1. Packages
  2. Ibm Provider
  3. API Docs
  4. ContainerVpcCluster
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

ibm.ContainerVpcCluster

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

    Example Usage

    In the following example, you can create a Gen-2 VPC cluster with a default worker pool with one worker:

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const cluster = new ibm.ContainerVpcCluster("cluster", {
        vpcId: "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kubeVersion: "1.17.5",
        flavor: "bx2.2x8",
        workerCount: 1,
        resourceGroupId: data.ibm_resource_group.resource_group.id,
        zones: [{
            subnetId: "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            name: "us-south-1",
        }],
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    cluster = ibm.ContainerVpcCluster("cluster",
        vpc_id="r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kube_version="1.17.5",
        flavor="bx2.2x8",
        worker_count=1,
        resource_group_id=data["ibm_resource_group"]["resource_group"]["id"],
        zones=[{
            "subnet_id": "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            "name": "us-south-1",
        }])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := ibm.NewContainerVpcCluster(ctx, "cluster", &ibm.ContainerVpcClusterArgs{
    			VpcId:           pulumi.String("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf"),
    			KubeVersion:     pulumi.String("1.17.5"),
    			Flavor:          pulumi.String("bx2.2x8"),
    			WorkerCount:     pulumi.Float64(1),
    			ResourceGroupId: pulumi.Any(data.Ibm_resource_group.Resource_group.Id),
    			Zones: ibm.ContainerVpcClusterZoneArray{
    				&ibm.ContainerVpcClusterZoneArgs{
    					SubnetId: pulumi.String("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478"),
    					Name:     pulumi.String("us-south-1"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var cluster = new Ibm.ContainerVpcCluster("cluster", new()
        {
            VpcId = "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
            KubeVersion = "1.17.5",
            Flavor = "bx2.2x8",
            WorkerCount = 1,
            ResourceGroupId = data.Ibm_resource_group.Resource_group.Id,
            Zones = new[]
            {
                new Ibm.Inputs.ContainerVpcClusterZoneArgs
                {
                    SubnetId = "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
                    Name = "us-south-1",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.ContainerVpcCluster;
    import com.pulumi.ibm.ContainerVpcClusterArgs;
    import com.pulumi.ibm.inputs.ContainerVpcClusterZoneArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var cluster = new ContainerVpcCluster("cluster", ContainerVpcClusterArgs.builder()
                .vpcId("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf")
                .kubeVersion("1.17.5")
                .flavor("bx2.2x8")
                .workerCount("1")
                .resourceGroupId(data.ibm_resource_group().resource_group().id())
                .zones(ContainerVpcClusterZoneArgs.builder()
                    .subnetId("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478")
                    .name("us-south-1")
                    .build())
                .build());
    
        }
    }
    
    resources:
      cluster:
        type: ibm:ContainerVpcCluster
        properties:
          vpcId: r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf
          kubeVersion: 1.17.5
          flavor: bx2.2x8
          workerCount: '1'
          resourceGroupId: ${data.ibm_resource_group.resource_group.id}
          zones:
            - subnetId: 0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478
              name: us-south-1
    

    Example with boot volume encryption

    In the following example, you can create a Gen-2 VPC cluster with a default worker pool with one worker with boot volume encryption:

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const cluster = new ibm.ContainerVpcCluster("cluster", {
        vpcId: "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kubeVersion: "1.17.5",
        flavor: "bx2.2x8",
        workerCount: 1,
        resourceGroupId: data.ibm_resource_group.resource_group.id,
        zones: [{
            subnetId: "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            name: "us-south-1",
        }],
        kmsInstanceId: "8e9056e6-1936-4dd9-a0a1-51d824765e11",
        crk: "804cb251-fa0a-46f5-a442-fe42cfb0ed5f",
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    cluster = ibm.ContainerVpcCluster("cluster",
        vpc_id="r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kube_version="1.17.5",
        flavor="bx2.2x8",
        worker_count=1,
        resource_group_id=data["ibm_resource_group"]["resource_group"]["id"],
        zones=[{
            "subnet_id": "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            "name": "us-south-1",
        }],
        kms_instance_id="8e9056e6-1936-4dd9-a0a1-51d824765e11",
        crk="804cb251-fa0a-46f5-a442-fe42cfb0ed5f")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := ibm.NewContainerVpcCluster(ctx, "cluster", &ibm.ContainerVpcClusterArgs{
    			VpcId:           pulumi.String("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf"),
    			KubeVersion:     pulumi.String("1.17.5"),
    			Flavor:          pulumi.String("bx2.2x8"),
    			WorkerCount:     pulumi.Float64(1),
    			ResourceGroupId: pulumi.Any(data.Ibm_resource_group.Resource_group.Id),
    			Zones: ibm.ContainerVpcClusterZoneArray{
    				&ibm.ContainerVpcClusterZoneArgs{
    					SubnetId: pulumi.String("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478"),
    					Name:     pulumi.String("us-south-1"),
    				},
    			},
    			KmsInstanceId: pulumi.String("8e9056e6-1936-4dd9-a0a1-51d824765e11"),
    			Crk:           pulumi.String("804cb251-fa0a-46f5-a442-fe42cfb0ed5f"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var cluster = new Ibm.ContainerVpcCluster("cluster", new()
        {
            VpcId = "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
            KubeVersion = "1.17.5",
            Flavor = "bx2.2x8",
            WorkerCount = 1,
            ResourceGroupId = data.Ibm_resource_group.Resource_group.Id,
            Zones = new[]
            {
                new Ibm.Inputs.ContainerVpcClusterZoneArgs
                {
                    SubnetId = "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
                    Name = "us-south-1",
                },
            },
            KmsInstanceId = "8e9056e6-1936-4dd9-a0a1-51d824765e11",
            Crk = "804cb251-fa0a-46f5-a442-fe42cfb0ed5f",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.ContainerVpcCluster;
    import com.pulumi.ibm.ContainerVpcClusterArgs;
    import com.pulumi.ibm.inputs.ContainerVpcClusterZoneArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var cluster = new ContainerVpcCluster("cluster", ContainerVpcClusterArgs.builder()
                .vpcId("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf")
                .kubeVersion("1.17.5")
                .flavor("bx2.2x8")
                .workerCount("1")
                .resourceGroupId(data.ibm_resource_group().resource_group().id())
                .zones(ContainerVpcClusterZoneArgs.builder()
                    .subnetId("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478")
                    .name("us-south-1")
                    .build())
                .kmsInstanceId("8e9056e6-1936-4dd9-a0a1-51d824765e11")
                .crk("804cb251-fa0a-46f5-a442-fe42cfb0ed5f")
                .build());
    
        }
    }
    
    resources:
      cluster:
        type: ibm:ContainerVpcCluster
        properties:
          vpcId: r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf
          kubeVersion: 1.17.5
          flavor: bx2.2x8
          workerCount: '1'
          resourceGroupId: ${data.ibm_resource_group.resource_group.id}
          zones:
            - subnetId: 0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478
              name: us-south-1
          kmsInstanceId: 8e9056e6-1936-4dd9-a0a1-51d824765e11
          crk: 804cb251-fa0a-46f5-a442-fe42cfb0ed5f
    

    VPC Generation 2 Red Hat OpenShift on IBM Cloud cluster with existing OpenShift entitlement

    Create the Openshift Cluster with default worker pool entitlement with one worker node:

