Module Google::Cloud::Container::V1beta1::WorkloadMetadataConfig::NodeMetadata (v0.8.3)

Version 0.8.3

• 0.44.0 (latest)
• 0.43.0
• 0.42.1
• 0.41.0
• 0.40.1
• 0.39.0
• 0.38.0
• 0.37.0
• 0.36.0
• 0.35.0
• 0.34.3
• 0.33.0
• 0.32.0
• 0.31.0
• 0.30.0
• 0.29.0
• 0.28.0
• 0.27.0
• 0.26.0
• 0.25.0
• 0.24.0
• 0.23.0
• 0.22.0
• 0.21.1
• 0.20.0
• 0.19.0
• 0.18.0
• 0.17.0
• 0.16.3
• 0.15.0
• 0.14.0
• 0.13.0
• 0.12.0
• 0.11.0
• 0.10.1
• 0.9.0
• 0.8.3

NodeMetadata is the configuration for if and how to expose the node metadata to the workload running on the node.

Constants

UNSPECIFIED

value: 0
Not set.

SECURE

value: 1
Prevent workloads not in hostNetwork from accessing certain VM metadata, specifically kube-env, which contains Kubelet credentials, and the instance identity token.

Metadata concealment is a temporary security solution available while the bootstrapping process for cluster nodes is being redesigned with significant security improvements. This feature is scheduled to be deprecated in the future and later removed.

EXPOSE

value: 2
Expose all VM metadata to pods.

GKE_METADATA_SERVER

value: 3
Run the GKE Metadata Server on this node. The GKE Metadata Server exposes a metadata API to workloads that is compatible with the V1 Compute Metadata APIs exposed by the Compute Engine and App Engine Metadata Servers. This feature can only be enabled if Workload Identity is enabled at the cluster level.