Alibaba Cloud v3.53.0, Apr 17 24

Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi

alicloud.cs.ManagedKubernetes

Explore with Pulumi AI

Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi

Create ManagedKubernetes Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ManagedKubernetes(name: string, args: ManagedKubernetesArgs, opts?: CustomResourceOptions);

@overload
def ManagedKubernetes(resource_name: str,
                      args: ManagedKubernetesArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def ManagedKubernetes(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      worker_vswitch_ids: Optional[Sequence[str]] = None,
                      maintenance_window: Optional[ManagedKubernetesMaintenanceWindowArgs] = None,
                      control_plane_log_project: Optional[str] = None,
                      client_key: Optional[str] = None,
                      cluster_ca_cert: Optional[str] = None,
                      name: Optional[str] = None,
                      cluster_spec: Optional[str] = None,
                      control_plane_log_components: Optional[Sequence[str]] = None,
                      name_prefix: Optional[str] = None,
                      control_plane_log_ttl: Optional[str] = None,
                      new_nat_gateway: Optional[bool] = None,
                      deletion_protection: Optional[bool] = None,
                      enable_rrsa: Optional[bool] = None,
                      encryption_provider_key: Optional[str] = None,
                      is_enterprise_security_group: Optional[bool] = None,
                      load_balancer_spec: Optional[str] = None,
                      addons: Optional[Sequence[ManagedKubernetesAddonArgs]] = None,
                      cluster_domain: Optional[str] = None,
                      client_cert: Optional[str] = None,
                      custom_san: Optional[str] = None,
                      node_cidr_mask: Optional[int] = None,
                      pod_cidr: Optional[str] = None,
                      pod_vswitch_ids: Optional[Sequence[str]] = None,
                      proxy_mode: Optional[str] = None,
                      resource_group_id: Optional[str] = None,
                      retain_resources: Optional[Sequence[str]] = None,
                      security_group_id: Optional[str] = None,
                      service_account_issuer: Optional[str] = None,
                      service_cidr: Optional[str] = None,
                      slb_internet_enabled: Optional[bool] = None,
                      tags: Optional[Mapping[str, Any]] = None,
                      timezone: Optional[str] = None,
                      user_ca: Optional[str] = None,
                      version: Optional[str] = None,
                      api_audiences: Optional[Sequence[str]] = None)

func NewManagedKubernetes(ctx *Context, name string, args ManagedKubernetesArgs, opts ...ResourceOption) (*ManagedKubernetes, error)

public ManagedKubernetes(string name, ManagedKubernetesArgs args, CustomResourceOptions? opts = null)

public ManagedKubernetes(String name, ManagedKubernetesArgs args)
public ManagedKubernetes(String name, ManagedKubernetesArgs args, CustomResourceOptions options)

type: alicloud:cs:ManagedKubernetes
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ManagedKubernetesArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ManagedKubernetesArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ManagedKubernetesArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ManagedKubernetesArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ManagedKubernetesArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Example

The following reference example uses placeholder values for all input properties.

var managedKubernetesResource = new AliCloud.CS.ManagedKubernetes("managedKubernetesResource", new()
{
    WorkerVswitchIds = new[]
    {
        "string",
    },
    MaintenanceWindow = new AliCloud.CS.Inputs.ManagedKubernetesMaintenanceWindowArgs
    {
        Duration = "string",
        Enable = false,
        MaintenanceTime = "string",
        WeeklyPeriod = "string",
    },
    ControlPlaneLogProject = "string",
    ClientKey = "string",
    ClusterCaCert = "string",
    Name = "string",
    ClusterSpec = "string",
    ControlPlaneLogComponents = new[]
    {
        "string",
    },
    NamePrefix = "string",
    ControlPlaneLogTtl = "string",
    NewNatGateway = false,
    DeletionProtection = false,
    EnableRrsa = false,
    EncryptionProviderKey = "string",
    IsEnterpriseSecurityGroup = false,
    LoadBalancerSpec = "string",
    Addons = new[]
    {
        new AliCloud.CS.Inputs.ManagedKubernetesAddonArgs
        {
            Config = "string",
            Disabled = false,
            Name = "string",
            Version = "string",
        },
    },
    ClusterDomain = "string",
    ClientCert = "string",
    CustomSan = "string",
    NodeCidrMask = 0,
    PodCidr = "string",
    PodVswitchIds = new[]
    {
        "string",
    },
    ProxyMode = "string",
    ResourceGroupId = "string",
    RetainResources = new[]
    {
        "string",
    },
    SecurityGroupId = "string",
    ServiceAccountIssuer = "string",
    ServiceCidr = "string",
    SlbInternetEnabled = false,
    Tags = 
    {
        { "string", "any" },
    },
    Timezone = "string",
    UserCa = "string",
    Version = "string",
    ApiAudiences = new[]
    {
        "string",
    },
});

