You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/installation-configuration-parameters.adoc
+72-40Lines changed: 72 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -823,176 +823,195 @@ ifdef::aws[]
823
823
Optional AWS configuration parameters are described in the following table:
824
824
825
825
.Optional AWS parameters
826
-
[cols=".^2l,.^3,.^5a",options="header"]
826
+
[cols=".^l,.^a",options="header"]
827
827
|====
828
-
|Parameter|Description|Values
828
+
|Parameter|Description
829
829
830
830
|compute:
831
831
platform:
832
832
aws:
833
833
amiID:
834
834
|The AWS AMI used to boot compute machines for the cluster. This is required for regions that require a custom {op-system} AMI.
835
-
|Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
835
+
836
+
*Value:* Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
836
837
837
838
|compute:
838
839
platform:
839
840
aws:
840
841
iamProfile:
841
842
|The name of the IAM instance profile that you use for the machine. If you want the installation program to create the IAM instance profile for you, do not use the `iamProfile` parameter. You can specify either the `iamProfile` or `iamRole` parameter, but you cannot specify both.
842
-
|String
843
+
844
+
*Value:* String
843
845
844
846
|compute:
845
847
platform:
846
848
aws:
847
849
iamRole:
848
850
|The name of the IAM instance role that you use for the machine. When you specify an IAM role, the installation program creates an instance profile. If you want the installation program to create the IAM instance role for you, do not select the `iamRole` parameter. You can specify either the `iamRole` or `iamProfile` parameter, but you cannot specify both.
849
-
|String
851
+
852
+
*Value:* String
850
853
851
854
|compute:
852
855
platform:
853
856
aws:
854
857
rootVolume:
855
858
iops:
856
859
|The Input/Output Operations Per Second (IOPS) that is reserved for the root volume.
*Value:* Valid link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html[AWS EBS volume type], such as `io1`.
875
880
876
881
|compute:
877
882
platform:
878
883
aws:
879
884
rootVolume:
880
885
kmsKeyARN:
881
886
|The Amazon Resource Name (key ARN) of a KMS key. This is required to encrypt operating system volumes of worker nodes with a specific KMS key.
882
-
|Valid link:https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html[key ID or the key ARN].
887
+
888
+
*Value:* Valid link:https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html[key ID or the key ARN].
883
889
884
890
|compute:
885
891
platform:
886
892
aws:
887
893
type:
888
894
|The EC2 instance type for the compute machines.
889
-
|Valid {aws-short} instance type, such as `m4.2xlarge`. See the "Tested instance types for AWS" table on the "Installing a cluster on AWS with customizations" page.
895
+
896
+
*Value:* Valid {aws-short} instance type, such as `m4.2xlarge`. See the "Tested instance types for AWS" table on the "Installing a cluster on AWS with customizations" page.
890
897
891
898
|compute:
892
899
platform:
893
900
aws:
894
901
zones:
895
902
|The availability zones where the installation program creates machines for the compute machine pool. If you provide your own VPC, you must provide a subnet in that availability zone.
896
-
|A list of valid AWS availability zones, such as `us-east-1c`, in a
*Value:* A list of valid AWS availability zones, such as `us-east-1c`, in a link:https://yaml.org/spec/1.2/spec.html#sequence//[YAML sequence].
898
905
899
906
|controlPlane:
900
907
platform:
901
908
aws:
902
909
amiID:
903
910
|The AWS AMI used to boot control plane machines for the cluster. This is required for regions that require a custom {op-system} AMI.
904
-
|Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
911
+
912
+
*Value:* Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
905
913
906
914
|controlPlane:
907
915
platform:
908
916
aws:
909
917
iamProfile:
910
918
|The name of the IAM instance profile that you use for the machine. If you want the installation program to create the IAM instance profile for you, do not use the `iamProfile` parameter. You can specify either the `iamProfile` or `iamRole` parameter, but you cannot specify both.
911
-
|String
919
+
920
+
*Value:* String
912
921
913
922
|controlPlane:
914
923
platform:
915
924
aws:
916
925
iamRole:
917
926
|The name of the IAM instance role that you use for the machine. When you specify an IAM role, the installation program creates an instance profile. If you want the installation program to create the IAM instance role for you, do not use the `iamRole` parameter. You can specify either the `iamRole` or `iamProfile` parameter, but you cannot specify both.
918
-
|String
927
+
928
+
*Value:* String
919
929
920
930
|controlPlane:
921
931
platform:
922
932
aws:
923
933
rootVolume:
924
934
iops:
925
935
|The Input/Output Operations Per Second (IOPS) that is reserved for the root volume on control plane machines.
926
-
|Integer, for example `4000`.
936
+
937
+
*Value:* Integer, for example `4000`.
927
938
928
939
|controlPlane:
929
940
platform:
930
941
aws:
931
942
rootVolume:
932
943
size:
933
944
|The size in GiB of the root volume for control plane machines.
934
-
|Integer, for example `500`.
945
+
946
+
*Value:* Integer, for example `500`.
