Cluster.spec.clusterAgentDeploymentCustomization.overrideAffinity.podAntiAffinity.spec
Spec is the desired state of the cluster.
| Field / Type | Description |
|---|---|
AgentEnvVars is a list of environment variables that will be set on the cluster agent deployment and system agent service.
| |
cloudCredentialSecretName | CloudCredentialSecretName is the id of the secret used to provision the cluster. This field must be in the format of "namespace:name".
|
ClusterAPIConfig is unused. Deprecated: this field is unused and will be removed in a future version.
| |
ClusterAgentDeploymentCustomization is the customization configuration to apply to the cluster agent deployment.
| |
defaultClusterRoleForProjectMembers | DefaultClusterRoleForProjectMembers is unused. Deprecated: this field is unused and will be removed in a future version.
|
defaultPodSecurityAdmissionConfigurationTemplateName | DefaultPodSecurityAdmissionConfigurationTemplateName is the name of the default psact to use when generating a pod security admissions config file for the cluster. The rancher-webhook will generate a secret containing the rendered AdmissionConfiguration resource as yaml, and create a machineSelectorFile at /etc/rancher/k3s/config/rancher-psact.yaml or /etc/rancher/rke2/config/rancher-psact.yaml for K3s and RKE2 respectively.
|
enableNetworkPolicy | EnableNetworkPolicy defines whether project network isolation is enabled, preventing inter-project communication. It can be used with any network plugin that supports Kubernetes NetworkPolicy enforcement (e.g. canal, calico, cilium). Host network policies are only configured for RKE2 clusters using Calico; other CNIs apply host network policies using pod CIDRs.
|
FleetAgentDeploymentCustomization is the customization configuration to apply to the fleet agent deployment.
| |
kubernetesVersion | KubernetesVersion is the desired version of RKE2/K3s for the cluster. This field is only populated for provisioned and custom clusters.
|
LocalClusterAuthEndpoint is the configuration for the local cluster auth endpoint. | |
redeploySystemAgentGeneration | RedeploySystemAgentGeneration is used to force the redeployment of the system agent via the system-upgrade controller's system-agent-upgrader plan. NOTE: The cluster-agent must be connected to the Rancher server so the Rancher server can update the system-upgrade-controller plan.
|
RKEConfig represents the desired state for machine configuration and day 2 operations. NOTE: This is only populated for provisioned and custom clusters.
| |
WebhookDeploymentCustomization is the customization configuration to apply to the rancher-webhook deployment on this cluster.
|