example, err := cs.NewManagedKubernetes(ctx, "managedKubernetesResource", &cs.ManagedKubernetesArgs{
	WorkerVswitchIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	MaintenanceWindow: &cs.ManagedKubernetesMaintenanceWindowArgs{
		Duration:        pulumi.String("string"),
		Enable:          pulumi.Bool(false),
		MaintenanceTime: pulumi.String("string"),
		WeeklyPeriod:    pulumi.String("string"),
	},
	ControlPlaneLogProject: pulumi.String("string"),
	ClientKey:              pulumi.String("string"),
	ClusterCaCert:          pulumi.String("string"),
	Name:                   pulumi.String("string"),
	ClusterSpec:            pulumi.String("string"),
	ControlPlaneLogComponents: pulumi.StringArray{
		pulumi.String("string"),
	},
	NamePrefix:                pulumi.String("string"),
	ControlPlaneLogTtl:        pulumi.String("string"),
	NewNatGateway:             pulumi.Bool(false),
	DeletionProtection:        pulumi.Bool(false),
	EnableRrsa:                pulumi.Bool(false),
	EncryptionProviderKey:     pulumi.String("string"),
	IsEnterpriseSecurityGroup: pulumi.Bool(false),
	LoadBalancerSpec:          pulumi.String("string"),
	Addons: cs.ManagedKubernetesAddonArray{
		&cs.ManagedKubernetesAddonArgs{
			Config:   pulumi.String("string"),
			Disabled: pulumi.Bool(false),
			Name:     pulumi.String("string"),
			Version:  pulumi.String("string"),
		},
	},
	ClusterDomain: pulumi.String("string"),
	ClientCert:    pulumi.String("string"),
	CustomSan:     pulumi.String("string"),
	NodeCidrMask:  pulumi.Int(0),
	PodCidr:       pulumi.String("string"),
	PodVswitchIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	ProxyMode:       pulumi.String("string"),
	ResourceGroupId: pulumi.String("string"),
	RetainResources: pulumi.StringArray{
		pulumi.String("string"),
	},
	SecurityGroupId:      pulumi.String("string"),
	ServiceAccountIssuer: pulumi.String("string"),
	ServiceCidr:          pulumi.String("string"),
	SlbInternetEnabled:   pulumi.Bool(false),
	Tags: pulumi.Map{
		"string": pulumi.Any("any"),
	},
	Timezone: pulumi.String("string"),
	UserCa:   pulumi.String("string"),
	Version:  pulumi.String("string"),
	ApiAudiences: pulumi.StringArray{
		pulumi.String("string"),
	},
})

var managedKubernetesResource = new ManagedKubernetes("managedKubernetesResource", ManagedKubernetesArgs.builder()        
    .workerVswitchIds("string")
    .maintenanceWindow(ManagedKubernetesMaintenanceWindowArgs.builder()
        .duration("string")
        .enable(false)
        .maintenanceTime("string")
        .weeklyPeriod("string")
        .build())
    .controlPlaneLogProject("string")
    .clientKey("string")
    .clusterCaCert("string")
    .name("string")
    .clusterSpec("string")
    .controlPlaneLogComponents("string")
    .namePrefix("string")
    .controlPlaneLogTtl("string")
    .newNatGateway(false)
    .deletionProtection(false)
    .enableRrsa(false)
    .encryptionProviderKey("string")
    .isEnterpriseSecurityGroup(false)
    .loadBalancerSpec("string")
    .addons(ManagedKubernetesAddonArgs.builder()
        .config("string")
        .disabled(false)
        .name("string")
        .version("string")
        .build())
    .clusterDomain("string")
    .clientCert("string")
    .customSan("string")
    .nodeCidrMask(0)
    .podCidr("string")
    .podVswitchIds("string")
    .proxyMode("string")
    .resourceGroupId("string")
    .retainResources("string")
    .securityGroupId("string")
    .serviceAccountIssuer("string")
    .serviceCidr("string")
    .slbInternetEnabled(false)
    .tags(Map.of("string", "any"))
    .timezone("string")
    .userCa("string")
    .version("string")
    .apiAudiences("string")
    .build());

managed_kubernetes_resource = alicloud.cs.ManagedKubernetes("managedKubernetesResource",
    worker_vswitch_ids=["string"],
    maintenance_window=alicloud.cs.ManagedKubernetesMaintenanceWindowArgs(
        duration="string",
        enable=False,
        maintenance_time="string",
        weekly_period="string",
    ),
    control_plane_log_project="string",
    client_key="string",
    cluster_ca_cert="string",
    name="string",
    cluster_spec="string",
    control_plane_log_components=["string"],
    name_prefix="string",
    control_plane_log_ttl="string",
    new_nat_gateway=False,
    deletion_protection=False,
    enable_rrsa=False,
    encryption_provider_key="string",
    is_enterprise_security_group=False,
    load_balancer_spec="string",
    addons=[alicloud.cs.ManagedKubernetesAddonArgs(
        config="string",
        disabled=False,
        name="string",
        version="string",
    )],
    cluster_domain="string",
    client_cert="string",
    custom_san="string",
    node_cidr_mask=0,
    pod_cidr="string",
    pod_vswitch_ids=["string"],
    proxy_mode="string",
    resource_group_id="string",
    retain_resources=["string"],
    security_group_id="string",
    service_account_issuer="string",
    service_cidr="string",
    slb_internet_enabled=False,
    tags={
        "string": "any",
    },
    timezone="string",
    user_ca="string",
    version="string",
    api_audiences=["string"])

const managedKubernetesResource = new alicloud.cs.ManagedKubernetes("managedKubernetesResource", {
    workerVswitchIds: ["string"],
    maintenanceWindow: {
        duration: "string",
        enable: false,
        maintenanceTime: "string",
        weeklyPeriod: "string",
    },
    controlPlaneLogProject: "string",
    clientKey: "string",
    clusterCaCert: "string",
    name: "string",
    clusterSpec: "string",
    controlPlaneLogComponents: ["string"],
    namePrefix: "string",
    controlPlaneLogTtl: "string",
    newNatGateway: false,
    deletionProtection: false,
    enableRrsa: false,
    encryptionProviderKey: "string",
    isEnterpriseSecurityGroup: false,
    loadBalancerSpec: "string",
    addons: [{
        config: "string",
        disabled: false,
        name: "string",
        version: "string",
    }],
    clusterDomain: "string",
    clientCert: "string",
    customSan: "string",
    nodeCidrMask: 0,
    podCidr: "string",
    podVswitchIds: ["string"],
    proxyMode: "string",
    resourceGroupId: "string",
    retainResources: ["string"],
    securityGroupId: "string",
    serviceAccountIssuer: "string",
    serviceCidr: "string",
    slbInternetEnabled: false,
    tags: {
        string: "any",
    },
    timezone: "string",
    userCa: "string",
    version: "string",
    apiAudiences: ["string"],
});

type: alicloud:cs:ManagedKubernetes
properties:
    addons:
        - config: string
          disabled: false
          name: string
          version: string
    apiAudiences:
        - string
    clientCert: string
    clientKey: string
    clusterCaCert: string
    clusterDomain: string
    clusterSpec: string
    controlPlaneLogComponents:
        - string
    controlPlaneLogProject: string
    controlPlaneLogTtl: string
    customSan: string
    deletionProtection: false
    enableRrsa: false
    encryptionProviderKey: string
    isEnterpriseSecurityGroup: false
    loadBalancerSpec: string
    maintenanceWindow:
        duration: string
        enable: false
        maintenanceTime: string
        weeklyPeriod: string
    name: string
    namePrefix: string
    newNatGateway: false
    nodeCidrMask: 0
    podCidr: string
    podVswitchIds:
        - string
    proxyMode: string
    resourceGroupId: string
    retainResources:
        - string
    securityGroupId: string
    serviceAccountIssuer: string
    serviceCidr: string
    slbInternetEnabled: false
    tags:
        string: any
    timezone: string
    userCa: string
    version: string
    workerVswitchIds:
        - string