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const cosInstance = new ibm.ResourceInstance("cosInstance", {
        service: "cloud-object-storage",
        plan: "standard",
        location: "global",
    });
    const cluster = new ibm.ContainerVpcCluster("cluster", {
        vpcId: "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kubeVersion: "4.3_openshift",
        flavor: "bx2.16x64",
        workerCount: 2,
        entitlement: "cloud_pak",
        cosInstanceCrn: cosInstance.resourceInstanceId,
        resourceGroupId: data.ibm_resource_group.resource_group.id,
        zones: [{
            subnetId: "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            name: "us-south-1",
        }],
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    cos_instance = ibm.ResourceInstance("cosInstance",
        service="cloud-object-storage",
        plan="standard",
        location="global")
    cluster = ibm.ContainerVpcCluster("cluster",
        vpc_id="r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
        kube_version="4.3_openshift",
        flavor="bx2.16x64",
        worker_count=2,
        entitlement="cloud_pak",
        cos_instance_crn=cos_instance.resource_instance_id,
        resource_group_id=data["ibm_resource_group"]["resource_group"]["id"],
        zones=[{
            "subnet_id": "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
            "name": "us-south-1",
        }])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		cosInstance, err := ibm.NewResourceInstance(ctx, "cosInstance", &ibm.ResourceInstanceArgs{
    			Service:  pulumi.String("cloud-object-storage"),
    			Plan:     pulumi.String("standard"),
    			Location: pulumi.String("global"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = ibm.NewContainerVpcCluster(ctx, "cluster", &ibm.ContainerVpcClusterArgs{
    			VpcId:           pulumi.String("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf"),
    			KubeVersion:     pulumi.String("4.3_openshift"),
    			Flavor:          pulumi.String("bx2.16x64"),
    			WorkerCount:     pulumi.Float64(2),
    			Entitlement:     pulumi.String("cloud_pak"),
    			CosInstanceCrn:  cosInstance.ResourceInstanceId,
    			ResourceGroupId: pulumi.Any(data.Ibm_resource_group.Resource_group.Id),
    			Zones: ibm.ContainerVpcClusterZoneArray{
    				&ibm.ContainerVpcClusterZoneArgs{
    					SubnetId: pulumi.String("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478"),
    					Name:     pulumi.String("us-south-1"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var cosInstance = new Ibm.ResourceInstance("cosInstance", new()
        {
            Service = "cloud-object-storage",
            Plan = "standard",
            Location = "global",
        });
    
        var cluster = new Ibm.ContainerVpcCluster("cluster", new()
        {
            VpcId = "r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf",
            KubeVersion = "4.3_openshift",
            Flavor = "bx2.16x64",
            WorkerCount = 2,
            Entitlement = "cloud_pak",
            CosInstanceCrn = cosInstance.ResourceInstanceId,
            ResourceGroupId = data.Ibm_resource_group.Resource_group.Id,
            Zones = new[]
            {
                new Ibm.Inputs.ContainerVpcClusterZoneArgs
                {
                    SubnetId = "0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478",
                    Name = "us-south-1",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.ResourceInstance;
    import com.pulumi.ibm.ResourceInstanceArgs;
    import com.pulumi.ibm.ContainerVpcCluster;
    import com.pulumi.ibm.ContainerVpcClusterArgs;
    import com.pulumi.ibm.inputs.ContainerVpcClusterZoneArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var cosInstance = new ResourceInstance("cosInstance", ResourceInstanceArgs.builder()
                .service("cloud-object-storage")
                .plan("standard")
                .location("global")
                .build());
    
            var cluster = new ContainerVpcCluster("cluster", ContainerVpcClusterArgs.builder()
                .vpcId("r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf")
                .kubeVersion("4.3_openshift")
                .flavor("bx2.16x64")
                .workerCount("2")
                .entitlement("cloud_pak")
                .cosInstanceCrn(cosInstance.resourceInstanceId())
                .resourceGroupId(data.ibm_resource_group().resource_group().id())
                .zones(ContainerVpcClusterZoneArgs.builder()
                    .subnetId("0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478")
                    .name("us-south-1")
                    .build())
                .build());
    
        }
    }
    
    resources:
      cosInstance:
        type: ibm:ResourceInstance
        properties:
          service: cloud-object-storage
          plan: standard
          location: global
      cluster:
        type: ibm:ContainerVpcCluster
        properties:
          vpcId: r006-abb7c7ea-aadf-41bd-94c5-b8521736fadf
          kubeVersion: 4.3_openshift
          flavor: bx2.16x64
          workerCount: '2'
          entitlement: cloud_pak
          cosInstanceCrn: ${cosInstance.resourceInstanceId}
          resourceGroupId: ${data.ibm_resource_group.resource_group.id}
          zones:
            - subnetId: 0717-0c0899ce-48ac-4eb6-892d-4e2e1ff8c9478
              name: us-south-1
    

    Create a KMS Enabled Kubernetes cluster:

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const cluster = new ibm.ContainerVpcCluster("cluster", {
        vpcId: ibm_is_vpc.vpc1.id,
        flavor: "bx2.2x8",
        workerCount: 1,
        waitTill: "OneWorkerNodeReady",
        resourceGroupId: data.ibm_resource_group.resource_group.id,
        zones: [{
            subnetId: ibm_is_subnet.subnet1.id,
            name: "us-south-1",
        }],
        kmsConfig: {
            instanceId: "12043812-757f-4e1e-8436-6af3245e6a69",
            crkId: "0792853c-b9f9-4b35-9d9e-ffceab51d3c1",
            privateEndpoint: false,
        },
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    cluster = ibm.ContainerVpcCluster("cluster",
        vpc_id=ibm_is_vpc["vpc1"]["id"],
        flavor="bx2.2x8",
        worker_count=1,
        wait_till="OneWorkerNodeReady",
        resource_group_id=data["ibm_resource_group"]["resource_group"]["id"],
        zones=[{
            "subnet_id": ibm_is_subnet["subnet1"]["id"],
            "name": "us-south-1",
        }],
        kms_config={
            "instance_id": "12043812-757f-4e1e-8436-6af3245e6a69",
            "crk_id": "0792853c-b9f9-4b35-9d9e-ffceab51d3c1",
            "private_endpoint": False,
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := ibm.NewContainerVpcCluster(ctx, "cluster", &ibm.ContainerVpcClusterArgs{
    			VpcId:           pulumi.Any(ibm_is_vpc.Vpc1.Id),
    			Flavor:          pulumi.String("bx2.2x8"),
    			WorkerCount:     pulumi.Float64(1),
    			WaitTill:        pulumi.String("OneWorkerNodeReady"),
    			ResourceGroupId: pulumi.Any(data.Ibm_resource_group.Resource_group.Id),
    			Zones: ibm.ContainerVpcClusterZoneArray{
    				&ibm.ContainerVpcClusterZoneArgs{
    					SubnetId: pulumi.Any(ibm_is_subnet.Subnet1.Id),
    					Name:     pulumi.String("us-south-1"),
    				},
    			},
    			KmsConfig: &ibm.ContainerVpcClusterKmsConfigArgs{
    				InstanceId:      pulumi.String("12043812-757f-4e1e-8436-6af3245e6a69"),
    				CrkId:           pulumi.String("0792853c-b9f9-4b35-9d9e-ffceab51d3c1"),
    				PrivateEndpoint: pulumi.Bool(false),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var cluster = new Ibm.ContainerVpcCluster("cluster", new()
        {
            VpcId = ibm_is_vpc.Vpc1.Id,
            Flavor = "bx2.2x8",
            WorkerCount = 1,
            WaitTill = "OneWorkerNodeReady",
            ResourceGroupId = data.Ibm_resource_group.Resource_group.Id,
            Zones = new[]
            {
                new Ibm.Inputs.ContainerVpcClusterZoneArgs
                {
                    SubnetId = ibm_is_subnet.Subnet1.Id,
                    Name = "us-south-1",
                },
            },
            KmsConfig = new Ibm.Inputs.ContainerVpcClusterKmsConfigArgs
            {
                InstanceId = "12043812-757f-4e1e-8436-6af3245e6a69",
                CrkId = "0792853c-b9f9-4b35-9d9e-ffceab51d3c1",
                PrivateEndpoint = false,
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.ContainerVpcCluster;
    import com.pulumi.ibm.ContainerVpcClusterArgs;
    import com.pulumi.ibm.inputs.ContainerVpcClusterZoneArgs;
    import com.pulumi.ibm.inputs.ContainerVpcClusterKmsConfigArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var cluster = new ContainerVpcCluster("cluster", ContainerVpcClusterArgs.builder()
                .vpcId(ibm_is_vpc.vpc1().id())
                .flavor("bx2.2x8")
                .workerCount("1")
                .waitTill("OneWorkerNodeReady")
                .resourceGroupId(data.ibm_resource_group().resource_group().id())
                .zones(ContainerVpcClusterZoneArgs.builder()
                    .subnetId(ibm_is_subnet.subnet1().id())
                    .name("us-south-1")
                    .build())
                .kmsConfig(ContainerVpcClusterKmsConfigArgs.builder()
                    .instanceId("12043812-757f-4e1e-8436-6af3245e6a69")
                    .crkId("0792853c-b9f9-4b35-9d9e-ffceab51d3c1")
                    .privateEndpoint(false)
                    .build())
                .build());
    