935
947
936
948
|controlPlane:
937
949
platform:
938
950
aws:
939
951
rootVolume:
940
952
type:
941
953
|The type of the root volume for control plane machines.
*Value:* Valid link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html[AWS EBS volume type], such as `io1`.
944
956
945
957
|controlPlane:
946
958
platform:
947
959
aws:
948
960
rootVolume:
949
961
kmsKeyARN:
950
962
|The Amazon Resource Name (key ARN) of a KMS key. This is required to encrypt operating system volumes of control plane nodes with a specific KMS key.
951
-
|Valid link:https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html[key ID and the key ARN].
963
+
964
+
*Value:* Valid link:https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html[key ID and the key ARN].
952
965
953
966
|controlPlane:
954
967
platform:
955
968
aws:
956
969
type:
957
970
|The EC2 instance type for the control plane machines.
958
-
|Valid {aws-short} instance type, such as `m6i.xlarge`. See the "Tested instance types for AWS" table on the "Installing a cluster on AWS with customizations" page.
971
+
972
+
*Value:* Valid {aws-short} instance type, such as `m6i.xlarge`. See the "Tested instance types for AWS" table on the "Installing a cluster on AWS with customizations" page.
959
973
960
974
|controlPlane:
961
975
platform:
962
976
aws:
963
977
zones:
964
-
|The availability zones where the installation program creates machines for the
965
-
control plane machine pool.
966
-
|A list of valid AWS availability zones, such as `us-east-1c`, in a link:https://yaml.org/spec/1.2/spec.html#sequence//[YAML sequence].
978
+
|The availability zones where the installation program creates machines for the control plane machine pool.
979
+
980
+
*Value:* A list of valid AWS availability zones, such as `us-east-1c`, in a link:https://yaml.org/spec/1.2/spec.html#sequence//[YAML sequence].
967
981
968
982
|platform:
969
983
aws:
970
984
amiID:
971
-
|The AWS AMI used to boot all machines for the cluster. If set, the AMI must
972
-
belong to the same region as the cluster. This is required for regions that require a custom {op-system} AMI.
973
-
|Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
985
+
|The AWS AMI used to boot all machines for the cluster. If set, the AMI must belong to the same region as the cluster. This is required for regions that require a custom {op-system} AMI.
986
+
987
+
*Value:* Any published or custom {op-system} AMI that belongs to the set AWS region. See _{op-system} AMIs for AWS infrastructure_ for available AMI IDs.
974
988
975
989
|platform:
976
990
aws:
977
991
hostedZone:
978
992
|An existing Route 53 private hosted zone for the cluster. You can only use a pre-existing hosted zone when also supplying your own VPC. The hosted zone must already be associated with the user-provided VPC before installation. Also, the domain of the hosted zone must be the cluster domain or a parent of the cluster domain. If undefined, the installation program creates a new hosted zone.
979
-
|String, for example `Z3URY6TWQ91KVV`.
993
+
994
+
*Value:* String, for example `Z3URY6TWQ91KVV`.
980
995
981
996
|platform:
982
997
aws:
983
998
hostedZoneRole:
984
999
|An Amazon Resource Name (ARN) for an existing IAM role in the account containing the specified hosted zone. The installation program and cluster operators assume this role when performing operations on the hosted zone. Use this parameter only when you are installing a cluster into a shared VPC.
985
-
|String, for example `arn:aws:iam::1234567890:role/shared-vpc-role`.
1000
+
1001
+
*Value:* String, for example `arn:aws:iam::1234567890:role/shared-vpc-role`.
986
1002
987
1003
|platform:
988
1004
aws:
989
1005
region:
990
1006
|The AWS region that the installation program creates all cluster resources in.
991
-
|Any valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS region], such as `us-east-1`. You can use the AWS CLI to access the regions available based on your selected instance type by running the following command:
1007
+
1008
+
*Value:* Any valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS region], such as `us-east-1`. You can use the AWS CLI to access the regions available based on your selected instance type by running the following command:
|The AWS service endpoint name and URL. Custom endpoints are only required for cases where alternative AWS endpoints, such as FIPS, must be used. Custom API endpoints can be specified for EC2, S3, IAM, Elastic Load Balancing, Tagging, Route 53, and STS AWS services.
1009
-
|Valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS service endpoint] name and valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS service endpoint] URL.
1028
+
1029
+
*Value:* Valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS service endpoint] name and valid link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS service endpoint] URL.
1010
1030
1011
1031
|platform:
1012
1032
aws:
1013
1033
userTags:
1014
1034
|A map of keys and values that the installation program adds as tags to all resources that it creates.
1015
-
|Any valid YAML map, such as key value pairs in the `<key>: <value>` format. For more information about AWS tags, see link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html[Tagging Your Amazon EC2 Resources] in the AWS documentation.
1035
+
1036
+
*Value:* Any valid YAML map, such as key value pairs in the `<key>: <value>` format. For more information about AWS tags, see link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html[Tagging Your Amazon EC2 Resources] in the AWS documentation.