ManagedKubernetes Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The ManagedKubernetes resource accepts the following input properties:

WorkerVswitchIds List<string>

The vswitches used by control plane. See worker_vswitch_ids below.

Addons List<Pulumi.AliCloud.CS.Inputs.ManagedKubernetesAddon>

The addon you want to install in cluster. See addons below.

ApiAudiences List<string>

A list of API audiences for Service Account Token Volume Projection. Set this to ["https://kubernetes.default.svc"] if you want to enable the Token Volume Projection feature (requires specifying service_account_issuer as well. From cluster version 1.22+, Service Account Token Volume Projection will be enabled by default.

ClientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

ClientKey string

The path of client key, like ~/.kube/client-key.pem.

ClusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

ClusterDomain string

Cluster local domain name, Default to cluster.local. A domain name consists of one or more sections separated by a decimal point (.), each of which is up to 63 characters long, and can be lowercase, numerals, and underscores (-), and must be lowercase or numerals at the beginning and end.

ClusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

ControlPlaneLogComponents List<string>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

ControlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

ControlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

CustomSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

DeletionProtection bool

Whether to enable cluster deletion protection.

EnableRrsa bool

Whether to enable cluster to support RRSA for version 1.22.3+. Default to false. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more RAM Roles for Service Accounts.

EncryptionProviderKey string

The disk encryption key.

IsEnterpriseSecurityGroup bool

Enable to create advanced security group. default: false. See Advanced security group.

LoadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

MaintenanceWindow Pulumi.AliCloud.CS.Inputs.ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

Name string

This parameter specifies the name of the component.

NamePrefix string

NewNatGateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

NodeCidrMask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

PodCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

PodVswitchIds List<string>

[Terway Specific] The vswitches for the pod network when using Terway.Be careful the pod_vswitch_ids can not equal to worker_vswitch_ids or master_vswitch_ids but must be in same availability zones.

ProxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

ResourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

RetainResources List<string>

SecurityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

ServiceAccountIssuer string

The issuer of the Service Account token for Service Account Token Volume Projection, corresponds to the iss field in the token payload. Set this to "https://kubernetes.default.svc" to enable the Token Volume Projection feature (requires specifying api_audiences as well). From cluster version 1.22+, Service Account Token Volume Projection will be enabled by default.

ServiceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

SlbInternetEnabled bool

Whether to create internet load balancer for API Server. Default to true.

Tags Dictionary<string, object>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

Timezone string

When you create a cluster, set the time zones for the Master and Worker nodes. You can only change the managed node time zone if you create a cluster. Once the cluster is created, you can only change the time zone of the Worker node.

UserCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

Version string

It specifies the version of the component.

WorkerVswitchIds []string

The vswitches used by control plane. See worker_vswitch_ids below.

Addons []ManagedKubernetesAddonArgs

The addon you want to install in cluster. See addons below.

ApiAudiences []string

ClientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

ClientKey string

The path of client key, like ~/.kube/client-key.pem.

ClusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

ClusterDomain string

ClusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

ControlPlaneLogComponents []string

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

ControlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

ControlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

CustomSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

DeletionProtection bool

Whether to enable cluster deletion protection.

EnableRrsa bool

EncryptionProviderKey string

The disk encryption key.

IsEnterpriseSecurityGroup bool

Enable to create advanced security group. default: false. See Advanced security group.

LoadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

MaintenanceWindow ManagedKubernetesMaintenanceWindowArgs

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

Name string

This parameter specifies the name of the component.

NamePrefix string

NewNatGateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

NodeCidrMask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

PodCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

PodVswitchIds []string

ProxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

ResourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

RetainResources []string

SecurityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

ServiceAccountIssuer string

ServiceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

SlbInternetEnabled bool

Whether to create internet load balancer for API Server. Default to true.

Tags map[string]interface{}

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

Timezone string

UserCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

Version string

It specifies the version of the component.

workerVswitchIds List<String>

The vswitches used by control plane. See worker_vswitch_ids below.

addons List<ManagedKubernetesAddon>

The addon you want to install in cluster. See addons below.

apiAudiences List<String>

clientCert String

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey String

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert String

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain String

clusterSpec String

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

controlPlaneLogComponents List<String>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject String

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl String

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan String

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection Boolean

Whether to enable cluster deletion protection.

enableRrsa Boolean

encryptionProviderKey String

The disk encryption key.

isEnterpriseSecurityGroup Boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec String

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name String

This parameter specifies the name of the component.

namePrefix String

newNatGateway Boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask Integer

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr String

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds List<String>

proxyMode String

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId String

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources List<String>

securityGroupId String

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer String

serviceCidr String

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbInternetEnabled Boolean

Whether to create internet load balancer for API Server. Default to true.

tags Map<String,Object>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone String

userCa String

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version String

It specifies the version of the component.

workerVswitchIds string[]

The vswitches used by control plane. See worker_vswitch_ids below.

addons ManagedKubernetesAddon[]

The addon you want to install in cluster. See addons below.

apiAudiences string[]

clientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey string

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain string

clusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

controlPlaneLogComponents string[]

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection boolean

Whether to enable cluster deletion protection.

enableRrsa boolean

encryptionProviderKey string

The disk encryption key.

isEnterpriseSecurityGroup boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name string

This parameter specifies the name of the component.