        }
    }
    
    resources:
      cluster:
        type: ibm:ContainerVpcCluster
        properties:
          vpcId: ${ibm_is_vpc.vpc1.id}
          flavor: bx2.2x8
          workerCount: '1'
          waitTill: OneWorkerNodeReady
          resourceGroupId: ${data.ibm_resource_group.resource_group.id}
          zones:
            - subnetId: ${ibm_is_subnet.subnet1.id}
              name: us-south-1
          kmsConfig:
            instanceId: 12043812-757f-4e1e-8436-6af3245e6a69
            crkId: 0792853c-b9f9-4b35-9d9e-ffceab51d3c1
            privateEndpoint: false
    

    Create ContainerVpcCluster Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ContainerVpcCluster(name: string, args: ContainerVpcClusterArgs, opts?: CustomResourceOptions);
    @overload
    def ContainerVpcCluster(resource_name: str,
                            args: ContainerVpcClusterArgs,
                            opts: Optional[ResourceOptions] = None)
    
    @overload
    def ContainerVpcCluster(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            flavor: Optional[str] = None,
                            zones: Optional[Sequence[ContainerVpcClusterZoneArgs]] = None,
                            vpc_id: Optional[str] = None,
                            operating_system: Optional[str] = None,
                            resource_group_id: Optional[str] = None,
                            enable_secure_by_default: Optional[bool] = None,
                            entitlement: Optional[str] = None,
                            disable_outbound_traffic_protection: Optional[bool] = None,
                            force_delete_storage: Optional[bool] = None,
                            host_pool_id: Optional[str] = None,
                            image_security_enforcement: Optional[bool] = None,
                            kms_account_id: Optional[str] = None,
                            kms_config: Optional[ContainerVpcClusterKmsConfigArgs] = None,
                            kms_instance_id: Optional[str] = None,
                            kube_version: Optional[str] = None,
                            name: Optional[str] = None,
                            container_vpc_cluster_id: Optional[str] = None,
                            disable_public_service_endpoint: Optional[bool] = None,
                            patch_version: Optional[str] = None,
                            secondary_storage: Optional[str] = None,
                            retry_patch_version: Optional[float] = None,
                            pod_subnet: Optional[str] = None,
                            security_groups: Optional[Sequence[str]] = None,
                            service_subnet: Optional[str] = None,
                            tags: Optional[Sequence[str]] = None,
                            taints: Optional[Sequence[ContainerVpcClusterTaintArgs]] = None,
                            timeouts: Optional[ContainerVpcClusterTimeoutsArgs] = None,
                            update_all_workers: Optional[bool] = None,
                            crk: Optional[str] = None,
                            wait_for_worker_update: Optional[bool] = None,
                            wait_till: Optional[str] = None,
                            worker_count: Optional[float] = None,
                            worker_labels: Optional[Mapping[str, str]] = None,
                            cos_instance_crn: Optional[str] = None)
    func NewContainerVpcCluster(ctx *Context, name string, args ContainerVpcClusterArgs, opts ...ResourceOption) (*ContainerVpcCluster, error)
    public ContainerVpcCluster(string name, ContainerVpcClusterArgs args, CustomResourceOptions? opts = null)
    public ContainerVpcCluster(String name, ContainerVpcClusterArgs args)
    public ContainerVpcCluster(String name, ContainerVpcClusterArgs args, CustomResourceOptions options)
    
    type: ibm:ContainerVpcCluster
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args ContainerVpcClusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ContainerVpcClusterArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ContainerVpcClusterArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ContainerVpcClusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ContainerVpcClusterArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var containerVpcClusterResource = new Ibm.ContainerVpcCluster("containerVpcClusterResource", new()
    {
        Flavor = "string",
        Zones = new[]
        {
            new Ibm.Inputs.ContainerVpcClusterZoneArgs
            {
                Name = "string",
                SubnetId = "string",
            },
        },
        VpcId = "string",
        OperatingSystem = "string",
        ResourceGroupId = "string",
        EnableSecureByDefault = false,
        Entitlement = "string",
        DisableOutboundTrafficProtection = false,
        ForceDeleteStorage = false,
        HostPoolId = "string",
        ImageSecurityEnforcement = false,
        KmsAccountId = "string",
        KmsConfig = new Ibm.Inputs.ContainerVpcClusterKmsConfigArgs
        {
            CrkId = "string",
            InstanceId = "string",
            AccountId = "string",
            PrivateEndpoint = false,
            WaitForApply = false,
        },
        KmsInstanceId = "string",
        KubeVersion = "string",
        Name = "string",
        ContainerVpcClusterId = "string",
        DisablePublicServiceEndpoint = false,
        PatchVersion = "string",
        SecondaryStorage = "string",
        RetryPatchVersion = 0,
        PodSubnet = "string",
        SecurityGroups = new[]
        {
            "string",
        },
        ServiceSubnet = "string",
        Tags = new[]
        {
            "string",
        },
        Taints = new[]
        {
            new Ibm.Inputs.ContainerVpcClusterTaintArgs
            {
                Effect = "string",
                Key = "string",
                Value = "string",
            },
        },
        Timeouts = new Ibm.Inputs.ContainerVpcClusterTimeoutsArgs
        {
            Create = "string",
            Delete = "string",
            Update = "string",
        },
        UpdateAllWorkers = false,
        Crk = "string",
        WaitForWorkerUpdate = false,
        WaitTill = "string",
        WorkerCount = 0,
        WorkerLabels = 
        {
            { "string", "string" },
        },
        CosInstanceCrn = "string",
    });
    
    example, err := ibm.NewContainerVpcCluster(ctx, "containerVpcClusterResource", &ibm.ContainerVpcClusterArgs{
    	Flavor: pulumi.String("string"),
    	Zones: ibm.ContainerVpcClusterZoneArray{
    		&ibm.ContainerVpcClusterZoneArgs{
    			Name:     pulumi.String("string"),
    			SubnetId: pulumi.String("string"),
    		},
    	},
    	VpcId:                            pulumi.String("string"),
    	OperatingSystem:                  pulumi.String("string"),
    	ResourceGroupId:                  pulumi.String("string"),
    	EnableSecureByDefault:            pulumi.Bool(false),
    	Entitlement:                      pulumi.String("string"),
    	DisableOutboundTrafficProtection: pulumi.Bool(false),
    	ForceDeleteStorage:               pulumi.Bool(false),
    	HostPoolId:                       pulumi.String("string"),
    	ImageSecurityEnforcement:         pulumi.Bool(false),
    	KmsAccountId:                     pulumi.String("string"),
    	KmsConfig: &ibm.ContainerVpcClusterKmsConfigArgs{
    		CrkId:           pulumi.String("string"),
    		InstanceId:      pulumi.String("string"),
    		AccountId:       pulumi.String("string"),
    		PrivateEndpoint: pulumi.Bool(false),
    		WaitForApply:    pulumi.Bool(false),
    	},
    	KmsInstanceId:                pulumi.String("string"),
    	KubeVersion:                  pulumi.String("string"),
    	Name:                         pulumi.String("string"),
    	ContainerVpcClusterId:        pulumi.String("string"),
    	DisablePublicServiceEndpoint: pulumi.Bool(false),
    	PatchVersion:                 pulumi.String("string"),
    	SecondaryStorage:             pulumi.String("string"),
    	RetryPatchVersion:            pulumi.Float64(0),
    	PodSubnet:                    pulumi.String("string"),
    	SecurityGroups: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	ServiceSubnet: pulumi.String("string"),
    	Tags: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Taints: ibm.ContainerVpcClusterTaintArray{
    		&ibm.ContainerVpcClusterTaintArgs{
    			Effect: pulumi.String("string"),
    			Key:    pulumi.String("string"),
    			Value:  pulumi.String("string"),
    		},
    	},
    	Timeouts: &ibm.ContainerVpcClusterTimeoutsArgs{
    		Create: pulumi.String("string"),
    		Delete: pulumi.String("string"),
    		Update: pulumi.String("string"),
    	},
    	UpdateAllWorkers:    pulumi.Bool(false),
    	Crk:                 pulumi.String("string"),
    	WaitForWorkerUpdate: pulumi.Bool(false),
    	WaitTill:            pulumi.String("string"),
    	WorkerCount:         pulumi.Float64(0),
    	WorkerLabels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	CosInstanceCrn: pulumi.String("string"),
    })
    