1016
1037
1017
1038
[NOTE]
1018
1039
====
@@ -1022,14 +1043,16 @@ You can add up to 25 user-defined tags during installation. The remaining 25 tag
1022
1043
|platform:
1023
1044
aws:
1024
1045
propagateUserTags:
1025
-
| A flag that directs in-cluster Operators to include the specified user tags in the tags of the AWS resources that the Operators create.
1026
-
| Boolean values, for example `true` or `false`.
1046
+
|A flag that directs in-cluster Operators to include the specified user tags in the tags of the AWS resources that the Operators create.
1047
+
1048
+
*Value:* Boolean values, for example `true` or `false`.
1027
1049
1028
1050
|platform:
1029
1051
aws:
1030
1052
publicIpv4Pool:
1031
1053
|The public IPv4 pool ID that is used to allocate Elastic IPs (EIPs) when `publish` is set to `External`. You must provision and advertise the pool in the same {aws-short} account and region of the cluster. You must ensure that you have 2n + 1 IPv4 addresses available in the pool where _n_ is the total number of {aws-short} zones used to deploy the Network Load Balancer (NLB) for API, NAT gateways, and bootstrap node. For more information about bring your own IP addresses (BYOIP) in {aws-short}, see link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#byoip-onboard[Onboard your BYOIP].
1032
-
| A valid link:https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-public-ipv4-pools.html[public IPv4 pool id]
1054
+
1055
+
*Value:* A valid link:https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-public-ipv4-pools.html[public IPv4 pool id]
1033
1056
1034
1057
[NOTE]
1035
1058
====
@@ -1040,26 +1063,33 @@ You can enable BYOIP only for customized installations that do not have any netw
1040
1063
aws:
1041
1064
preserveBootstrapIgnition:
1042
1065
|Prevents the S3 bucket from being deleted after completion of bootstrapping.
1043
-
|`true` or `false`. The default value is `false`, which results in the S3 bucket being deleted.
1066
+
1067
+
*Value:* `true` or `false`. The default value is `false`, which results in the S3 bucket being deleted.
1044
1068
1045
1069
|platform:
1046
1070
aws:
1047
1071
vpc:
1048
1072
subnets:
1049
1073
|A list of subnets in an existing VPC to be used in place of automatically created subnets. You specify a subnet by providing the subnet ID and an optional list of roles that apply to that subnet. If you specify subnet IDs but do not specify roles for any subnet, the subnets' roles are decided automatically. If you do not specify any roles, you must ensure that any other subnets in your VPC have the `kubernetes.io/cluster/.*: .*` or `kubernetes.io/cluster/unmanaged: true` tags.
1074
+
1050
1075
The subnets must be part of the same `machineNetwork[].cidr` ranges that you specify.
1076
+
1051
1077
For a public cluster, specify a public and a private subnet for each availability zone.
1078
+
1052
1079
For a private cluster, specify a private subnet for each availability zone.
1080
+
1053
1081
For clusters that use AWS Local Zones, you must add AWS Local Zone subnets to this list to ensure edge machine pool creation.
1054
-
|List of pairs of `id` and `roles` parameters.
1082
+
1083
+
*Value:* List of pairs of `id` and `roles` parameters.
1055
1084
1056
1085
|platform:
1057
1086
aws:
1058
1087
vpc:
1059
1088
subnets:
1060
1089
- id:
1061
1090
|The ID of an existing subnet to be used in place of a subnet created by the installation program.
1062
-
|String. The subnet ID must be a unique ID containing only alphanumeric characters, beginning with "subnet-". The ID must be exactly 24 characters long.
1091
+
1092
+
*Value:* String. The subnet ID must be a unique ID containing only alphanumeric characters, beginning with "subnet-". The ID must be exactly 24 characters long.
1063
1093
1064
1094
|platform:
1065
1095
aws:
@@ -1069,8 +1099,10 @@ For clusters that use AWS Local Zones, you must add AWS Local Zone subnets to th
1069
1099
roles:
1070
1100
- type:
1071
1101
|One or more roles that apply to the subnet specified by `platform.aws.vpc.subnets.id`. If you specify a role for any subnet, each subnet must have at least one assigned role, and the `ClusterNode`, `IngressControllerLB`, `ControlPlaneExternalLB`, `BootstrapNode`, and `ControlPlaneInternalLB` roles must be assigned to at least one subnet. However, if the cluster scope is internal, then the `ControlPlaneExternalLB` role is not required.
1102
+
1072
1103
You can only assign the `EdgeNode` role to subnets in {aws-short} Local Zones.
1073
-
|List of one or more role types. Valid values include `ClusterNode`, `EdgeNode`, `BootstrapNode`, `IngressControllerLB`, `ControlPlaneExternalLB`, and `ControlPlaneInternalLB`.
1104
+
1105
+
*Value:* List of one or more role types. Valid values include `ClusterNode`, `EdgeNode`, `BootstrapNode`, `IngressControllerLB`, `ControlPlaneExternalLB`, and `ControlPlaneInternalLB`.
0 commit comments