namePrefix string

newNatGateway boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask number

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds string[]

proxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources string[]

securityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer string

serviceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbInternetEnabled boolean

Whether to create internet load balancer for API Server. Default to true.

tags {[key: string]: any}

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone string

userCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version string

It specifies the version of the component.

worker_vswitch_ids Sequence[str]

The vswitches used by control plane. See worker_vswitch_ids below.

addons Sequence[ManagedKubernetesAddonArgs]

The addon you want to install in cluster. See addons below.

api_audiences Sequence[str]

client_cert str

The path of client certificate, like ~/.kube/client-cert.pem.

client_key str

The path of client key, like ~/.kube/client-key.pem.

cluster_ca_cert str

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

cluster_domain str

cluster_spec str

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

control_plane_log_components Sequence[str]

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

control_plane_log_project str

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

control_plane_log_ttl str

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

custom_san str

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletion_protection bool

Whether to enable cluster deletion protection.

enable_rrsa bool

encryption_provider_key str

The disk encryption key.

is_enterprise_security_group bool

Enable to create advanced security group. default: false. See Advanced security group.

load_balancer_spec str

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenance_window ManagedKubernetesMaintenanceWindowArgs

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name str

This parameter specifies the name of the component.

name_prefix str

new_nat_gateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

node_cidr_mask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

pod_cidr str

[Flannel Specific] The CIDR block for the pod network when using Flannel.

pod_vswitch_ids Sequence[str]

proxy_mode str

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resource_group_id str

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retain_resources Sequence[str]

security_group_id str

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

service_account_issuer str

service_cidr str

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slb_internet_enabled bool

Whether to create internet load balancer for API Server. Default to true.

tags Mapping[str, Any]

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone str

user_ca str

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version str

It specifies the version of the component.

workerVswitchIds List<String>

The vswitches used by control plane. See worker_vswitch_ids below.

addons List<Property Map>

The addon you want to install in cluster. See addons below.

apiAudiences List<String>

clientCert String

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey String

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert String

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain String

clusterSpec String

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

controlPlaneLogComponents List<String>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject String

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl String

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan String

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection Boolean

Whether to enable cluster deletion protection.

enableRrsa Boolean

encryptionProviderKey String

The disk encryption key.

isEnterpriseSecurityGroup Boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec String

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow Property Map

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name String

This parameter specifies the name of the component.

namePrefix String

newNatGateway Boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask Number

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr String

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds List<String>

proxyMode String

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId String

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources List<String>

securityGroupId String

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer String

serviceCidr String

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbInternetEnabled Boolean

Whether to create internet load balancer for API Server. Default to true.

tags Map<Any>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone String

userCa String

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version String

It specifies the version of the component.

Outputs

All input properties are implicitly available as output properties. Additionally, the ManagedKubernetes resource produces the following output properties:

CertificateAuthority Pulumi.AliCloud.CS.Outputs.ManagedKubernetesCertificateAuthority: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
Connections Pulumi.AliCloud.CS.Outputs.ManagedKubernetesConnections: Map of kubernetes cluster connection information.
Id string: The provider-assigned unique ID for this managed resource.
NatGatewayId string: The ID of nat gateway used to launch kubernetes cluster.
RrsaMetadata Pulumi.AliCloud.CS.Outputs.ManagedKubernetesRrsaMetadata: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
SlbId string: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
SlbInternet string: The public ip of load balancer.
SlbIntranet string: The ID of private load balancer where the current cluster master node is located.
VpcId string: The ID of VPC where the current cluster is located.
WorkerRamRoleName string: The RamRole Name attached to worker node.

CertificateAuthority ManagedKubernetesCertificateAuthority: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
Connections ManagedKubernetesConnections: Map of kubernetes cluster connection information.
Id string: The provider-assigned unique ID for this managed resource.
NatGatewayId string: The ID of nat gateway used to launch kubernetes cluster.
RrsaMetadata ManagedKubernetesRrsaMetadata: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
SlbId string: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
SlbInternet string: The public ip of load balancer.
SlbIntranet string: The ID of private load balancer where the current cluster master node is located.
VpcId string: The ID of VPC where the current cluster is located.
WorkerRamRoleName string: The RamRole Name attached to worker node.

certificateAuthority ManagedKubernetesCertificateAuthority: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
connections ManagedKubernetesConnections: Map of kubernetes cluster connection information.
id String: The provider-assigned unique ID for this managed resource.
natGatewayId String: The ID of nat gateway used to launch kubernetes cluster.
rrsaMetadata ManagedKubernetesRrsaMetadata: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
slbId String: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
slbInternet String: The public ip of load balancer.
slbIntranet String: The ID of private load balancer where the current cluster master node is located.
vpcId String: The ID of VPC where the current cluster is located.
workerRamRoleName String: The RamRole Name attached to worker node.

certificateAuthority ManagedKubernetesCertificateAuthority: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
connections ManagedKubernetesConnections: Map of kubernetes cluster connection information.
id string: The provider-assigned unique ID for this managed resource.
natGatewayId string: The ID of nat gateway used to launch kubernetes cluster.
rrsaMetadata ManagedKubernetesRrsaMetadata: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
slbId string: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
slbInternet string: The public ip of load balancer.
slbIntranet string: The ID of private load balancer where the current cluster master node is located.
vpcId string: The ID of VPC where the current cluster is located.
workerRamRoleName string: The RamRole Name attached to worker node.

certificate_authority ManagedKubernetesCertificateAuthority: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
connections ManagedKubernetesConnections: Map of kubernetes cluster connection information.
id str: The provider-assigned unique ID for this managed resource.
nat_gateway_id str: The ID of nat gateway used to launch kubernetes cluster.
rrsa_metadata ManagedKubernetesRrsaMetadata: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
slb_id str: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
slb_internet str: The public ip of load balancer.
slb_intranet str: The ID of private load balancer where the current cluster master node is located.
vpc_id str: The ID of VPC where the current cluster is located.
worker_ram_role_name str: The RamRole Name attached to worker node.

certificateAuthority Property Map: (Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.
connections Property Map: Map of kubernetes cluster connection information.
id String: The provider-assigned unique ID for this managed resource.
natGatewayId String: The ID of nat gateway used to launch kubernetes cluster.
rrsaMetadata Property Map: (Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.
slbId String: (Deprecated) The ID of load balancer.
Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.
slbInternet String: The public ip of load balancer.
slbIntranet String: The ID of private load balancer where the current cluster master node is located.
vpcId String: The ID of VPC where the current cluster is located.
workerRamRoleName String: The RamRole Name attached to worker node.

