Container orchestrator
computecontainer-orchestrator
A cluster that schedules containers across a pool of nodes.
- Category
- Compute
- Properties
- 7
- Components
- 36
- Rules
- 1
A node of this kind resolves each property from its own props, then the component's defaults, then the default below.
| property | type | values | required | default |
|---|---|---|---|---|
| autoscaling | boolean | — | no | false |
| managed | boolean | — | no | false |
| networkPolicy | boolean | — | no | — |
| nodeCount | integer | — | no | — |
| privateControlPlane | boolean | — | no | — |
| rbac | boolean | — | no | — |
| version | string | — | no | — |
stateful-node-without-zone-redundancy
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
vendor-neutral
alibabacloud
aws
azure
default
digitalocean
gcp
Google Distributed Cloud (software only) for bare metalgoogle-distributed-cloud-bare-metalGoogle Distributed Cloud (software only) for VMwaregoogle-distributed-cloud-vmwareGoogle Kubernetes Enginegoogle-gkeGKE Autopilotgoogle-gke-autopilotGKE Enterprise fleetgoogle-gke-enterpriseGKE Multi-Cloudgoogle-gke-multi-cloudCluster Services for OpenShiftgoogle-openshift-cluster-services
ibm
# yaml-language-server: $schema=../schema/kind.schema.json # The cluster itself: control plane, node pools and cluster-wide network and access settings. privateControlPlane, rbac and networkPolicy have no default so hardening rules can flag a cluster that left them unstated. schemaVersion: "1" type: "kind" id: "container-orchestrator" category: "compute" properties: nodeCount: type: "integer" version: type: "string" autoscaling: type: "boolean" default: false privateControlPlane: type: "boolean" rbac: type: "boolean" networkPolicy: type: "boolean" managed: type: "boolean" default: false