    var containerVpcClusterResource = new ContainerVpcCluster("containerVpcClusterResource", ContainerVpcClusterArgs.builder()
        .flavor("string")
        .zones(ContainerVpcClusterZoneArgs.builder()
            .name("string")
            .subnetId("string")
            .build())
        .vpcId("string")
        .operatingSystem("string")
        .resourceGroupId("string")
        .enableSecureByDefault(false)
        .entitlement("string")
        .disableOutboundTrafficProtection(false)
        .forceDeleteStorage(false)
        .hostPoolId("string")
        .imageSecurityEnforcement(false)
        .kmsAccountId("string")
        .kmsConfig(ContainerVpcClusterKmsConfigArgs.builder()
            .crkId("string")
            .instanceId("string")
            .accountId("string")
            .privateEndpoint(false)
            .waitForApply(false)
            .build())
        .kmsInstanceId("string")
        .kubeVersion("string")
        .name("string")
        .containerVpcClusterId("string")
        .disablePublicServiceEndpoint(false)
        .patchVersion("string")
        .secondaryStorage("string")
        .retryPatchVersion(0)
        .podSubnet("string")
        .securityGroups("string")
        .serviceSubnet("string")
        .tags("string")
        .taints(ContainerVpcClusterTaintArgs.builder()
            .effect("string")
            .key("string")
            .value("string")
            .build())
        .timeouts(ContainerVpcClusterTimeoutsArgs.builder()
            .create("string")
            .delete("string")
            .update("string")
            .build())
        .updateAllWorkers(false)
        .crk("string")
        .waitForWorkerUpdate(false)
        .waitTill("string")
        .workerCount(0)
        .workerLabels(Map.of("string", "string"))
        .cosInstanceCrn("string")
        .build());
    
    container_vpc_cluster_resource = ibm.ContainerVpcCluster("containerVpcClusterResource",
        flavor="string",
        zones=[{
            "name": "string",
            "subnet_id": "string",
        }],
        vpc_id="string",
        operating_system="string",
        resource_group_id="string",
        enable_secure_by_default=False,
        entitlement="string",
        disable_outbound_traffic_protection=False,
        force_delete_storage=False,
        host_pool_id="string",
        image_security_enforcement=False,
        kms_account_id="string",
        kms_config={
            "crk_id": "string",
            "instance_id": "string",
            "account_id": "string",
            "private_endpoint": False,
            "wait_for_apply": False,
        },
        kms_instance_id="string",
        kube_version="string",
        name="string",
        container_vpc_cluster_id="string",
        disable_public_service_endpoint=False,
        patch_version="string",
        secondary_storage="string",
        retry_patch_version=0,
        pod_subnet="string",
        security_groups=["string"],
        service_subnet="string",
        tags=["string"],
        taints=[{
            "effect": "string",
            "key": "string",
            "value": "string",
        }],
        timeouts={
            "create": "string",
            "delete": "string",
            "update": "string",
        },
        update_all_workers=False,
        crk="string",
        wait_for_worker_update=False,
        wait_till="string",
        worker_count=0,
        worker_labels={
            "string": "string",
        },
        cos_instance_crn="string")
    
    const containerVpcClusterResource = new ibm.ContainerVpcCluster("containerVpcClusterResource", {
        flavor: "string",
        zones: [{
            name: "string",
            subnetId: "string",
        }],
        vpcId: "string",
        operatingSystem: "string",
        resourceGroupId: "string",
        enableSecureByDefault: false,
        entitlement: "string",
        disableOutboundTrafficProtection: false,
        forceDeleteStorage: false,
        hostPoolId: "string",
        imageSecurityEnforcement: false,
        kmsAccountId: "string",
        kmsConfig: {
            crkId: "string",
            instanceId: "string",
            accountId: "string",
            privateEndpoint: false,
            waitForApply: false,
        },
        kmsInstanceId: "string",
        kubeVersion: "string",
        name: "string",
        containerVpcClusterId: "string",
        disablePublicServiceEndpoint: false,
        patchVersion: "string",
        secondaryStorage: "string",
        retryPatchVersion: 0,
        podSubnet: "string",
        securityGroups: ["string"],
        serviceSubnet: "string",
        tags: ["string"],
        taints: [{
            effect: "string",
            key: "string",
            value: "string",
        }],
        timeouts: {
            create: "string",
            "delete": "string",
            update: "string",
        },
        updateAllWorkers: false,
        crk: "string",
        waitForWorkerUpdate: false,
        waitTill: "string",
        workerCount: 0,
        workerLabels: {
            string: "string",
        },
        cosInstanceCrn: "string",
    });
    
    type: ibm:ContainerVpcCluster
    properties:
        containerVpcClusterId: string
        cosInstanceCrn: string
        crk: string
        disableOutboundTrafficProtection: false
        disablePublicServiceEndpoint: false
        enableSecureByDefault: false
        entitlement: string
        flavor: string
        forceDeleteStorage: false
        hostPoolId: string
        imageSecurityEnforcement: false
        kmsAccountId: string
        kmsConfig:
            accountId: string
            crkId: string
            instanceId: string
            privateEndpoint: false
            waitForApply: false
        kmsInstanceId: string
        kubeVersion: string
        name: string
        operatingSystem: string
        patchVersion: string
        podSubnet: string
        resourceGroupId: string
        retryPatchVersion: 0
        secondaryStorage: string
        securityGroups:
            - string
        serviceSubnet: string
        tags:
            - string
        taints:
            - effect: string
              key: string
              value: string
        timeouts:
            create: string
            delete: string
            update: string
        updateAllWorkers: false
        vpcId: string
        waitForWorkerUpdate: false
        waitTill: string
        workerCount: 0
        workerLabels:
            string: string
        zones:
            - name: string
              subnetId: string
    

    ContainerVpcCluster Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ContainerVpcCluster resource accepts the following input properties:

    Flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    VpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    Zones List<ContainerVpcClusterZone>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    ContainerVpcClusterId string
    (String) The ID of the VPC cluster.
    CosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    Crk string
    Root Key ID for boot volume encryption.
    DisableOutboundTrafficProtection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    DisablePublicServiceEndpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    EnableSecureByDefault bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    Entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    ForceDeleteStorage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    HostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    ImageSecurityEnforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    KmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    KmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    KmsInstanceId string
    Instance ID for boot volume encryption.
    KubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    Name string
    The name of the cluster.
    OperatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    PatchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    PodSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    ResourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    RetryPatchVersion double
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    SecondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    SecurityGroups List<string>
    Enables users to define specific security groups for their workers.
    ServiceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    Tags List<string>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    Taints List<ContainerVpcClusterTaint>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    Timeouts ContainerVpcClusterTimeouts
    UpdateAllWorkers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    WaitForWorkerUpdate bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    WaitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    WorkerCount double
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    WorkerLabels Dictionary<string, string>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    Flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    VpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    Zones []ContainerVpcClusterZoneArgs

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    ContainerVpcClusterId string
    (String) The ID of the VPC cluster.
    CosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    Crk string
    Root Key ID for boot volume encryption.
    DisableOutboundTrafficProtection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    DisablePublicServiceEndpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    EnableSecureByDefault bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    Entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    ForceDeleteStorage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    HostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    ImageSecurityEnforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    KmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    KmsConfig ContainerVpcClusterKmsConfigArgs
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    KmsInstanceId string
    Instance ID for boot volume encryption.
    KubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    Name string
    The name of the cluster.
    OperatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    PatchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    PodSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    ResourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    RetryPatchVersion float64
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    SecondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    SecurityGroups []string
    Enables users to define specific security groups for their workers.
    ServiceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    Tags []string
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    Taints []ContainerVpcClusterTaintArgs