Look up Existing ManagedKubernetes Resource

Get an existing ManagedKubernetes resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ManagedKubernetesState, opts?: CustomResourceOptions): ManagedKubernetes

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        addons: Optional[Sequence[ManagedKubernetesAddonArgs]] = None,
        api_audiences: Optional[Sequence[str]] = None,
        certificate_authority: Optional[ManagedKubernetesCertificateAuthorityArgs] = None,
        client_cert: Optional[str] = None,
        client_key: Optional[str] = None,
        cluster_ca_cert: Optional[str] = None,
        cluster_domain: Optional[str] = None,
        cluster_spec: Optional[str] = None,
        connections: Optional[ManagedKubernetesConnectionsArgs] = None,
        control_plane_log_components: Optional[Sequence[str]] = None,
        control_plane_log_project: Optional[str] = None,
        control_plane_log_ttl: Optional[str] = None,
        custom_san: Optional[str] = None,
        deletion_protection: Optional[bool] = None,
        enable_rrsa: Optional[bool] = None,
        encryption_provider_key: Optional[str] = None,
        is_enterprise_security_group: Optional[bool] = None,
        load_balancer_spec: Optional[str] = None,
        maintenance_window: Optional[ManagedKubernetesMaintenanceWindowArgs] = None,
        name: Optional[str] = None,
        name_prefix: Optional[str] = None,
        nat_gateway_id: Optional[str] = None,
        new_nat_gateway: Optional[bool] = None,
        node_cidr_mask: Optional[int] = None,
        pod_cidr: Optional[str] = None,
        pod_vswitch_ids: Optional[Sequence[str]] = None,
        proxy_mode: Optional[str] = None,
        resource_group_id: Optional[str] = None,
        retain_resources: Optional[Sequence[str]] = None,
        rrsa_metadata: Optional[ManagedKubernetesRrsaMetadataArgs] = None,
        security_group_id: Optional[str] = None,
        service_account_issuer: Optional[str] = None,
        service_cidr: Optional[str] = None,
        slb_id: Optional[str] = None,
        slb_internet: Optional[str] = None,
        slb_internet_enabled: Optional[bool] = None,
        slb_intranet: Optional[str] = None,
        tags: Optional[Mapping[str, Any]] = None,
        timezone: Optional[str] = None,
        user_ca: Optional[str] = None,
        version: Optional[str] = None,
        vpc_id: Optional[str] = None,
        worker_ram_role_name: Optional[str] = None,
        worker_vswitch_ids: Optional[Sequence[str]] = None) -> ManagedKubernetes

func GetManagedKubernetes(ctx *Context, name string, id IDInput, state *ManagedKubernetesState, opts ...ResourceOption) (*ManagedKubernetes, error)

public static ManagedKubernetes Get(string name, Input<string> id, ManagedKubernetesState? state, CustomResourceOptions? opts = null)

public static ManagedKubernetes get(String name, Output<String> id, ManagedKubernetesState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Addons List<Pulumi.AliCloud.CS.Inputs.ManagedKubernetesAddon>

The addon you want to install in cluster. See addons below.

ApiAudiences List<string>

CertificateAuthority Pulumi.AliCloud.CS.Inputs.ManagedKubernetesCertificateAuthority

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

ClientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

ClientKey string

The path of client key, like ~/.kube/client-key.pem.

ClusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

ClusterDomain string

ClusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

Connections Pulumi.AliCloud.CS.Inputs.ManagedKubernetesConnections

Map of kubernetes cluster connection information.

ControlPlaneLogComponents List<string>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

ControlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

ControlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

CustomSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

DeletionProtection bool

Whether to enable cluster deletion protection.

EnableRrsa bool

EncryptionProviderKey string

The disk encryption key.

IsEnterpriseSecurityGroup bool

Enable to create advanced security group. default: false. See Advanced security group.

LoadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

MaintenanceWindow Pulumi.AliCloud.CS.Inputs.ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

Name string

This parameter specifies the name of the component.

NamePrefix string

NatGatewayId string

The ID of nat gateway used to launch kubernetes cluster.

NewNatGateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

NodeCidrMask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

PodCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

PodVswitchIds List<string>

ProxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

ResourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

RetainResources List<string>

RrsaMetadata Pulumi.AliCloud.CS.Inputs.ManagedKubernetesRrsaMetadata

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

SecurityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

ServiceAccountIssuer string

ServiceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

SlbId string

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

SlbInternet string

The public ip of load balancer.

SlbInternetEnabled bool

Whether to create internet load balancer for API Server. Default to true.

SlbIntranet string

The ID of private load balancer where the current cluster master node is located.

Tags Dictionary<string, object>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

Timezone string

UserCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

Version string

It specifies the version of the component.

VpcId string

The ID of VPC where the current cluster is located.

WorkerRamRoleName string

The RamRole Name attached to worker node.

WorkerVswitchIds List<string>

The vswitches used by control plane. See worker_vswitch_ids below.

Addons []ManagedKubernetesAddonArgs

The addon you want to install in cluster. See addons below.

ApiAudiences []string

CertificateAuthority ManagedKubernetesCertificateAuthorityArgs

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

ClientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

ClientKey string

The path of client key, like ~/.kube/client-key.pem.

ClusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

ClusterDomain string

ClusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

Connections ManagedKubernetesConnectionsArgs

Map of kubernetes cluster connection information.

ControlPlaneLogComponents []string

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

ControlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

ControlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

CustomSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

DeletionProtection bool

Whether to enable cluster deletion protection.

EnableRrsa bool

EncryptionProviderKey string

The disk encryption key.

