1# Copyright 2020 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: container.cnrm.cloud.google.com/v1beta1
16kind: ContainerCluster
17metadata:
18 labels:
19 availability: high
20 target-audience: production
21 name: containercluster-sample-vpcnative
22spec:
23 description: A large regional VPC-native cluster set up with special networking considerations.
24 location: us-central1
25 initialNodeCount: 1
26 defaultMaxPodsPerNode: 16
27 nodeLocations:
28 - us-central1-a
29 - us-central1-b
30 - us-central1-c
31 - us-central1-f
32 workloadIdentityConfig:
33 # Workload Identity supports only a single namespace based on your project name.
34 # Replace ${PROJECT_ID?} below with your project ID.
35 workloadPool: ${PROJECT_ID?}.svc.id.goog
36 networkingMode: VPC_NATIVE
37 networkRef:
38 name: containercluster-dep-vpcnative
39 subnetworkRef:
40 name: containercluster-dep-vpcnative
41 ipAllocationPolicy:
42 servicesSecondaryRangeName: servicesrange
43 clusterSecondaryRangeName: clusterrange
44 clusterAutoscaling:
45 enabled: true
46 autoscalingProfile: BALANCED
47 resourceLimits:
48 - resourceType: cpu
49 maximum: 100
50 minimum: 10
51 - resourceType: memory
52 maximum: 1000
53 minimum: 100
54 maintenancePolicy:
55 dailyMaintenanceWindow:
56 startTime: 00:00
57 releaseChannel:
58 channel: STABLE
59 notificationConfig:
60 pubsub:
61 enabled: true
62 topicRef:
63 name: containercluster-dep-vpcnative
64 enableBinaryAuthorization: true
65 enableIntranodeVisibility: true
66 enableShieldedNodes: true
67 addonsConfig:
68 networkPolicyConfig:
69 disabled: false
70 dnsCacheConfig:
71 enabled: true
72 configConnectorConfig:
73 enabled: true
74 networkPolicy:
75 enabled: true
76 podSecurityPolicyConfig:
77 enabled: true
78 verticalPodAutoscaling:
79 enabled: trueView as plain text