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    Timeouts ContainerVpcClusterTimeoutsArgs
    UpdateAllWorkers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    WaitForWorkerUpdate bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    WaitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    WorkerCount float64
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    WorkerLabels map[string]string
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    flavor String
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    vpcId String
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    zones List<ContainerVpcClusterZone>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    containerVpcClusterId String
    (String) The ID of the VPC cluster.
    cosInstanceCrn String
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk String
    Root Key ID for boot volume encryption.
    disableOutboundTrafficProtection Boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint Boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault Boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement String
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    forceDeleteStorage Boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId String
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement Boolean
    Set to true to enable image security enforcement policies in a cluster.
    kmsAccountId String
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId String
    Instance ID for boot volume encryption.
    kubeVersion String
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    name String
    The name of the cluster.
    operatingSystem String
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion String
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    resourceGroupId String
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    retryPatchVersion Double
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage String
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups List<String>
    Enables users to define specific security groups for their workers.
    serviceSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    tags List<String>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints List<ContainerVpcClusterTaint>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeouts
    updateAllWorkers Boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    waitForWorkerUpdate Boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill String
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount Double
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels Map<String,String>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    vpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    zones ContainerVpcClusterZone[]

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    containerVpcClusterId string
    (String) The ID of the VPC cluster.
    cosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk string
    Root Key ID for boot volume encryption.
    disableOutboundTrafficProtection boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    forceDeleteStorage boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement boolean
    Set to true to enable image security enforcement policies in a cluster.
    kmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId string
    Instance ID for boot volume encryption.
    kubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    name string
    The name of the cluster.
    operatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    resourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    retryPatchVersion number
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups string[]
    Enables users to define specific security groups for their workers.
    serviceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    tags string[]
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints ContainerVpcClusterTaint[]

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeouts
    updateAllWorkers boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    waitForWorkerUpdate boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount number
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels {[key: string]: string}
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    flavor str
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    vpc_id str
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    zones Sequence[ContainerVpcClusterZoneArgs]

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    container_vpc_cluster_id str
    (String) The ID of the VPC cluster.
    cos_instance_crn str
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk str
    Root Key ID for boot volume encryption.
    disable_outbound_traffic_protection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disable_public_service_endpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enable_secure_by_default bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement str
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    force_delete_storage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    host_pool_id str
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    image_security_enforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    kms_account_id str
    Account ID for boot volume encryption, if other account is providing the kms.
    kms_config ContainerVpcClusterKmsConfigArgs
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kms_instance_id str
    Instance ID for boot volume encryption.
    kube_version str
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    name str
    The name of the cluster.
    operating_system str
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patch_version str
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    pod_subnet str
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    resource_group_id str
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    retry_patch_version float
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondary_storage str
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    security_groups Sequence[str]
    Enables users to define specific security groups for their workers.
    service_subnet str
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    tags Sequence[str]
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints Sequence[ContainerVpcClusterTaintArgs]

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeoutsArgs
    update_all_workers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    wait_for_worker_update bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    wait_till str
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    worker_count float
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    worker_labels Mapping[str, str]
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    flavor String
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    vpcId String
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    zones List<Property Map>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    containerVpcClusterId String
    (String) The ID of the VPC cluster.
    cosInstanceCrn String
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk String
    Root Key ID for boot volume encryption.
    disableOutboundTrafficProtection Boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint Boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault Boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement String
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    forceDeleteStorage Boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId String
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement Boolean
    Set to true to enable image security enforcement policies in a cluster.
    kmsAccountId String
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig Property Map
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId String
    Instance ID for boot volume encryption.
    kubeVersion String
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    name String
    The name of the cluster.
    operatingSystem String
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion String
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    resourceGroupId String
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    retryPatchVersion Number
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage String
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups List<String>
    Enables users to define specific security groups for their workers.
    serviceSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    tags List<String>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints List<Property Map>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts Property Map
    updateAllWorkers Boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    waitForWorkerUpdate Boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill String
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount Number
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels Map<String>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ContainerVpcCluster resource produces the following output properties:

    Albs List<ContainerVpcClusterAlb>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    Crn string
    (String) The CRN of the VPC cluster.
    Id string
    The provider-assigned unique ID for this managed resource.
    IngressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    IngressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    MasterStatus string
    (String) The status of the Kubernetes master.
    MasterUrl string
    (String) The URL of the Kubernetes master.
    PrivateServiceEndpointUrl string
    (String) The private service endpoint URL.
    PublicServiceEndpointUrl string
    (String) The public service endpoint URL.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    ResourceCrn string
    The crn of the resource
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    ResourceStatus string
    The status of the resource
    State string
    (String) The state of the VPC cluster.
    VpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    Albs []ContainerVpcClusterAlb
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    Crn string
    (String) The CRN of the VPC cluster.
    Id string
    The provider-assigned unique ID for this managed resource.
    IngressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    IngressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    MasterStatus string
    (String) The status of the Kubernetes master.
    MasterUrl string
    (String) The URL of the Kubernetes master.
    PrivateServiceEndpointUrl string
    (String) The private service endpoint URL.
    PublicServiceEndpointUrl string
    (String) The public service endpoint URL.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    ResourceCrn string
    The crn of the resource
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    ResourceStatus string
    The status of the resource
    State string
    (String) The state of the VPC cluster.
    VpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    albs List<ContainerVpcClusterAlb>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    crn String
    (String) The CRN of the VPC cluster.
    id String
    The provider-assigned unique ID for this managed resource.
    ingressHostname String
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret String
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    masterStatus String
    (String) The status of the Kubernetes master.
    masterUrl String
    (String) The URL of the Kubernetes master.
    privateServiceEndpointUrl String
    (String) The private service endpoint URL.
    publicServiceEndpointUrl String
    (String) The public service endpoint URL.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn String
    The crn of the resource
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    resourceStatus String
    The status of the resource
    state String
    (String) The state of the VPC cluster.
    vpeServiceEndpointUrl String
    (String) The virtual private endpoint URL.
    albs ContainerVpcClusterAlb[]
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    crn string
    (String) The CRN of the VPC cluster.
    id string
    The provider-assigned unique ID for this managed resource.
    ingressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    masterStatus string
    (String) The status of the Kubernetes master.
    masterUrl string
    (String) The URL of the Kubernetes master.
    privateServiceEndpointUrl string
    (String) The private service endpoint URL.
    publicServiceEndpointUrl string
    (String) The public service endpoint URL.
    resourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn string
    The crn of the resource
    resourceGroupName string
    The resource group name in which resource is provisioned
    resourceName string
    The name of the resource
    resourceStatus string
    The status of the resource
    state string
    (String) The state of the VPC cluster.
    vpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    albs Sequence[ContainerVpcClusterAlb]
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    crn str
    (String) The CRN of the VPC cluster.
    id str
    The provider-assigned unique ID for this managed resource.
    ingress_hostname str
    (String) The hostname that was assigned to your Ingress subdomain.
    ingress_secret str
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    master_status str
    (String) The status of the Kubernetes master.
    master_url str
    (String) The URL of the Kubernetes master.
    private_service_endpoint_url str
    (String) The private service endpoint URL.
    public_service_endpoint_url str
    (String) The public service endpoint URL.
    resource_controller_url str
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resource_crn str
    The crn of the resource
    resource_group_name str
    The resource group name in which resource is provisioned
    resource_name str
    The name of the resource
    resource_status str
    The status of the resource
    state str
    (String) The state of the VPC cluster.
    vpe_service_endpoint_url str
    (String) The virtual private endpoint URL.
    albs List<Property Map>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    crn String
    (String) The CRN of the VPC cluster.
    id String
    The provider-assigned unique ID for this managed resource.
    ingressHostname String
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret String
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    masterStatus String
    (String) The status of the Kubernetes master.
    masterUrl String
    (String) The URL of the Kubernetes master.
    privateServiceEndpointUrl String
    (String) The private service endpoint URL.
    publicServiceEndpointUrl String
    (String) The public service endpoint URL.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn String
    The crn of the resource
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    resourceStatus String
    The status of the resource
    state String
    (String) The state of the VPC cluster.
    vpeServiceEndpointUrl String
    (String) The virtual private endpoint URL.

