumeIOPS: |
integer | |
| - volumeThroughput: |
integer | |
| - snapshotID: |
string | |
| - preBootstrapCommands: |
executed before bootstrapping instances to the cluster | string[] |
| - overrideBootstrapCommand: |
Override eksctl's bootstrapping script |
string |
| - propagateASGTags: |
Propagate all taints and labels to the ASG automatically. | boolean |
| - disableIMDSv1: true |
requires requests to the metadata service to use IMDSv2 tokens | boolean |
| - disablePodIMDS: false |
blocks all IMDS requests from non-host networking pods | boolean |
| groupName: | string | |
| - efaEnabled: |
creates the maximum allowed number of EFA-enabled network cards on nodes in this group. | boolean |
| vCPUs: | specifies the number of vCPUs | integer |
| memory: | specifies the memory The unit defaults to GiB | string |
| gpus: | specifies the number of GPUs. It can be set to 0 to select non-GPU instance types. | integer |
| cpuArchitecture: x86_64 |
CPU Architecture of the EC2 instance type. Valid variants are: "x86_64"``"amd64"``"arm64" |
string |
| enableAdminContainer: | boolean | |
| - enableDetailedMonitoring: |
Enable EC2 detailed monitoring | boolean |
| capacityReservationPreference: | defines a nodegroup's Capacity Reservation preferences (either 'open' or 'none') | string |
| capacityReservationID: | string | |
| capacityReservationResourceGroupARN: | string | |
| - outpostARN: |
specifies the Outpost ARN in which the nodegroup should be created. | string |
| - instanceTypes: |
specifies a list of instance types | string[] |
| - spot: false |
creates a spot nodegroup | boolean |
| - key: |
string | |
| - value: |
string | |
| maxUnavailable: | sets the max number of nodes that can become unavailable when updating a nodegroup (specified as number) | integer |
| maxUnavailablePercentage: | sets the max number of nodes that can become unavailable when updating a nodegroup (specified as percentage) | integer |
| id: | Launch template ID | string |
| version: | Launch template version Defaults to the default launch template version TODO support $Default, $Latest | string |
| - releaseVersion: |
the AMI version of the EKS optimized AMI to use | string |
| - name: |
of the Fargate profile. | string |
| - podExecutionRoleARN: |
IAM role's ARN to use to run pods onto Fargate. | string |
| - namespace: |
Kubernetes namespace from which to select workload. | string |
| - labels: {} |
Kubernetes label selectors to use to select workload. | object |
| - subnets: |
which Fargate should use to do network placement of the selected workload. If none provided, all subnets for the cluster will be used. | string[] |
| - tags: {} |
Used to tag the AWS resources | object |
| - status: |
The current status of the Fargate profile. | string |
| availabilityZones: | string[] | |
| localZones: | specifies a list of local zones where the subnets should be created. Only self-managed nodegroups can be launched in local zones. These subnets are not passed to EKS. | string[] |
| enableTypes: | Types of logging to enable (see CloudWatch docs). Valid entries are: "api", "audit", "authenticator", "controllerManager", "scheduler", "all", "*". |
string[] |
| logRetentionInDays: | sets the number of days to retain the logs for (see CloudWatch docs) . Valid values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653. | integer |
| keyARN: | string | |
| encryptExistingSecrets: | boolean | |
| gitProvider: | The repository hosting service. Can be either Github or Gitlab. | string |
| version: | defines the Karpenter version to install | string |
| createServiceAccount: | create a service account or not. | boolean |
| defaultInstanceProfile: | override the default IAM instance profile | string |
| withSpotInterruptionQueue: | if true, adds all required policies and rules for supporting Spot Interruption Queue on Karpenter deployments | boolean |
| controlPlaneOutpostARN: | specifies the Outpost ARN in which the control plane should be created. | string |
| controlPlaneInstanceType: | specifies the instance type to use for creating the control plane instances. | string |
| groupName: | string |
Back to top