IsEnterpriseSecurityGroup bool

Enable to create advanced security group. default: false. See Advanced security group.

LoadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

MaintenanceWindow ManagedKubernetesMaintenanceWindowArgs

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

Name string

This parameter specifies the name of the component.

NamePrefix string

NatGatewayId string

The ID of nat gateway used to launch kubernetes cluster.

NewNatGateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

NodeCidrMask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

PodCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

PodVswitchIds []string

ProxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

ResourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

RetainResources []string

RrsaMetadata ManagedKubernetesRrsaMetadataArgs

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

SecurityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

ServiceAccountIssuer string

ServiceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

SlbId string

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

SlbInternet string

The public ip of load balancer.

SlbInternetEnabled bool

Whether to create internet load balancer for API Server. Default to true.

SlbIntranet string

The ID of private load balancer where the current cluster master node is located.

Tags map[string]interface{}

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

Timezone string

UserCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

Version string

It specifies the version of the component.

VpcId string

The ID of VPC where the current cluster is located.

WorkerRamRoleName string

The RamRole Name attached to worker node.

WorkerVswitchIds []string

The vswitches used by control plane. See worker_vswitch_ids below.

addons List<ManagedKubernetesAddon>

The addon you want to install in cluster. See addons below.

apiAudiences List<String>

certificateAuthority ManagedKubernetesCertificateAuthority

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

clientCert String

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey String

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert String

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain String

clusterSpec String

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

connections ManagedKubernetesConnections

Map of kubernetes cluster connection information.

controlPlaneLogComponents List<String>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject String

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl String

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan String

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection Boolean

Whether to enable cluster deletion protection.

enableRrsa Boolean

encryptionProviderKey String

The disk encryption key.

isEnterpriseSecurityGroup Boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec String

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name String

This parameter specifies the name of the component.

namePrefix String

natGatewayId String

The ID of nat gateway used to launch kubernetes cluster.

newNatGateway Boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask Integer

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr String

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds List<String>

proxyMode String

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId String

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources List<String>

rrsaMetadata ManagedKubernetesRrsaMetadata

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

securityGroupId String

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer String

serviceCidr String

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbId String

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

slbInternet String

The public ip of load balancer.

slbInternetEnabled Boolean

Whether to create internet load balancer for API Server. Default to true.

slbIntranet String

The ID of private load balancer where the current cluster master node is located.

tags Map<String,Object>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone String

userCa String

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version String

It specifies the version of the component.

vpcId String

The ID of VPC where the current cluster is located.

workerRamRoleName String

The RamRole Name attached to worker node.

workerVswitchIds List<String>

The vswitches used by control plane. See worker_vswitch_ids below.

addons ManagedKubernetesAddon[]

The addon you want to install in cluster. See addons below.

apiAudiences string[]

certificateAuthority ManagedKubernetesCertificateAuthority

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

clientCert string

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey string

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert string

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain string

clusterSpec string

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

connections ManagedKubernetesConnections

Map of kubernetes cluster connection information.

controlPlaneLogComponents string[]

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject string

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl string

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan string

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection boolean

Whether to enable cluster deletion protection.

enableRrsa boolean

encryptionProviderKey string

The disk encryption key.

isEnterpriseSecurityGroup boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec string

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow ManagedKubernetesMaintenanceWindow

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name string

This parameter specifies the name of the component.

namePrefix string

natGatewayId string

The ID of nat gateway used to launch kubernetes cluster.

newNatGateway boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask number

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr string

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds string[]

proxyMode string

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId string

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources string[]

rrsaMetadata ManagedKubernetesRrsaMetadata

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

securityGroupId string

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer string

serviceCidr string

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbId string

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

slbInternet string

The public ip of load balancer.

slbInternetEnabled boolean

Whether to create internet load balancer for API Server. Default to true.

slbIntranet string

The ID of private load balancer where the current cluster master node is located.

tags {[key: string]: any}

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone string

userCa string

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version string

It specifies the version of the component.

vpcId string

The ID of VPC where the current cluster is located.

workerRamRoleName string

The RamRole Name attached to worker node.

workerVswitchIds string[]

The vswitches used by control plane. See worker_vswitch_ids below.

addons Sequence[ManagedKubernetesAddonArgs]

The addon you want to install in cluster. See addons below.

api_audiences Sequence[str]

certificate_authority ManagedKubernetesCertificateAuthorityArgs

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

client_cert str

The path of client certificate, like ~/.kube/client-cert.pem.

client_key str

The path of client key, like ~/.kube/client-key.pem.

cluster_ca_cert str

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

cluster_domain str

cluster_spec str

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

connections ManagedKubernetesConnectionsArgs

Map of kubernetes cluster connection information.

control_plane_log_components Sequence[str]

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

control_plane_log_project str

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

control_plane_log_ttl str

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

custom_san str

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletion_protection bool

Whether to enable cluster deletion protection.

enable_rrsa bool

encryption_provider_key str

The disk encryption key.

is_enterprise_security_group bool

Enable to create advanced security group. default: false. See Advanced security group.

load_balancer_spec str

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenance_window ManagedKubernetesMaintenanceWindowArgs

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name str

This parameter specifies the name of the component.

name_prefix str

nat_gateway_id str

The ID of nat gateway used to launch kubernetes cluster.

new_nat_gateway bool

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

node_cidr_mask int

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

pod_cidr str

[Flannel Specific] The CIDR block for the pod network when using Flannel.

pod_vswitch_ids Sequence[str]

proxy_mode str

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resource_group_id str

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retain_resources Sequence[str]

rrsa_metadata ManagedKubernetesRrsaMetadataArgs

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

security_group_id str

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

service_account_issuer str

service_cidr str

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slb_id str

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

slb_internet str

The public ip of load balancer.

slb_internet_enabled bool

Whether to create internet load balancer for API Server. Default to true.

slb_intranet str

The ID of private load balancer where the current cluster master node is located.

tags Mapping[str, Any]

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone str

user_ca str

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version str

It specifies the version of the component.