    Look up Existing ContainerVpcCluster Resource

    Get an existing ContainerVpcCluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ContainerVpcClusterState, opts?: CustomResourceOptions): ContainerVpcCluster
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            albs: Optional[Sequence[ContainerVpcClusterAlbArgs]] = None,
            container_vpc_cluster_id: Optional[str] = None,
            cos_instance_crn: Optional[str] = None,
            crk: Optional[str] = None,
            crn: Optional[str] = None,
            disable_outbound_traffic_protection: Optional[bool] = None,
            disable_public_service_endpoint: Optional[bool] = None,
            enable_secure_by_default: Optional[bool] = None,
            entitlement: Optional[str] = None,
            flavor: Optional[str] = None,
            force_delete_storage: Optional[bool] = None,
            host_pool_id: Optional[str] = None,
            image_security_enforcement: Optional[bool] = None,
            ingress_hostname: Optional[str] = None,
            ingress_secret: Optional[str] = None,
            kms_account_id: Optional[str] = None,
            kms_config: Optional[ContainerVpcClusterKmsConfigArgs] = None,
            kms_instance_id: Optional[str] = None,
            kube_version: Optional[str] = None,
            master_status: Optional[str] = None,
            master_url: Optional[str] = None,
            name: Optional[str] = None,
            operating_system: Optional[str] = None,
            patch_version: Optional[str] = None,
            pod_subnet: Optional[str] = None,
            private_service_endpoint_url: Optional[str] = None,
            public_service_endpoint_url: Optional[str] = None,
            resource_controller_url: Optional[str] = None,
            resource_crn: Optional[str] = None,
            resource_group_id: Optional[str] = None,
            resource_group_name: Optional[str] = None,
            resource_name: Optional[str] = None,
            resource_status: Optional[str] = None,
            retry_patch_version: Optional[float] = None,
            secondary_storage: Optional[str] = None,
            security_groups: Optional[Sequence[str]] = None,
            service_subnet: Optional[str] = None,
            state: Optional[str] = None,
            tags: Optional[Sequence[str]] = None,
            taints: Optional[Sequence[ContainerVpcClusterTaintArgs]] = None,
            timeouts: Optional[ContainerVpcClusterTimeoutsArgs] = None,
            update_all_workers: Optional[bool] = None,
            vpc_id: Optional[str] = None,
            vpe_service_endpoint_url: Optional[str] = None,
            wait_for_worker_update: Optional[bool] = None,
            wait_till: Optional[str] = None,
            worker_count: Optional[float] = None,
            worker_labels: Optional[Mapping[str, str]] = None,
            zones: Optional[Sequence[ContainerVpcClusterZoneArgs]] = None) -> ContainerVpcCluster
    func GetContainerVpcCluster(ctx *Context, name string, id IDInput, state *ContainerVpcClusterState, opts ...ResourceOption) (*ContainerVpcCluster, error)
    public static ContainerVpcCluster Get(string name, Input<string> id, ContainerVpcClusterState? state, CustomResourceOptions? opts = null)
    public static ContainerVpcCluster get(String name, Output<String> id, ContainerVpcClusterState state, CustomResourceOptions options)
    resources:  _:    type: ibm:ContainerVpcCluster    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Albs List<ContainerVpcClusterAlb>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    ContainerVpcClusterId string
    (String) The ID of the VPC cluster.
    CosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    Crk string
    Root Key ID for boot volume encryption.
    Crn string
    (String) The CRN of the VPC cluster.
    DisableOutboundTrafficProtection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    DisablePublicServiceEndpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    EnableSecureByDefault bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    Entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    Flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    ForceDeleteStorage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    HostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    ImageSecurityEnforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    IngressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    IngressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    KmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    KmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    KmsInstanceId string
    Instance ID for boot volume encryption.
    KubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    MasterStatus string
    (String) The status of the Kubernetes master.
    MasterUrl string
    (String) The URL of the Kubernetes master.
    Name string
    The name of the cluster.
    OperatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    PatchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    PodSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    PrivateServiceEndpointUrl string
    (String) The private service endpoint URL.
    PublicServiceEndpointUrl string
    (String) The public service endpoint URL.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    ResourceCrn string
    The crn of the resource
    ResourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    ResourceStatus string
    The status of the resource
    RetryPatchVersion double
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    SecondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    SecurityGroups List<string>
    Enables users to define specific security groups for their workers.
    ServiceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    State string
    (String) The state of the VPC cluster.
    Tags List<string>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    Taints List<ContainerVpcClusterTaint>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    Timeouts ContainerVpcClusterTimeouts
    UpdateAllWorkers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    VpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    VpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    WaitForWorkerUpdate bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    WaitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    WorkerCount double
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    WorkerLabels Dictionary<string, string>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    Zones List<ContainerVpcClusterZone>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    Albs []ContainerVpcClusterAlbArgs
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    ContainerVpcClusterId string
    (String) The ID of the VPC cluster.
    CosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    Crk string
    Root Key ID for boot volume encryption.
    Crn string
    (String) The CRN of the VPC cluster.
    DisableOutboundTrafficProtection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    DisablePublicServiceEndpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    EnableSecureByDefault bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    Entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    Flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    ForceDeleteStorage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    HostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    ImageSecurityEnforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    IngressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    IngressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    KmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    KmsConfig ContainerVpcClusterKmsConfigArgs
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    KmsInstanceId string
    Instance ID for boot volume encryption.
    KubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    MasterStatus string
    (String) The status of the Kubernetes master.
    MasterUrl string
    (String) The URL of the Kubernetes master.
    Name string
    The name of the cluster.
    OperatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    PatchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    PodSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    PrivateServiceEndpointUrl string
    (String) The private service endpoint URL.
    PublicServiceEndpointUrl string
    (String) The public service endpoint URL.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    ResourceCrn string
    The crn of the resource
    ResourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    ResourceStatus string
    The status of the resource
    RetryPatchVersion float64
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    SecondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    SecurityGroups []string
    Enables users to define specific security groups for their workers.
    ServiceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    State string
    (String) The state of the VPC cluster.
    Tags []string
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    Taints []ContainerVpcClusterTaintArgs

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    Timeouts ContainerVpcClusterTimeoutsArgs
    UpdateAllWorkers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    VpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    VpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    WaitForWorkerUpdate bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    WaitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    WorkerCount float64
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    WorkerLabels map[string]string
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    Zones []ContainerVpcClusterZoneArgs

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    albs List<ContainerVpcClusterAlb>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    containerVpcClusterId String
    (String) The ID of the VPC cluster.
    cosInstanceCrn String
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk String
    Root Key ID for boot volume encryption.
    crn String
    (String) The CRN of the VPC cluster.
    disableOutboundTrafficProtection Boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint Boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault Boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement String
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    flavor String
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    forceDeleteStorage Boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId String
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement Boolean
    Set to true to enable image security enforcement policies in a cluster.
    ingressHostname String
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret String
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    kmsAccountId String
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId String
    Instance ID for boot volume encryption.
    kubeVersion String
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    masterStatus String
    (String) The status of the Kubernetes master.
    masterUrl String
    (String) The URL of the Kubernetes master.
    name String
    The name of the cluster.
    operatingSystem String
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion String
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    privateServiceEndpointUrl String
    (String) The private service endpoint URL.
    publicServiceEndpointUrl String
    (String) The public service endpoint URL.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn String
    The crn of the resource
    resourceGroupId String
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    resourceStatus String
    The status of the resource
    retryPatchVersion Double
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage String
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups List<String>
    Enables users to define specific security groups for their workers.
    serviceSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    state String
    (String) The state of the VPC cluster.
    tags List<String>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints List<ContainerVpcClusterTaint>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeouts
    updateAllWorkers Boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    vpcId String
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    vpeServiceEndpointUrl String
    (String) The virtual private endpoint URL.
    waitForWorkerUpdate Boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill String
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount Double
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels Map<String,String>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    zones List<ContainerVpcClusterZone>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    albs ContainerVpcClusterAlb[]
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    containerVpcClusterId string
    (String) The ID of the VPC cluster.
    cosInstanceCrn string
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk string
    Root Key ID for boot volume encryption.
    crn string
    (String) The CRN of the VPC cluster.
    disableOutboundTrafficProtection boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement string
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    flavor string
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    forceDeleteStorage boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId string
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement boolean
    Set to true to enable image security enforcement policies in a cluster.
    ingressHostname string
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret string
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    kmsAccountId string
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig ContainerVpcClusterKmsConfig
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId string
    Instance ID for boot volume encryption.
    kubeVersion string
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    masterStatus string
    (String) The status of the Kubernetes master.
    masterUrl string
    (String) The URL of the Kubernetes master.
    name string
    The name of the cluster.
    operatingSystem string
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion string
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    privateServiceEndpointUrl string
    (String) The private service endpoint URL.
    publicServiceEndpointUrl string
    (String) The public service endpoint URL.
    resourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn string
    The crn of the resource
    resourceGroupId string
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    resourceGroupName string
    The resource group name in which resource is provisioned
    resourceName string
    The name of the resource
    resourceStatus string
    The status of the resource
    retryPatchVersion number
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage string
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups string[]
    Enables users to define specific security groups for their workers.
    serviceSubnet string
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    state string
    (String) The state of the VPC cluster.
    tags string[]
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints ContainerVpcClusterTaint[]

