Class: Google::Cloud::Container::V1beta1::WorkloadMetadataConfig

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/container/v1beta1/cluster_service.rb

Overview

WorkloadMetadataConfig defines the metadata configuration to expose to workloads on the node pool.

Defined Under Namespace

Modules: Mode, NodeMetadata

Instance Attribute Summary collapse

Instance Attribute Details

#mode ⇒ ::Google::Cloud::Container::V1beta1::WorkloadMetadataConfig::Mode 



6080
6081
6082
6083
6084
6085
6086
6087
6088
6089
6090
6091
6092
6093
6094
6095
6096
6097
6098
6099
6100
6101
6102
6103
6104
6105
6106
6107
6108
6109
6110
6111
6112
6113
6114
6115
6116
6117
6118
6119
6120
6121
6122
6123
6124
6125
6126
6127
 
# File 'proto_docs/google/container/v1beta1/cluster_service.rb', line 6080

class WorkloadMetadataConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # NodeMetadata is the configuration for if and how to expose the node
  # metadata to the workload running on the node.
  module NodeMetadata
    # Not set.
    UNSPECIFIED = 0

    # Prevent workloads not in hostNetwork from accessing certain VM metadata,
    # specifically kube-env, which contains Kubelet credentials, and the
    # instance identity token.
    #
    # Metadata concealment is a temporary security solution available while the
    # bootstrapping process for cluster nodes is being redesigned with
    # significant security improvements.  This feature is scheduled to be
    # deprecated in the future and later removed.
    SECURE = 1

    # Expose all VM metadata to pods.
    EXPOSE = 2

    # Run the GKE Metadata Server on this node. The GKE Metadata Server exposes
    # a metadata API to workloads that is compatible with the V1 Compute
    # Metadata APIs exposed by the Compute Engine and App Engine Metadata
    # Servers. This feature can only be enabled if Workload Identity is enabled
    # at the cluster level.
    GKE_METADATA_SERVER = 3
  end

  # Mode is the configuration for how to expose metadata to workloads running
  # on the node.
  module Mode
    # Not set.
    MODE_UNSPECIFIED = 0

    # Expose all Compute Engine metadata to pods.
    GCE_METADATA = 1

    # Run the GKE Metadata Server on this node. The GKE Metadata Server exposes
    # a metadata API to workloads that is compatible with the V1 Compute
    # Metadata APIs exposed by the Compute Engine and App Engine Metadata
    # Servers. This feature can only be enabled if Workload Identity is enabled
    # at the cluster level.
    GKE_METADATA = 2
  end
end

#node_metadata ⇒ ::Google::Cloud::Container::V1beta1::WorkloadMetadataConfig::NodeMetadata

Deprecated.

This field is deprecated and may be removed in the next major version update.

Returns NodeMetadata is the configuration for how to expose metadata to the workloads running on the node.



6080
6081
6082
6083
6084
6085
6086
6087
6088
6089
6090
6091
6092
6093
6094
6095
6096
6097
6098
6099
6100
6101
6102
6103
6104
6105
6106
6107
6108
6109
6110
6111
6112
6113
6114
6115
6116
6117
6118
6119
6120
6121
6122
6123
6124
6125
6126
6127
 
# File 'proto_docs/google/container/v1beta1/cluster_service.rb', line 6080

class WorkloadMetadataConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # NodeMetadata is the configuration for if and how to expose the node
  # metadata to the workload running on the node.
  module NodeMetadata
    # Not set.
    UNSPECIFIED = 0

    # Prevent workloads not in hostNetwork from accessing certain VM metadata,
    # specifically kube-env, which contains Kubelet credentials, and the
    # instance identity token.
    #
    # Metadata concealment is a temporary security solution available while the
    # bootstrapping process for cluster nodes is being redesigned with
    # significant security improvements.  This feature is scheduled to be
    # deprecated in the future and later removed.
    SECURE = 1

    # Expose all VM metadata to pods.
    EXPOSE = 2

    # Run the GKE Metadata Server on this node. The GKE Metadata Server exposes
    # a metadata API to workloads that is compatible with the V1 Compute
    # Metadata APIs exposed by the Compute Engine and App Engine Metadata
    # Servers. This feature can only be enabled if Workload Identity is enabled
    # at the cluster level.
    GKE_METADATA_SERVER = 3
  end

  # Mode is the configuration for how to expose metadata to workloads running
  # on the node.
  module Mode
    # Not set.
    MODE_UNSPECIFIED = 0

    # Expose all Compute Engine metadata to pods.
    GCE_METADATA = 1

    # Run the GKE Metadata Server on this node. The GKE Metadata Server exposes
    # a metadata API to workloads that is compatible with the V1 Compute
    # Metadata APIs exposed by the Compute Engine and App Engine Metadata
    # Servers. This feature can only be enabled if Workload Identity is enabled
    # at the cluster level.
    GKE_METADATA = 2
  end
end