vpc_id str

The ID of VPC where the current cluster is located.

worker_ram_role_name str

The RamRole Name attached to worker node.

worker_vswitch_ids Sequence[str]

The vswitches used by control plane. See worker_vswitch_ids below.

addons List<Property Map>

The addon you want to install in cluster. See addons below.

apiAudiences List<String>

certificateAuthority Property Map

(Available in 1.105.0+) Nested attribute containing certificate authority data for your cluster.

clientCert String

The path of client certificate, like ~/.kube/client-cert.pem.

clientKey String

The path of client key, like ~/.kube/client-key.pem.

clusterCaCert String

The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem

clusterDomain String

clusterSpec String

The cluster specifications of kubernetes cluster,which can be empty. Valid values:

ack.standard : Standard managed clusters.
ack.pro.small : Professional managed clusters.

connections Property Map

Map of kubernetes cluster connection information.

controlPlaneLogComponents List<String>

List of target components for which logs need to be collected. Supports apiserver, kcm, scheduler, ccm and controlplane-events.

controlPlaneLogProject String

Control plane log project. If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

controlPlaneLogTtl String

Control plane log retention duration (unit: day). Default 30. If control plane logs are to be collected, control_plane_log_ttl and control_plane_log_components must be specified.

customSan String

Customize the certificate SAN, multiple IP or domain names are separated by English commas (,).

deletionProtection Boolean

Whether to enable cluster deletion protection.

enableRrsa Boolean

encryptionProviderKey String

The disk encryption key.

isEnterpriseSecurityGroup Boolean

Enable to create advanced security group. default: false. See Advanced security group.

loadBalancerSpec String

The cluster api server load balance instance specification, default slb.s1.small. For more information on how to select a LB instance specification, see SLB instance overview.

maintenanceWindow Property Map

The cluster maintenance window，effective only in the professional managed cluster. Managed node pool will use it. See maintenance_window below.

name String

This parameter specifies the name of the component.

namePrefix String

natGatewayId String

The ID of nat gateway used to launch kubernetes cluster.

newNatGateway Boolean

Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice.

nodeCidrMask Number

The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24

podCidr String

[Flannel Specific] The CIDR block for the pod network when using Flannel.

podVswitchIds List<String>

proxyMode String

Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.

resourceGroupId String

The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.

retainResources List<String>

rrsaMetadata Property Map

(Optional, Available in v1.185.0+) Nested attribute containing RRSA related data for your cluster.

securityGroupId String

The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.

serviceAccountIssuer String

serviceCidr String

The CIDR block for the service network. It cannot be duplicated with the VPC CIDR and CIDR used by Kubernetes cluster in VPC, cannot be modified after creation.

slbId String

(Deprecated) The ID of load balancer.

Deprecated: Field 'slb_id' has been deprecated from provider version 1.9.2. New field 'slb_internet' replaces it.

slbInternet String

The public ip of load balancer.

slbInternetEnabled Boolean

Whether to create internet load balancer for API Server. Default to true.

slbIntranet String

The ID of private load balancer where the current cluster master node is located.

tags Map<Any>

Default nil, A map of tags assigned to the kubernetes cluster and work nodes. See tags below.

timezone String

userCa String

The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.

version String

It specifies the version of the component.

vpcId String

The ID of VPC where the current cluster is located.

workerRamRoleName String

The RamRole Name attached to worker node.

workerVswitchIds List<String>

The vswitches used by control plane. See worker_vswitch_ids below.

Supporting Types

ManagedKubernetesAddon, ManagedKubernetesAddonArgs

Config string

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

Disabled bool

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

logtail-ds - You can specify IngressDashboardEnabled and sls_project_name in config. If you switch on IngressDashboardEnabled and sls_project_name,then logtail-ds would use sls_project_name as default log store.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

Name string

This parameter specifies the name of the component.

Version string

It specifies the version of the component.

Config string

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

Disabled bool

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

Name string

This parameter specifies the name of the component.

Version string

It specifies the version of the component.

config String

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

disabled Boolean

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

name String

This parameter specifies the name of the component.

version String

It specifies the version of the component.

config string

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

disabled boolean

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

name string

This parameter specifies the name of the component.

version string

It specifies the version of the component.

config str

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

disabled bool

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

name str

This parameter specifies the name of the component.

version str

It specifies the version of the component.

config String

If this parameter is left empty, no configurations are required. For more config information, see cs_kubernetes_addon_metadata.

disabled Boolean

It specifies whether to disable automatic installation.

It is a new field since 1.75.0. You can specific network plugin, log component,ingress component and so on.

You can get more information about addons on ACK web console. When you create a ACK cluster. You can get openapi-spec before creating the cluster on submission page.

nginx-ingress-controller - You can specific IngressSlbNetworkType in config. Options: internet|intranet.

The main.tf:

name String

This parameter specifies the name of the component.

version String

It specifies the version of the component.

ManagedKubernetesCertificateAuthority, ManagedKubernetesCertificateAuthorityArgs

ClientCert string: The path of client certificate, like ~/.kube/client-cert.pem.
ClientKey string: The path of client key, like ~/.kube/client-key.pem.
ClusterCert string: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

ClientCert string: The path of client certificate, like ~/.kube/client-cert.pem.
ClientKey string: The path of client key, like ~/.kube/client-key.pem.
ClusterCert string: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

clientCert String: The path of client certificate, like ~/.kube/client-cert.pem.
clientKey String: The path of client key, like ~/.kube/client-key.pem.
clusterCert String: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

clientCert string: The path of client certificate, like ~/.kube/client-cert.pem.
clientKey string: The path of client key, like ~/.kube/client-key.pem.
clusterCert string: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

client_cert str: The path of client certificate, like ~/.kube/client-cert.pem.
client_key str: The path of client key, like ~/.kube/client-key.pem.
cluster_cert str: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

clientCert String: The path of client certificate, like ~/.kube/client-cert.pem.
clientKey String: The path of client key, like ~/.kube/client-key.pem.
clusterCert String: The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.