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeouts
    updateAllWorkers boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    vpcId string
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    vpeServiceEndpointUrl string
    (String) The virtual private endpoint URL.
    waitForWorkerUpdate boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill string
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount number
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels {[key: string]: string}
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    zones ContainerVpcClusterZone[]

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    albs Sequence[ContainerVpcClusterAlbArgs]
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    container_vpc_cluster_id str
    (String) The ID of the VPC cluster.
    cos_instance_crn str
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk str
    Root Key ID for boot volume encryption.
    crn str
    (String) The CRN of the VPC cluster.
    disable_outbound_traffic_protection bool
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disable_public_service_endpoint bool
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enable_secure_by_default bool

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement str
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    flavor str
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    force_delete_storage bool
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    host_pool_id str
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    image_security_enforcement bool
    Set to true to enable image security enforcement policies in a cluster.
    ingress_hostname str
    (String) The hostname that was assigned to your Ingress subdomain.
    ingress_secret str
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    kms_account_id str
    Account ID for boot volume encryption, if other account is providing the kms.
    kms_config ContainerVpcClusterKmsConfigArgs
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kms_instance_id str
    Instance ID for boot volume encryption.
    kube_version str
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    master_status str
    (String) The status of the Kubernetes master.
    master_url str
    (String) The URL of the Kubernetes master.
    name str
    The name of the cluster.
    operating_system str
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patch_version str
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    pod_subnet str
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    private_service_endpoint_url str
    (String) The private service endpoint URL.
    public_service_endpoint_url str
    (String) The public service endpoint URL.
    resource_controller_url str
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resource_crn str
    The crn of the resource
    resource_group_id str
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    resource_group_name str
    The resource group name in which resource is provisioned
    resource_name str
    The name of the resource
    resource_status str
    The status of the resource
    retry_patch_version float
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondary_storage str
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    security_groups Sequence[str]
    Enables users to define specific security groups for their workers.
    service_subnet str
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    state str
    (String) The state of the VPC cluster.
    tags Sequence[str]
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints Sequence[ContainerVpcClusterTaintArgs]

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts ContainerVpcClusterTimeoutsArgs
    update_all_workers bool
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    vpc_id str
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    vpe_service_endpoint_url str
    (String) The virtual private endpoint URL.
    wait_for_worker_update bool
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    wait_till str
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    worker_count float
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    worker_labels Mapping[str, str]
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    zones Sequence[ContainerVpcClusterZoneArgs]

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    albs List<Property Map>
    (List of Objects) A list of Application Load Balancers (ALBs) that are attached to the cluster.
    containerVpcClusterId String
    (String) The ID of the VPC cluster.
    cosInstanceCrn String
    Required for OpenShift clusters only. The standard IBM Cloud Object Storage instance CRN to back up the internal registry in your OpenShift on VPC Generation 2 cluster.
    crk String
    Root Key ID for boot volume encryption.
    crn String
    (String) The CRN of the VPC cluster.
    disableOutboundTrafficProtection Boolean
    Include this option to allow public outbound access from the cluster workers. By default, public outbound access is blocked in OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.
    disablePublicServiceEndpoint Boolean
    Disable the public service endpoint to prevent public access to the Kubernetes master. Default value is false.
    enableSecureByDefault Boolean

    Enables Secure-by-default security group configuration. Once the upgrade begins, it cannot be undone. During the upgrade, network traffic to your cluster may temporarily be blocked. This option is usable only from OpenShift versions 4.15 and later and Kubernetes versions 1.30 and later.

    Note

    1. For users on account to add tags to a resource, you need to assign the right access. For more information, about tags, see Tags permission.
    2. wait_till is set only for the first time creation of the resource, further modification are not impacted.
    entitlement String
    Entitlement reduces additional OCP Licence cost in OpenShift clusters. Use Cloud Pak with OCP Licence entitlement to create the OpenShift cluster. Note It is set only when the first time creation of the cluster, further modifications are not impacted. Set this argument to cloud_pak only if you use the cluster with a Cloud Pak that has an OpenShift entitlement..
    flavor String
    The flavor of the VPC worker nodes in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    forceDeleteStorage Boolean
    Force the removal of a cluster and its persistent storage. Deleted data cannot be recovered
    hostPoolId String
    If provided, the cluster will be associated with a dedicated host pool identified by this ID.
    imageSecurityEnforcement Boolean
    Set to true to enable image security enforcement policies in a cluster.
    ingressHostname String
    (String) The hostname that was assigned to your Ingress subdomain.
    ingressSecret String
    (String) The name of the Ingress secret that was created for you and that the Ingress subdomain uses.
    kmsAccountId String
    Account ID for boot volume encryption, if other account is providing the kms.
    kmsConfig Property Map
    Use to attach a Key Protect instance to a cluster. Nested kms_config block has an instance_id, crk_id, private_endpoint and account_id.
    kmsInstanceId String
    Instance ID for boot volume encryption.
    kubeVersion String
    Specify the Kubernetes version, including the major.minor version. If you do not include this flag, the default version is used. To see available versions, run ibmcloud ks versions.
    masterStatus String
    (String) The status of the Kubernetes master.
    masterUrl String
    (String) The URL of the Kubernetes master.
    name String
    The name of the cluster.
    operatingSystem String
    The operating system of the workers in the default worker pool. For supported options, see Red Hat OpenShift on IBM Cloud version information or IBM Cloud Kubernetes Service version information. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    patchVersion String
    Updates the worker nodes with the required patch version. The patch_version should be in the format: patch_version_fixpack_version. For more information, about Kubernetes version information and update, see Kubernetes version update. Note To update the patch or fix pack versions of the worker nodes, run the command ibmcloud ks workers -c <cluster_name_or_id> output json. Fetch the required patch & fix pack versions from kubeVersion.target and set the patch_version parameter.
    podSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for pods. The subnet must have a CIDR of at least /23 or larger. For more information, see the documentation. Default value is 172.30.0.0/16.
    privateServiceEndpointUrl String
    (String) The private service endpoint URL.
    publicServiceEndpointUrl String
    (String) The public service endpoint URL.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this cluster
    resourceCrn String
    The crn of the resource
    resourceGroupId String
    The ID of the resource group. You can retrieve the value by running ibmcloud resource groups or by using the ibm.ResourceGroup data source. If no value is provided, the default resource group is used.
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    resourceStatus String
    The status of the resource
    retryPatchVersion Number
    This argument retries the update of patch_version if the previous update fails. Increment the value to retry the update of patch_version on worker nodes.
    secondaryStorage String
    The secondary storage option for the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    securityGroups List<String>
    Enables users to define specific security groups for their workers.
    serviceSubnet String
    Specify a custom subnet CIDR to provide private IP addresses for services. The subnet must be at least ’/24’ or larger. For more information, see the documentation. Default value is 172.21.0.0/16.
    state String
    (String) The state of the VPC cluster.
    tags List<String>
    A list of tags that you want to associate with your VPC cluster. Note For users on account to add tags to a resource, they must be assigned the [appropriate permissions]/docs/account?topic=account-access).
    taints List<Property Map>

