Enum LinuxNodeConfig.NodeKernelModuleLoading.Policy (2.81.0)

public enum LinuxNodeConfig.NodeKernelModuleLoading.Policy extends Enum<LinuxNodeConfig.NodeKernelModuleLoading.Policy> implements ProtocolMessageEnum

Defines the kernel module loading policy for nodes in the nodepool.

Protobuf enum google.container.v1beta1.LinuxNodeConfig.NodeKernelModuleLoading.Policy

Implements

ProtocolMessageEnum

Static Fields

Name Description
DO_NOT_ENFORCE_SIGNED_MODULES

Mirrors existing DEFAULT behavior: For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.

DO_NOT_ENFORCE_SIGNED_MODULES = 2;

DO_NOT_ENFORCE_SIGNED_MODULES_VALUE

Mirrors existing DEFAULT behavior: For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.

DO_NOT_ENFORCE_SIGNED_MODULES = 2;

ENFORCE_SIGNED_MODULES

Enforced signature verification: Node pools will use a Container-Optimized OS image configured to allow loading of Google-signed external kernel modules. Loadpin is enabled but configured to exclude modules, and kernel module signature checking is enforced.

ENFORCE_SIGNED_MODULES = 1;

ENFORCE_SIGNED_MODULES_VALUE

Enforced signature verification: Node pools will use a Container-Optimized OS image configured to allow loading of Google-signed external kernel modules. Loadpin is enabled but configured to exclude modules, and kernel module signature checking is enforced.

ENFORCE_SIGNED_MODULES = 1;

POLICY_UNSPECIFIED

Default behavior. GKE selects the image based on node type. For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.

POLICY_UNSPECIFIED = 0;

POLICY_UNSPECIFIED_VALUE

Default behavior. GKE selects the image based on node type. For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.

POLICY_UNSPECIFIED = 0;

UNRECOGNIZED

Static Methods

Name Description
forNumber(int value)
getDescriptor()
internalGetValueMap()
valueOf(Descriptors.EnumValueDescriptor desc)
valueOf(int value)

Deprecated. Use #forNumber(int) instead.

valueOf(String name)
values()

Methods

Name Description
getDescriptorForType()
getNumber()
getValueDescriptor()