ManagedKubernetesConnections, ManagedKubernetesConnectionsArgs

ApiServerInternet string: API Server Internet endpoint.
ApiServerIntranet string: API Server Intranet endpoint.
MasterPublicIp string: Master node SSH IP address.
ServiceDomain string: Service Access Domain.

ApiServerInternet string: API Server Internet endpoint.
ApiServerIntranet string: API Server Intranet endpoint.
MasterPublicIp string: Master node SSH IP address.
ServiceDomain string: Service Access Domain.

apiServerInternet String: API Server Internet endpoint.
apiServerIntranet String: API Server Intranet endpoint.
masterPublicIp String: Master node SSH IP address.
serviceDomain String: Service Access Domain.

apiServerInternet string: API Server Internet endpoint.
apiServerIntranet string: API Server Intranet endpoint.
masterPublicIp string: Master node SSH IP address.
serviceDomain string: Service Access Domain.

api_server_internet str: API Server Internet endpoint.
api_server_intranet str: API Server Intranet endpoint.
master_public_ip str: Master node SSH IP address.
service_domain str: Service Access Domain.

apiServerInternet String: API Server Internet endpoint.
apiServerIntranet String: API Server Intranet endpoint.
masterPublicIp String: Master node SSH IP address.
serviceDomain String: Service Access Domain.

ManagedKubernetesMaintenanceWindow, ManagedKubernetesMaintenanceWindowArgs

Duration string

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

Enable bool

Whether to open the maintenance window. The following parameters take effect only enable = true.

MaintenanceTime string

Initial maintenance time, For example:"03:00:00Z".

WeeklyPeriod string

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

Duration string

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

Enable bool

Whether to open the maintenance window. The following parameters take effect only enable = true.

MaintenanceTime string

Initial maintenance time, For example:"03:00:00Z".

WeeklyPeriod string

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

duration String

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

enable Boolean

Whether to open the maintenance window. The following parameters take effect only enable = true.

maintenanceTime String

Initial maintenance time, For example:"03:00:00Z".

weeklyPeriod String

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

duration string

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

enable boolean

Whether to open the maintenance window. The following parameters take effect only enable = true.

maintenanceTime string

Initial maintenance time, For example:"03:00:00Z".

weeklyPeriod string

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

duration str

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

enable bool

Whether to open the maintenance window. The following parameters take effect only enable = true.

maintenance_time str

Initial maintenance time, For example:"03:00:00Z".

weekly_period str

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

duration String

The maintenance time, values range from 1 to 24,unit is hour. For example: "3h".

enable Boolean

Whether to open the maintenance window. The following parameters take effect only enable = true.

maintenanceTime String

Initial maintenance time, For example:"03:00:00Z".

weeklyPeriod String

Maintenance cycle, you can set the values from Monday to Sunday, separated by commas when the values are multiple. The default is Thursday.

for example:

maintenance_window {
enable            = true
maintenance_time  = "01:00:00Z"
duration          = "3h"
weekly_period     = "Monday,Friday"
}

ManagedKubernetesRrsaMetadata, ManagedKubernetesRrsaMetadataArgs

Enabled bool: Whether the RRSA feature has been enabled.
RamOidcProviderArn string: The arn of OIDC provider that was registered in RAM.
RamOidcProviderName string: The name of OIDC Provider that was registered in RAM.
RrsaOidcIssuerUrl string: The issuer URL of RRSA OIDC Token.

Enabled bool: Whether the RRSA feature has been enabled.
RamOidcProviderArn string: The arn of OIDC provider that was registered in RAM.
RamOidcProviderName string: The name of OIDC Provider that was registered in RAM.
RrsaOidcIssuerUrl string: The issuer URL of RRSA OIDC Token.

enabled Boolean: Whether the RRSA feature has been enabled.
ramOidcProviderArn String: The arn of OIDC provider that was registered in RAM.
ramOidcProviderName String: The name of OIDC Provider that was registered in RAM.
rrsaOidcIssuerUrl String: The issuer URL of RRSA OIDC Token.

enabled boolean: Whether the RRSA feature has been enabled.
ramOidcProviderArn string: The arn of OIDC provider that was registered in RAM.
ramOidcProviderName string: The name of OIDC Provider that was registered in RAM.
rrsaOidcIssuerUrl string: The issuer URL of RRSA OIDC Token.

enabled bool: Whether the RRSA feature has been enabled.
ram_oidc_provider_arn str: The arn of OIDC provider that was registered in RAM.
ram_oidc_provider_name str: The name of OIDC Provider that was registered in RAM.
rrsa_oidc_issuer_url str: The issuer URL of RRSA OIDC Token.

enabled Boolean: Whether the RRSA feature has been enabled.
ramOidcProviderArn String: The arn of OIDC provider that was registered in RAM.
ramOidcProviderName String: The name of OIDC Provider that was registered in RAM.
rrsaOidcIssuerUrl String: The issuer URL of RRSA OIDC Token.

Import

Kubernetes managed cluster can be imported using the id, e.g. Then complete the main.tf accords to the result of pulumi preview.

$ pulumi import alicloud:cs/managedKubernetes:ManagedKubernetes main cluster_id

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Alibaba Cloud pulumi/pulumi-alicloud
License: Apache-2.0
Notes: This Pulumi package is based on the alicloud Terraform Provider.

Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi

pulumi/pulumi-alicloud

alicloud.cs.ManagedKubernetes

On this page

On this page

Create ManagedKubernetes Resource

Constructor syntax

Parameters

Example

ManagedKubernetes Resource Properties

Inputs

Outputs

Look up Existing ManagedKubernetes Resource

Supporting Types

ManagedKubernetesAddon, ManagedKubernetesAddonArgs

ManagedKubernetesCertificateAuthority, ManagedKubernetesCertificateAuthorityArgs

ManagedKubernetesConnections, ManagedKubernetesConnectionsArgs

ManagedKubernetesMaintenanceWindow, ManagedKubernetesMaintenanceWindowArgs

ManagedKubernetesRrsaMetadata, ManagedKubernetesRrsaMetadataArgs

Import

Package Details

On this page

On this page