    A nested block that sets or removes Kubernetes taints for all worker nodes in a worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for taints:

    timeouts Property Map
    updateAllWorkers Boolean
    Set to true, if you want to update workers Kubernetes version with the cluster kube_version.
    vpcId String
    The ID of the VPC that you want to use for your cluster. To list available VPCs, run ibmcloud is vpcs.
    vpeServiceEndpointUrl String
    (String) The virtual private endpoint URL.
    waitForWorkerUpdate Boolean
    Set to true to wait and update the Kubernetes version of worker nodes. NOTE Setting wait_for_worker_update to false is not recommended. Setting false results in upgrading all the worker nodes in the cluster at the same time causing the cluster downtime.
    waitTill String
    wait_till can be configured for Master Ready, One worker Ready, Ingress Ready or Normal
    workerCount Number
    The number of worker nodes per zone in the default worker pool. Default value 1. Note If the requested number of worker nodes is fewer than the minimum 2 worker nodes that are required for an OpenShift cluster, cluster creation will be rejected. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    workerLabels Map<String>
    Labels on all the workers in the default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.
    zones List<Property Map>

    A nested block describes the zones of this VPC cluster's default worker pool. This field only affects cluster creation, to manage the default worker pool, create a dedicated worker pool resource.

    Nested scheme for zones:

    Supporting Types

    ContainerVpcClusterAlb, ContainerVpcClusterAlbArgs

    AlbType string
    (String) The ALB type. Valid values are public or private.
    DisableDeployment bool
    (Bool) Indicate whether to disable the deployment of the ALB.
    Enable bool
    (Bool) Enable (true) or disable (false) the ALB.
    Id string
    (String) The ID of the VPC cluster.
    LoadBalancerHostname string
    (String) The host name of the ALB.
    Name string
    The name of the cluster.
    Resize bool
    (Bool) Indicates whether resizing should be done.
    State string
    (String) The state of the VPC cluster.
    AlbType string
    (String) The ALB type. Valid values are public or private.
    DisableDeployment bool
    (Bool) Indicate whether to disable the deployment of the ALB.
    Enable bool
    (Bool) Enable (true) or disable (false) the ALB.
    Id string
    (String) The ID of the VPC cluster.
    LoadBalancerHostname string
    (String) The host name of the ALB.
    Name string
    The name of the cluster.
    Resize bool
    (Bool) Indicates whether resizing should be done.
    State string
    (String) The state of the VPC cluster.
    albType String
    (String) The ALB type. Valid values are public or private.
    disableDeployment Boolean
    (Bool) Indicate whether to disable the deployment of the ALB.
    enable Boolean
    (Bool) Enable (true) or disable (false) the ALB.
    id String
    (String) The ID of the VPC cluster.
    loadBalancerHostname String
    (String) The host name of the ALB.
    name String
    The name of the cluster.
    resize Boolean
    (Bool) Indicates whether resizing should be done.
    state String
    (String) The state of the VPC cluster.
    albType string
    (String) The ALB type. Valid values are public or private.
    disableDeployment boolean
    (Bool) Indicate whether to disable the deployment of the ALB.
    enable boolean
    (Bool) Enable (true) or disable (false) the ALB.
    id string
    (String) The ID of the VPC cluster.
    loadBalancerHostname string
    (String) The host name of the ALB.
    name string
    The name of the cluster.
    resize boolean
    (Bool) Indicates whether resizing should be done.
    state string
    (String) The state of the VPC cluster.
    alb_type str
    (String) The ALB type. Valid values are public or private.
    disable_deployment bool
    (Bool) Indicate whether to disable the deployment of the ALB.
    enable bool
    (Bool) Enable (true) or disable (false) the ALB.
    id str
    (String) The ID of the VPC cluster.
    load_balancer_hostname str
    (String) The host name of the ALB.
    name str
    The name of the cluster.
    resize bool
    (Bool) Indicates whether resizing should be done.
    state str
    (String) The state of the VPC cluster.
    albType String
    (String) The ALB type. Valid values are public or private.
    disableDeployment Boolean
    (Bool) Indicate whether to disable the deployment of the ALB.
    enable Boolean
    (Bool) Enable (true) or disable (false) the ALB.
    id String
    (String) The ID of the VPC cluster.
    loadBalancerHostname String
    (String) The host name of the ALB.
    name String
    The name of the cluster.
    resize Boolean
    (Bool) Indicates whether resizing should be done.
    state String
    (String) The state of the VPC cluster.

    ContainerVpcClusterKmsConfig, ContainerVpcClusterKmsConfigArgs

    CrkId string
    ID of the customer root key.
    InstanceId string
    ID of the KMS instance to use to encrypt the cluster.
    AccountId string
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    PrivateEndpoint bool
    Specify this option to use the KMS public service endpoint.
    WaitForApply bool
    CrkId string
    ID of the customer root key.
    InstanceId string
    ID of the KMS instance to use to encrypt the cluster.
    AccountId string
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    PrivateEndpoint bool
    Specify this option to use the KMS public service endpoint.
    WaitForApply bool
    crkId String
    ID of the customer root key.
    instanceId String
    ID of the KMS instance to use to encrypt the cluster.
    accountId String
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    privateEndpoint Boolean
    Specify this option to use the KMS public service endpoint.
    waitForApply Boolean
    crkId string
    ID of the customer root key.
    instanceId string
    ID of the KMS instance to use to encrypt the cluster.
    accountId string
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    privateEndpoint boolean
    Specify this option to use the KMS public service endpoint.
    waitForApply boolean
    crk_id str
    ID of the customer root key.
    instance_id str
    ID of the KMS instance to use to encrypt the cluster.
    account_id str
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    private_endpoint bool
    Specify this option to use the KMS public service endpoint.
    wait_for_apply bool
    crkId String
    ID of the customer root key.
    instanceId String
    ID of the KMS instance to use to encrypt the cluster.
    accountId String
    Account ID of KMS instance holder - if not provided, defaults to the account in use
    privateEndpoint Boolean
    Specify this option to use the KMS public service endpoint.
    waitForApply Boolean

    ContainerVpcClusterTaint, ContainerVpcClusterTaintArgs

    Effect string
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    Key string
    Key for taint.
    Value string
    Value for taint.
    Effect string
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    Key string
    Key for taint.
    Value string
    Value for taint.
    effect String
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    key String
    Key for taint.
    value String
    Value for taint.
    effect string
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    key string
    Key for taint.
    value string
    Value for taint.
    effect str
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    key str
    Key for taint.
    value str
    Value for taint.
    effect String
    Effect for taint. Accepted values are NoSchedule, PreferNoSchedule, and NoExecute.
    key String
    Key for taint.
    value String
    Value for taint.

    ContainerVpcClusterTimeouts, ContainerVpcClusterTimeoutsArgs

    Create string
    Delete string
    Update string
    Create string
    Delete string
    Update string
    create String
    delete String
    update String
    create string
    delete string
    update string
    create str
    delete str
    update str
    create String
    delete String
    update String

    ContainerVpcClusterZone, ContainerVpcClusterZoneArgs

    Name string
    The zone name for the default worker pool in a multizone cluster.
    SubnetId string
    The VPC subnet to assign the cluster's default worker pool.
    Name string
    The zone name for the default worker pool in a multizone cluster.
    SubnetId string
    The VPC subnet to assign the cluster's default worker pool.
    name String
    The zone name for the default worker pool in a multizone cluster.
    subnetId String
    The VPC subnet to assign the cluster's default worker pool.
    name string
    The zone name for the default worker pool in a multizone cluster.
    subnetId string
    The VPC subnet to assign the cluster's default worker pool.
    name str
    The zone name for the default worker pool in a multizone cluster.
    subnet_id str
    The VPC subnet to assign the cluster's default worker pool.
    name String
    The zone name for the default worker pool in a multizone cluster.
    subnetId String
    The VPC subnet to assign the cluster's default worker pool.

    Import

    The ibm_container_vpc_cluster can be imported by using the cluster ID.

    Example

    $ pulumi import ibm:index/containerVpcCluster:ContainerVpcCluster cluster aaaaaaaaa1a1a1a1aaa1a
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud