controlplane.cluster.x-k8s.io_rke2controlplanes.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.17.3
  name: rke2controlplanes.controlplane.cluster.x-k8s.io
spec:
  group: controlplane.cluster.x-k8s.io
  names:
    kind: RKE2ControlPlane
    listKind: RKE2ControlPlaneList
    plural: rke2controlplanes
    singular: rke2controlplane
  scope: Namespaced
  versions:
  - name: v1beta1
    schema:
      openAPIV3Schema:
        description: RKE2ControlPlane is the Schema for the rke2controlplanes API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: RKE2ControlPlaneSpec defines the desired state of RKE2ControlPlane.
            properties:
              agentConfig:
                description: AgentConfig specifies configuration for the agent nodes.
                properties:
                  additionalUserData:
                    description: |-
                      AdditionalUserData is a field that allows users to specify additional cloud-init or ignition configuration to be included in the
                      generated cloud-init/ignition script.
                    properties:
                      config:
                        description: |-
                          In case of using ignition, the data format is documented here: https://kinvolk.io/docs/flatcar-container-linux/latest/provisioning/cl-config/
                          NOTE: All fields of the UserData that are managed by the RKE2Config controller will be ignored, this include "write_files", "runcmd", "ntp".
                        type: string
                      data:
                        additionalProperties:
                          type: string
                        description: |-
                          Data allows to pass arbitrary set of key/value pairs consistent with
                          https://cloudinit.readthedocs.io/en/latest/reference/modules.html
                          to extend existing cloud-init configuration
                        type: object
                      strict:
                        description: Strict controls if Config should be strictly
                          parsed. If so, warnings are treated as errors.
                        type: boolean
                    type: object
                    x-kubernetes-validations:
                    - message: Only config or data could be populated at once
                      rule: '!has(self.data) || !has(self.config)'
                  airGapped:
                    description: |-
                      AirGapped is a boolean value to define if the bootstrapping should be air-gapped,
                      basically supposing that online container registries and RKE2 install scripts are not reachable.
                    type: boolean
                  airGappedChecksum:
                    description: |-
                      AirGappedChecksum is a string value with a sha256sum checksum to compare with checksum
                      of existing sha256sum-<arch>.txt file for packages already available on the machine
                      before performing air-gapped installation.
                    type: string
                  cisProfile:
                    description: CISProfile activates CIS compliance of RKE2 for a
                      certain profile
                    enum:
                    - cis
                    - cis-1.23
                    - cis-1.5
                    - cis-1.6
                    type: string
                  containerRuntimeEndpoint:
                    description: ContainerRuntimeEndpoint Disable embedded containerd
                      and use alternative CRI implementation.
                    type: string
                  dataDir:
                    description: DataDir Folder to hold state.
                    type: string
                  enableContainerdSElinux:
                    description: |-
                      EnableContainerdSElinux defines the policy for enabling SELinux for Containerd
                      if value is true, Containerd will run with selinux-enabled=true flag
                      if value is false, Containerd will run without the above flag
                    type: boolean
                  format:
                    description: Format specifies the output format of the bootstrap
                      data. Defaults to cloud-config.
                    enum:
                    - cloud-config
                    - ignition
                    type: string
                  imageCredentialProviderConfigMap:
                    description: |-
                      ImageCredentialProviderConfigMap is a reference to the ConfigMap that contains credential provider plugin config
                      The config map should contain a key "credential-config.yaml" with YAML file content and
                      a key "credential-provider-binaries" with the a path to the binaries for the credential provider.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  kubeProxy:
                    description: KubeProxyArgs Customized flag for kube-proxy process.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubelet:
                    description: KubeletArgs Customized flag for kubelet process.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeletPath:
                    description: KubeletPath Override kubelet binary path.
                    type: string
                  loadBalancerPort:
                    description: |-
                      LoadBalancerPort local port for supervisor client load-balancer. If the supervisor and apiserver are
                      not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer (default: 6444).
                    type: integer
                  nodeAnnotations:
                    additionalProperties:
                      type: string
                    description: |-
                      NodeAnnotations  are annotations that are created on nodes post bootstrap phase.
                      Unfortunately it is not possible to apply annotations via kubelet
                      using current bootstrap configurations.
                      Issue: https://github.com/kubernetes/kubernetes/issues/108046
                    type: object
                  nodeLabels:
                    description: NodeLabels  Registering and starting kubelet with
                      set of labels.
                    items:
                      type: string
                    type: array
                  nodeName:
                    description: NodeNamePrefix Prefix to the Node Name that CAPI
                      will generate.
                    type: string
                  nodeTaints:
                    description: NodeTaints Registering kubelet with set of taints.
                    items:
                      type: string
                    type: array
                  ntp:
                    description: NTP specifies NTP configuration
                    properties:
                      enabled:
                        description: Enabled specifies whether NTP should be enabled
                        type: boolean
                      servers:
                        description: Servers specifies which NTP servers to use
                        items:
                          type: string
                        type: array
                    type: object
                  podSecurityAdmissionConfigFile:
                    description: |-
                      PodSecurityPolicyConfigFile contains the path to the PodSecurityPolicy configuration file. The file can be passed through
                      spec.Files field.
                    type: string
                  protectKernelDefaults:
                    description: |-
                      ProtectKernelDefaults defines Kernel tuning behavior. If true, error if kernel tunables are different than kubelet defaults.
                      if false, kernel tunable can be different from kubelet defaults
                    type: boolean
                  resolvConf:
                    description: ResolvConf is a reference to a ConfigMap containing
                      resolv.conf content for the node.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  runtimeImage:
                    description: RuntimeImage override image to use for runtime binaries
                      (containerd, kubectl, crictl, etc).
                    type: string
                  snapshotter:
                    description: 'Snapshotter override default containerd snapshotter
                      (default: "overlayfs").'
                    type: string
                  systemDefaultRegistry:
                    description: SystemDefaultRegistry Private registry to be used
                      for all system images.
                    type: string
                type: object
              files:
                description: Files specifies extra files to be passed to user_data
                  upon creation.
                items:
                  description: File defines the input for generating write_files in
                    cloud-init.
                  properties:
                    content:
                      description: Content is the actual content of the file.
                      type: string
                    contentFrom:
                      description: ContentFrom is a referenced source of content to
                        populate the file.
                      properties:
                        configMap:
                          description: ConfigMapFileSource represents a config map
                            that should populate this file.
                          properties:
                            key:
                              description: Key is the key in the secret or config
                                map's data map for this value.
                              type: string
                            name:
                              description: Name of the secret/configmap to use.
                              type: string
                            namespace:
                              description: Namespace of the secret/configmap. Defaults
                                to the RKE2BootstrapConfig's namespace.
                              type: string
                          required:
                          - key
                          - name
                          type: object
                        secret:
                          description: SecretFileSource represents a secret that should
                            populate this file.
                          properties:
                            key:
                              description: Key is the key in the secret or config
                                map's data map for this value.
                              type: string
                            name:
                              description: Name of the secret/configmap to use.
                              type: string
                            namespace:
                              description: Namespace of the secret/configmap. Defaults
                                to the RKE2BootstrapConfig's namespace.
                              type: string
                          required:
                          - key
                          - name
                          type: object
                      type: object
                      x-kubernetes-validations:
                      - message: Only configMap or secret can be populated at once
                        rule: '!(has(self.secret) && has(self.configMap))'
                    encoding:
                      description: Encoding specifies the encoding of the file contents.
                      enum:
                      - base64
                      - gzip
                      - gzip+base64
                      type: string
                    owner:
                      description: Owner specifies the ownership of the file, e.g.
                        "root:root".
                      type: string
                    path:
                      description: Path specifies the full path on disk where to store
                        the file.
                      type: string
                    permissions:
                      description: Permissions specifies the permissions to assign
                        to the file, e.g. "0640".
                      type: string
                  required:
                  - path
                  type: object
                type: array
              gzipUserData:
                description: GzipUserData specifies if the user data should be gzipped.
                type: boolean
              infrastructureRef:
                description: |-
                  InfrastructureRef is a required reference to a custom resource
                  offered by an infrastructure provider.
                  This field is deprecated. Use `.machineTemplate.infrastructureRef` instead.
                properties:
                  apiVersion:
                    description: API version of the referent.
                    type: string
                  fieldPath:
                    description: |-
                      If referring to a piece of an object instead of an entire object, this string
                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                      For example, if the object reference is to a container within a pod, this would take on a value like:
                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                      the event) or if no container name is specified "spec.containers[2]" (container with
                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                      referencing a part of an object.
                    type: string
                  kind:
                    description: |-
                      Kind of the referent.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    type: string
                  name:
                    description: |-
                      Name of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    type: string
                  namespace:
                    description: |-
                      Namespace of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                    type: string
                  resourceVersion:
                    description: |-
                      Specific resourceVersion to which this reference is made, if any.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                    type: string
                  uid:
                    description: |-
                      UID of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                    type: string
                type: object
                x-kubernetes-map-type: atomic
              machineTemplate:
                description: |-
                  MachineTemplate contains information about how machines
                  should be shaped when creating or updating a control plane.
                properties:
                  infrastructureRef:
                    description: |-
                      InfrastructureRef is a required reference to a custom resource
                      offered by an infrastructure provider.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  metadata:
                    description: |-
                      Standard object's metadata.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                    properties:
                      annotations:
                        additionalProperties:
                          type: string
                        description: |-
                          annotations is an unstructured key value map stored with a resource that may be
                          set by external tools to store and retrieve arbitrary metadata. They are not
                          queryable and should be preserved when modifying objects.
                          More info: http://kubernetes.io/docs/user-guide/annotations
                        type: object
                      labels:
                        additionalProperties:
                          type: string
                        description: |-
                          labels is a map of string keys and values that can be used to organize and categorize
                          (scope and select) objects. May match selectors of replication controllers
                          and services.
                          More info: http://kubernetes.io/docs/user-guide/labels
                        type: object
                    type: object
                  nodeDeletionTimeout:
                    description: |-
                      nodeDeletionTimeout defines how long the machine controller will attempt to delete the Node that the Machine
                      hosts after the Machine is marked for deletion. A duration of 0 will retry deletion indefinitely.
                      If no value is provided, the default value for this property of the Machine resource will be used.
                    type: string
                  nodeDrainTimeout:
                    description: |-
                      NodeDrainTimeout is the total amount of time that the controller will spend on draining a controlplane node
                      The default value is 0, meaning that the node can be drained without any time limitations.
                      NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`
                    type: string
                  nodeVolumeDetachTimeout:
                    description: |-
                      nodeVolumeDetachTimeout is the total amount of time that the controller will spend on waiting for all volumes
                      to be detached. The default value is 0, meaning that the volumes can be detached without any time limitations.
                    type: string
                required:
                - infrastructureRef
                type: object
              manifestsConfigMapReference:
                description: |-
                  ManifestsConfigMapReference references a ConfigMap which contains Kubernetes manifests to be deployed automatically on the cluster
                  Each data entry in the ConfigMap will be will be copied to a folder on the control plane nodes that RKE2 scans and uses to deploy manifests.
                properties:
                  apiVersion:
                    description: API version of the referent.
                    type: string
                  fieldPath:
                    description: |-
                      If referring to a piece of an object instead of an entire object, this string
                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                      For example, if the object reference is to a container within a pod, this would take on a value like:
                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                      the event) or if no container name is specified "spec.containers[2]" (container with
                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                      referencing a part of an object.
                    type: string
                  kind:
                    description: |-
                      Kind of the referent.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    type: string
                  name:
                    description: |-
                      Name of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    type: string
                  namespace:
                    description: |-
                      Namespace of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                    type: string
                  resourceVersion:
                    description: |-
                      Specific resourceVersion to which this reference is made, if any.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                    type: string
                  uid:
                    description: |-
                      UID of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                    type: string
                type: object
                x-kubernetes-map-type: atomic
              nodeDrainTimeout:
                description: |-
                  NodeDrainTimeout is the total amount of time that the controller will spend on draining a controlplane node
                  The default value is 0, meaning that the node can be drained without any time limitations.
                  NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`
                  This field is deprecated. Use `.machineTemplate.nodeDrainTimeout` instead.
                type: string
              postRKE2Commands:
                description: PostRKE2Commands specifies extra commands to run after
                  rke2 setup runs.
                items:
                  type: string
                type: array
              preRKE2Commands:
                description: PreRKE2Commands specifies extra commands to run before
                  rke2 setup runs.
                items:
                  type: string
                type: array
              privateRegistriesConfig:
                description: PrivateRegistriesConfig defines the containerd configuration
                  for private registries and local registry mirrors.
                properties:
                  configs:
                    additionalProperties:
                      description: RegistryConfig contains configuration used to communicate
                        with the registry.
                      properties:
                        authSecret:
                          description: |-
                            Auth is a reference to a Secret containing information to authenticate to the registry.
                            The Secret must provite a username and a password data entry.
                          properties:
                            apiVersion:
                              description: API version of the referent.
                              type: string
                            fieldPath:
                              description: |-
                                If referring to a piece of an object instead of an entire object, this string
                                should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                For example, if the object reference is to a container within a pod, this would take on a value like:
                                "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                the event) or if no container name is specified "spec.containers[2]" (container with
                                index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                referencing a part of an object.
                              type: string
                            kind:
                              description: |-
                                Kind of the referent.
                                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                              type: string
                            name:
                              description: |-
                                Name of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                              type: string
                            namespace:
                              description: |-
                                Namespace of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                              type: string
                            resourceVersion:
                              description: |-
                                Specific resourceVersion to which this reference is made, if any.
                                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                              type: string
                            uid:
                              description: |-
                                UID of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                              type: string
                          type: object
                          x-kubernetes-map-type: atomic
                        tls:
                          description: |-
                            TLS is a pair of CA/Cert/Key which then are used when creating the transport
                            that communicates with the registry.
                          properties:
                            insecureSkipVerify:
                              description: InsecureSkipVerify may be set to false
                                to skip verifying the registry's certificate, default
                                is true.
                              type: boolean
                            tlsConfigSecret:
                              description: |-
                                TLSConfigSecret is a reference to a secret of type `kubernetes.io/tls` thich has up to 3 entries: tls.crt, tls.key and ca.crt
                                which describe the TLS configuration necessary to connect to the registry.
                              properties:
                                apiVersion:
                                  description: API version of the referent.
                                  type: string
                                fieldPath:
                                  description: |-
                                    If referring to a piece of an object instead of an entire object, this string
                                    should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                    For example, if the object reference is to a container within a pod, this would take on a value like:
                                    "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                    the event) or if no container name is specified "spec.containers[2]" (container with
                                    index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                    referencing a part of an object.
                                  type: string
                                kind:
                                  description: |-
                                    Kind of the referent.
                                    More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                  type: string
                                name:
                                  description: |-
                                    Name of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                  type: string
                                namespace:
                                  description: |-
                                    Namespace of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                  type: string
                                resourceVersion:
                                  description: |-
                                    Specific resourceVersion to which this reference is made, if any.
                                    More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                  type: string
                                uid:
                                  description: |-
                                    UID of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                  type: string
                              type: object
                              x-kubernetes-map-type: atomic
                          type: object
                      type: object
                    description: |-
                      Configs are configs for each registry.
                      The key is the FDQN or IP of the registry.
                    type: object
                  mirrors:
                    additionalProperties:
                      description: Mirror contains the config related to the registry
                        mirror.
                      properties:
                        endpoint:
                          description: |-
                            Endpoints are endpoints for a namespace. CRI plugin will try the endpoints
                            one by one until a working one is found. The endpoint must be a valid url
                            with host specified.
                            The scheme, host and path from the endpoint URL will be used.
                          items:
                            type: string
                          type: array
                        rewrite:
                          additionalProperties:
                            type: string
                          description: |-
                            Rewrites are repository rewrite rules for a namespace. When fetching image resources
                            from an endpoint and a key matches the repository via regular expression matching
                            it will be replaced with the corresponding value from the map in the resource request.
                          type: object
                      type: object
                    description: Mirrors are namespace to mirror mapping for all namespaces.
                    type: object
                type: object
              registrationAddress:
                description: |-
                  RegistrationAddress is an explicit address to use when registering a node. This is required if
                  the registration type is "address". Its for scenarios where a load-balancer or VIP is used.
                type: string
              registrationMethod:
                description: RegistrationMethod is the method to use for registering
                  nodes into the RKE2 cluster.
                enum:
                - internal-first
                - internal-only-ips
                - external-only-ips
                - address
                - control-plane-endpoint
                - ""
                type: string
              remediationStrategy:
                description: remediationStrategy is the RemediationStrategy that controls
                  how control plane machine remediation happens.
                properties:
                  maxRetry:
                    description: "maxRetry is the Max number of retries while attempting
                      to remediate an unhealthy machine.\nA retry happens when a machine
                      that was created as a replacement for an unhealthy machine also
                      fails.\nFor example, given a control plane with three machines
                      M1, M2, M3:\n\n\tM1 become unhealthy; remediation happens, and
                      M1-1 is created as a replacement.\n\tIf M1-1 (replacement of
                      M1) has problems while bootstrapping it will become unhealthy,
                      and then be\n\tremediated; such operation is considered a retry,
                      remediation-retry #1.\n\tIf M1-2 (replacement of M1-1) becomes
                      unhealthy, remediation-retry #2 will happen, etc.\n\nA retry
                      could happen only after RetryPeriod from the previous retry.\nIf
                      a machine is marked as unhealthy after MinHealthyPeriod from
                      the previous remediation expired,\nthis is not considered a
                      retry anymore because the new issue is assumed unrelated from
                      the previous one.\n\nIf not set, the remedation will be retried
                      infinitely."
                    format: int32
                    type: integer
                  minHealthyPeriod:
                    description: "minHealthyPeriod defines the duration after which
                      RKE2ControlPlane will consider any failure to a machine unrelated\nfrom
                      the previous one. In this case the remediation is not considered
                      a retry anymore, and thus the retry\ncounter restarts from 0.
                      For example, assuming MinHealthyPeriod is set to 1h (default)\n\n\tM1
                      become unhealthy; remediation happens, and M1-1 is created as
                      a replacement.\n\tIf M1-1 (replacement of M1) has problems within
                      the 1hr after the creation, also\n\tthis machine will be remediated
                      and this operation is considered a retry - a problem related\n\tto
                      the original issue happened to M1 -.\n\n\tIf instead the problem
                      on M1-1 is happening after MinHealthyPeriod expired, e.g. four
                      days after\n\tm1-1 has been created as a remediation of M1,
                      the problem on M1-1 is considered unrelated to\n\tthe original
                      issue happened to M1.\n\nIf not set, this value is defaulted
                      to 1h."
                    type: string
                  retryPeriod:
                    description: |-
                      retryPeriod is the duration that RKE2ControlPlane should wait before remediating a machine being created as a replacement
                      for an unhealthy machine (a retry).

                      If not set, a retry will happen immediately.
                    type: string
                type: object
              replicas:
                description: Replicas is the number of replicas for the Control Plane.
                format: int32
                type: integer
              rolloutStrategy:
                description: The RolloutStrategy to use to replace control plane machines
                  with new ones.
                properties:
                  rollingUpdate:
                    description: Rolling update config params. Present only if RolloutStrategyType
                      = RollingUpdate.
                    properties:
                      maxSurge:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The maximum number of control planes that can be scheduled above or under the
                          desired number of control planes.
                          Value can be an absolute number 1 or 0.
                          Defaults to 1.
                          Example: when this is set to 1, the control plane can be scaled
                          up immediately when the rolling update starts.
                        x-kubernetes-int-or-string: true
                    type: object
                  type:
                    description: |-
                      Type of rollout. Currently the only supported strategy is "RollingUpdate".
                      Default is RollingUpdate.
                    type: string
                type: object
              serverConfig:
                description: ServerConfig specifies configuration for the agent nodes.
                properties:
                  advertiseAddress:
                    description: 'AdvertiseAddress IP address that apiserver uses
                      to advertise to members of the cluster (default: node-external-ip/node-ip).'
                    type: string
                  auditPolicySecret:
                    description: AuditPolicySecret path to the file that defines the
                      audit policy configuration.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  bindAddress:
                    description: 'BindAddress describes the rke2 bind address (default:
                      0.0.0.0).'
                    type: string
                  cloudControllerManager:
                    description: CloudControllerManager defines optional custom configuration
                      of the Cloud Controller Manager.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  cloudProviderConfigMap:
                    description: |-
                      CloudProviderConfigMap is a reference to a ConfigMap containing Cloud provider configuration.
                      The config map must contain a key named cloud-config.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  cloudProviderName:
                    description: CloudProviderName cloud provider name.
                    type: string
                  clusterDNS:
                    description: 'ClusterDNS is the cluster IP for CoreDNS service.
                      Should be in your service-cidr range (default: 10.43.0.10).'
                    type: string
                  clusterDomain:
                    description: 'ClusterDomain is the cluster domain name (default:
                      "cluster.local").'
                    type: string
                  cni:
                    description: |-
                      CNI describes the CNI Plugins to deploy, one of none, calico, canal, cilium;
                      optionally with multus as the first value to enable the multus meta-plugin (default: canal).
                    enum:
                    - none
                    - calico
                    - canal
                    - cilium
                    type: string
                  cniMultusEnable:
                    description: |-
                      CNIMultusEnable enables multus as the first CNI plugin (default: false).
                      This option will automatically make Multus a primary CNI, and the value, if specified in the CNI field, as a secondary CNI plugin.
                    type: boolean
                  disableComponents:
                    description: DisableComponents lists Kubernetes components and
                      RKE2 plugin components that will be disabled.
                    properties:
                      kubernetesComponents:
                        description: KubernetesComponents is a list of Kubernetes
                          components to disable.
                        items:
                          description: 'DisabledKubernetesComponent is an enum field
                            that can take one of the following values: scheduler,
                            kubeProxy or cloudController.'
                          enum:
                          - scheduler
                          - kubeProxy
                          - cloudController
                          type: string
                        type: array
                      pluginComponents:
                        description: PluginComponents is a list of PluginComponents
                          to disable.
                        items:
                          description: DisabledPluginComponent selects a plugin Components
                            to be disabled.
                          enum:
                          - rke2-coredns
                          - rke2-ingress-nginx
                          - rke2-metrics-server
                          - rke2-snapshot-controller
                          - rke2-snapshot-controller-crd
                          - rke2-snapshot-validation-webhook
                          type: string
                        type: array
                    type: object
                  embeddedRegistry:
                    description: EmbeddedRegistry enables the embedded registry.
                    type: boolean
                  etcd:
                    description: Etcd defines optional custom configuration of ETCD.
                    properties:
                      backupConfig:
                        description: 'BackupConfig defines how RKE2 will snapshot
                          ETCD: target storage, schedule, etc.'
                        properties:
                          directory:
                            description: Directory to save db snapshots.
                            type: string
                          disableAutomaticSnapshots:
                            description: |-
                              DisableAutomaticSnapshots defines the policy for ETCD snapshots.
                              true means automatic snapshots will be scheduled, false means automatic snapshots will not be scheduled.
                            type: boolean
                          retention:
                            description: 'Retention Number of snapshots to retain
                              Default: 5 (default: 5).'
                            type: string
                          s3:
                            description: S3 Enable backup to an S3-compatible Object
                              Store.
                            properties:
                              bucket:
                                description: Bucket S3 bucket name.
                                type: string
                              endpoint:
                                description: 'Endpoint S3 endpoint url (default: "s3.amazonaws.com").'
                                type: string
                              endpointCAsecret:
                                description: |-
                                  EndpointCA references the Secret that contains a custom CA that should be trusted to connect to S3 endpoint.
                                  The secret must contain a key named "ca.pem" that contains the CA certificate.
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              enforceSslVerify:
                                description: EnforceSSLVerify may be set to false
                                  to skip verifying the registry's certificate, default
                                  is true.
                                type: boolean
                              folder:
                                description: Folder S3 folder.
                                type: string
                              region:
                                description: 'Region S3 region / bucket location (optional)
                                  (default: "us-east-1").'
                                type: string
                              s3CredentialSecret:
                                description: |-
                                  S3CredentialSecret is a reference to a Secret containing the Access Key and Secret Key necessary to access the target S3 Bucket.
                                  The Secret must contain the following keys: "aws_access_key_id" and "aws_secret_access_key".
                                  If empty, the controller will default to IAM authentication
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                            required:
                            - endpoint
                            type: object
                          scheduleCron:
                            description: 'ScheduleCron Snapshot interval time in cron
                              spec. eg. every 5 hours ''* */5 * * *'' (default: "0
                              */12 * * *").'
                            type: string
                          snapshotName:
                            description: 'SnapshotName Set the base name of etcd snapshots.
                              Default: etcd-snapshot-<unix-timestamp> (default: "etcd-snapshot").'
                            type: string
                        type: object
                      customConfig:
                        description: CustomConfig defines the custom settings for
                          ETCD.
                        properties:
                          extraArgs:
                            description: 'ExtraArgs is a list of command line arguments
                              (format: flag=value) to pass to a Kubernetes Component
                              command.'
                            items:
                              type: string
                            type: array
                          extraEnv:
                            additionalProperties:
                              type: string
                            description: ExtraEnv is a map of environment variables
                              to pass on to a Kubernetes Component command.
                            type: object
                          extraMounts:
                            additionalProperties:
                              type: string
                            description: ExtraMounts is a map of volume mounts to
                              be added for the Kubernetes component StaticPod
                            type: object
                          overrideImage:
                            description: OverrideImage is a string that references
                              a container image to override the default one for the
                              Kubernetes Component
                            type: string
                        type: object
                      exposeMetrics:
                        description: |-
                          ExposeEtcdMetrics defines the policy for ETCD Metrics exposure.
                          if value is true, ETCD metrics will be exposed
                          if value is false, ETCD metrics will NOT be exposed
                        type: boolean
                    type: object
                  externalDatastoreSecret:
                    description: |-
                      ExternalDatastoreSecret is a reference to a Secret that contains configuration about connecting to an external datastore.
                      The secret must contain a key named "endpoint" that contains the connection string for the external datastore.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  kubeAPIServer:
                    description: KubeAPIServer defines optional custom configuration
                      of the Kube API Server.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeControllerManager:
                    description: KubeControllerManager defines optional custom configuration
                      of the Kube Controller Manager.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeScheduler:
                    description: KubeScheduler defines optional custom configuration
                      of the Kube Scheduler.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  pauseImage:
                    description: PauseImage Override image to use for pause.
                    type: string
                  secretsEncryption:
                    description: SecretsEncrytion defines encryption at rest configuration
                    properties:
                      encryptionKeySecret:
                        description: EncyptionKey secret reference
                        properties:
                          apiVersion:
                            description: API version of the referent.
                            type: string
                          fieldPath:
                            description: |-
                              If referring to a piece of an object instead of an entire object, this string
                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                              For example, if the object reference is to a container within a pod, this would take on a value like:
                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                              the event) or if no container name is specified "spec.containers[2]" (container with
                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                              referencing a part of an object.
                            type: string
                          kind:
                            description: |-
                              Kind of the referent.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                            type: string
                          name:
                            description: |-
                              Name of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                            type: string
                          namespace:
                            description: |-
                              Namespace of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                            type: string
                          resourceVersion:
                            description: |-
                              Specific resourceVersion to which this reference is made, if any.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                            type: string
                          uid:
                            description: |-
                              UID of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      provider:
                        description: Encryption provider
                        enum:
                        - aescbc
                        - secretbox
                        type: string
                    type: object
                  serviceNodePortRange:
                    description: 'ServiceNodePortRange is the port range to reserve
                      for services with NodePort visibility (default: "30000-32767").'
                    type: string
                  supervisorMetrics:
                    description: SupervisorMetrics enables the RKE2 supervisor metrics
                      endpoint on port 9345.
                    type: boolean
                  tlsSan:
                    description: TLSSan Add additional hostname or IP as a Subject
                      Alternative Name in the TLS cert.
                    items:
                      type: string
                    type: array
                type: object
              version:
                description: Version defines the desired Kubernetes version.
                pattern: (v\d\.\d{2}\.\d+\+rke2r\d)|^$
                type: string
            required:
            - rolloutStrategy
            type: object
          status:
            description: RKE2ControlPlaneStatus defines the observed state of RKE2ControlPlane.
            properties:
              availableServerIPs:
                description: AvailableServerIPs is a list of the Control Plane IP
                  adds that can be used to register further nodes.
                items:
                  type: string
                type: array
              conditions:
                description: Conditions defines current service state of the RKE2Config.
                items:
                  description: Condition defines an observation of a Cluster API resource
                    operational state.
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed. If that is not known, then using the time when
                        the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This field may be empty.
                      maxLength: 10240
                      minLength: 1
                      type: string
                    reason:
                      description: |-
                        reason is the reason for the condition's last transition in CamelCase.
                        The specific API may choose whether or not this field is considered a guaranteed API.
                        This field may be empty.
                      maxLength: 256
                      minLength: 1
                      type: string
                    severity:
                      description: |-
                        severity provides an explicit classification of Reason code, so the users or machines can immediately
                        understand the current situation and act accordingly.
                        The Severity field MUST be set only when Status=False.
                      maxLength: 32
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      type: string
                    type:
                      description: |-
                        type of condition in CamelCase or in foo.example.com/CamelCase.
                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
                        can be useful (see .node.status.conditions), the ability to deconflict is important.
                      maxLength: 256
                      minLength: 1
                      type: string
                  required:
                  - lastTransitionTime
                  - status
                  - type
                  type: object
                type: array
              dataSecretName:
                description: DataSecretName is the name of the secret that stores
                  the bootstrap data script.
                type: string
              failureMessage:
                description: |-
                  FailureMessage will be set on non-retryable errors.

                  Deprecated: This field is deprecated and is going to be removed when support for v1beta1 is dropped.
                type: string
              failureReason:
                description: |-
                  FailureReason will be set on non-retryable errors.

                  Deprecated: This field is deprecated and is going to be removed when support for v1beta1 is dropped.
                type: string
              initialized:
                description: Initialized indicates the target cluster has completed
                  initialization.
                type: boolean
              lastRemediation:
                description: lastRemediation stores info about last remediation performed.
                properties:
                  machine:
                    description: machine is the machine name of the latest machine
                      being remediated.
                    maxLength: 253
                    minLength: 1
                    type: string
                  retryCount:
                    description: |-
                      retryCount used to keep track of remediation retry for the last remediated machine.
                      A retry happens when a machine that was created as a replacement for an unhealthy machine also fails.
                    type: integer
                  timestamp:
                    description: timestamp is when last remediation happened. It is
                      represented in RFC3339 form and is in UTC.
                    format: date-time
                    type: string
                required:
                - machine
                - retryCount
                - timestamp
                type: object
              observedGeneration:
                description: ObservedGeneration is the latest generation observed
                  by the controller.
                format: int64
                type: integer
              ready:
                description: |-
                  Ready denotes that the RKE2ControlPlane API Server became ready during initial provisioning
                  to receive requests.
                  NOTE: this field is part of the Cluster API contract and it is used to orchestrate provisioning.
                  The value of this field is never updated after provisioning is completed. Please use conditions
                  to check the operational state of the control plane.
                type: boolean
              readyReplicas:
                description: ReadyReplicas is the number of replicas current attached
                  to this ControlPlane Resource and that have Ready Status.
                format: int32
                type: integer
              replicas:
                description: Replicas is the number of replicas current attached to
                  this ControlPlane Resource.
                format: int32
                type: integer
              unavailableReplicas:
                description: UnavailableReplicas is the number of replicas current
                  attached to this ControlPlane Resource and that are up-to-date with
                  Control Plane config.
                format: int32
                type: integer
              updatedReplicas:
                description: UpdatedReplicas is the number of replicas current attached
                  to this ControlPlane Resource and that are up-to-date with Control
                  Plane config.
                format: int32
                type: integer
              v1beta2:
                description: v1beta2 groups all the fields that will be added or modified
                  in RKE2ControlPlane's status with the V1Beta2 version.
                properties:
                  availableReplicas:
                    description: |-
                      availableReplicas is the number of available replicas targeted by this RKE2ControlPlane.
                      A machine is considered available when Machine's Available condition is true.
                    format: int32
                    type: integer
                  conditions:
                    description: |-
                      conditions represents the observations of a RKE2ControlPlane's current state.
                      Known condition types are Available, CertificatesAvailable, EtcdClusterAvailable, MachinesReady, MachinesUpToDate,
                      ScalingUp, ScalingDown, Remediating, Deleting, Paused.
                    items:
                      description: Condition contains details for one aspect of the
                        current state of this API Resource.
                      properties:
                        lastTransitionTime:
                          description: |-
                            lastTransitionTime is the last time the condition transitioned from one status to another.
                            This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                          format: date-time
                          type: string
                        message:
                          description: |-
                            message is a human readable message indicating details about the transition.
                            This may be an empty string.
                          maxLength: 32768
                          type: string
                        observedGeneration:
                          description: |-
                            observedGeneration represents the .metadata.generation that the condition was set based upon.
                            For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                            with respect to the current state of the instance.
                          format: int64
                          minimum: 0
                          type: integer
                        reason:
                          description: |-
                            reason contains a programmatic identifier indicating the reason for the condition's last transition.
                            Producers of specific condition types may define expected values and meanings for this field,
                            and whether the values are considered a guaranteed API.
                            The value should be a CamelCase string.
                            This field may not be empty.
                          maxLength: 1024
                          minLength: 1
                          pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                          type: string
                        status:
                          description: status of the condition, one of True, False,
                            Unknown.
                          enum:
                          - "True"
                          - "False"
                          - Unknown
                          type: string
                        type:
                          description: type of condition in CamelCase or in foo.example.com/CamelCase.
                          maxLength: 316
                          pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                          type: string
                      required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                      type: object
                    maxItems: 32
                    type: array
                    x-kubernetes-list-map-keys:
                    - type
                    x-kubernetes-list-type: map
                  readyReplicas:
                    description: readyReplicas is the number of ready replicas for
                      this RKE2ControlPlane. A machine is considered ready when Machine's
                      Ready condition is true.
                    format: int32
                    type: integer
                  upToDateReplicas:
                    description: |-
                      upToDateReplicas is the number of up-to-date replicas targeted by this RKE2ControlPlane.
                      A machine is considered up-to-date when Machine's UpToDate condition is true.
                    format: int32
                    type: integer
                type: object
              version:
                description: |-
                  Version represents the minimum Kubernetes version for the control plane machines
                  in the cluster.
                type: string
            type: object
        type: object
    served: true
    storage: false
    subresources:
      status: {}
  - name: v1beta2
    schema:
      openAPIV3Schema:
        description: RKE2ControlPlane is the Schema for the rke2controlplanes API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: RKE2ControlPlaneSpec defines the desired state of RKE2ControlPlane.
            properties:
              agentConfig:
                description: AgentConfig specifies configuration for the agent nodes.
                properties:
                  additionalUserData:
                    description: |-
                      AdditionalUserData is a field that allows users to specify additional cloud-init or ignition configuration to be included in the
                      generated cloud-init/ignition script.
                    properties:
                      config:
                        description: |-
                          In case of using ignition, the data format is documented here: https://kinvolk.io/docs/flatcar-container-linux/latest/provisioning/cl-config/
                          NOTE: All fields of the UserData that are managed by the RKE2Config controller will be ignored, this include "write_files", "runcmd", "ntp".
                        type: string
                      data:
                        additionalProperties:
                          type: string
                        description: |-
                          Data allows to pass arbitrary set of key/value pairs consistent with
                          https://cloudinit.readthedocs.io/en/latest/reference/modules.html
                          to extend existing cloud-init configuration
                        type: object
                      strict:
                        description: Strict controls if Config should be strictly
                          parsed. If so, warnings are treated as errors.
                        type: boolean
                    type: object
                    x-kubernetes-validations:
                    - message: Only config or data could be populated at once
                      rule: '!has(self.data) || !has(self.config)'
                  airGapped:
                    description: |-
                      AirGapped is a boolean value to define if the bootstrapping should be air-gapped,
                      basically supposing that online container registries and RKE2 install scripts are not reachable.
                    type: boolean
                  airGappedChecksum:
                    description: |-
                      AirGappedChecksum is a string value with a sha256sum checksum to compare with checksum
                      of existing sha256sum-<arch>.txt file for packages already available on the machine
                      before performing air-gapped installation.
                    type: string
                  cisProfile:
                    description: CISProfile activates CIS compliance of RKE2 for a
                      certain profile
                    enum:
                    - cis
                    - cis-1.23
                    - cis-1.5
                    - cis-1.6
                    type: string
                  containerRuntimeEndpoint:
                    description: ContainerRuntimeEndpoint Disable embedded containerd
                      and use alternative CRI implementation.
                    type: string
                  dataDir:
                    description: DataDir Folder to hold state.
                    type: string
                  enableContainerdSElinux:
                    description: |-
                      EnableContainerdSElinux defines the policy for enabling SELinux for Containerd
                      if value is true, Containerd will run with selinux-enabled=true flag
                      if value is false, Containerd will run without the above flag
                    type: boolean
                  format:
                    description: Format specifies the output format of the bootstrap
                      data. Defaults to cloud-config.
                    enum:
                    - cloud-config
                    - ignition
                    type: string
                  imageCredentialProviderConfigMap:
                    description: |-
                      ImageCredentialProviderConfigMap is a reference to the ConfigMap that contains credential provider plugin config
                      The config map should contain a key "credential-config.yaml" with YAML file content and
                      a key "credential-provider-binaries" with the a path to the binaries for the credential provider.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  kubeProxy:
                    description: KubeProxyArgs Customized flag for kube-proxy process.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubelet:
                    description: KubeletArgs Customized flag for kubelet process.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeletPath:
                    description: KubeletPath Override kubelet binary path.
                    type: string
                  loadBalancerPort:
                    description: |-
                      LoadBalancerPort local port for supervisor client load-balancer. If the supervisor and apiserver are
                      not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer (default: 6444).
                    type: integer
                  nodeAnnotations:
                    additionalProperties:
                      type: string
                    description: |-
                      NodeAnnotations  are annotations that are created on nodes post bootstrap phase.
                      Unfortunately it is not possible to apply annotations via kubelet
                      using current bootstrap configurations.
                      Issue: https://github.com/kubernetes/kubernetes/issues/108046
                    type: object
                  nodeLabels:
                    description: NodeLabels  Registering and starting kubelet with
                      set of labels.
                    items:
                      type: string
                    type: array
                  nodeName:
                    description: NodeNamePrefix Prefix to the Node Name that CAPI
                      will generate.
                    type: string
                  nodeTaints:
                    description: NodeTaints Registering kubelet with set of taints.
                    items:
                      type: string
                    type: array
                  ntp:
                    description: NTP specifies NTP configuration
                    properties:
                      enabled:
                        description: Enabled specifies whether NTP should be enabled
                        type: boolean
                      servers:
                        description: Servers specifies which NTP servers to use
                        items:
                          type: string
                        type: array
                    type: object
                  podSecurityAdmissionConfigFile:
                    description: |-
                      PodSecurityPolicyConfigFile contains the path to the PodSecurityPolicy configuration file. The file can be passed through
                      spec.Files field.
                    type: string
                  protectKernelDefaults:
                    description: |-
                      ProtectKernelDefaults defines Kernel tuning behavior. If true, error if kernel tunables are different than kubelet defaults.
                      if false, kernel tunable can be different from kubelet defaults
                    type: boolean
                  resolvConf:
                    description: ResolvConf is a reference to a ConfigMap containing
                      resolv.conf content for the node.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  runtimeImage:
                    description: RuntimeImage override image to use for runtime binaries
                      (containerd, kubectl, crictl, etc).
                    type: string
                  snapshotter:
                    description: 'Snapshotter override default containerd snapshotter
                      (default: "overlayfs").'
                    type: string
                  systemDefaultRegistry:
                    description: SystemDefaultRegistry Private registry to be used
                      for all system images.
                    type: string
                type: object
              files:
                description: Files specifies extra files to be passed to user_data
                  upon creation.
                items:
                  description: File defines the input for generating write_files in
                    cloud-init.
                  properties:
                    content:
                      description: Content is the actual content of the file.
                      type: string
                    contentFrom:
                      description: ContentFrom is a referenced source of content to
                        populate the file.
                      properties:
                        configMap:
                          description: ConfigMapFileSource represents a config map
                            that should populate this file.
                          properties:
                            key:
                              description: Key is the key in the secret or config
                                map's data map for this value.
                              type: string
                            name:
                              description: Name of the secret/configmap to use.
                              type: string
                            namespace:
                              description: Namespace of the secret/configmap. Defaults
                                to the RKE2BootstrapConfig's namespace.
                              type: string
                          required:
                          - key
                          - name
                          type: object
                        secret:
                          description: SecretFileSource represents a secret that should
                            populate this file.
                          properties:
                            key:
                              description: Key is the key in the secret or config
                                map's data map for this value.
                              type: string
                            name:
                              description: Name of the secret/configmap to use.
                              type: string
                            namespace:
                              description: Namespace of the secret/configmap. Defaults
                                to the RKE2BootstrapConfig's namespace.
                              type: string
                          required:
                          - key
                          - name
                          type: object
                      type: object
                      x-kubernetes-validations:
                      - message: Only configMap or secret can be populated at once
                        rule: '!(has(self.secret) && has(self.configMap))'
                    encoding:
                      description: Encoding specifies the encoding of the file contents.
                      enum:
                      - base64
                      - gzip
                      - gzip+base64
                      type: string
                    owner:
                      description: Owner specifies the ownership of the file, e.g.
                        "root:root".
                      type: string
                    path:
                      description: Path specifies the full path on disk where to store
                        the file.
                      type: string
                    permissions:
                      description: Permissions specifies the permissions to assign
                        to the file, e.g. "0640".
                      type: string
                  required:
                  - path
                  type: object
                type: array
              gzipUserData:
                description: GzipUserData specifies if the user data should be gzipped.
                type: boolean
              machineTemplate:
                description: |-
                  MachineTemplate contains information about how machines
                  should be shaped when creating or updating a control plane.
                properties:
                  metadata:
                    description: |-
                      Standard object's metadata.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                    minProperties: 1
                    properties:
                      annotations:
                        additionalProperties:
                          type: string
                        description: |-
                          annotations is an unstructured key value map stored with a resource that may be
                          set by external tools to store and retrieve arbitrary metadata. They are not
                          queryable and should be preserved when modifying objects.
                          More info: http://kubernetes.io/docs/user-guide/annotations
                        type: object
                      labels:
                        additionalProperties:
                          type: string
                        description: |-
                          labels is a map of string keys and values that can be used to organize and categorize
                          (scope and select) objects. May match selectors of replication controllers
                          and services.
                          More info: http://kubernetes.io/docs/user-guide/labels
                        type: object
                    type: object
                  spec:
                    description: |-
                      spec defines the spec for Machines
                      in a RKE2ControlPlane object.
                    properties:
                      deletion:
                        description: deletion contains configuration options for Machine
                          deletion.
                        minProperties: 1
                        properties:
                          nodeDeletionTimeoutSeconds:
                            description: |-
                              nodeDeletionTimeoutSeconds defines how long the machine controller will attempt to delete the Node that the Machine
                              hosts after the Machine is marked for deletion. A duration of 0 will retry deletion indefinitely.
                              If no value is provided, the default value for this property of the Machine resource will be used.
                            format: int32
                            minimum: 0
                            type: integer
                          nodeDrainTimeoutSeconds:
                            description: |-
                              nodeDrainTimeoutSeconds is the total amount of time that the controller will spend on draining a controlplane node
                              The default value is 0, meaning that the node can be drained without any time limitations.
                              NOTE: nodeDrainTimeoutSeconds is different from `kubectl drain --timeout`
                            format: int32
                            minimum: 0
                            type: integer
                          nodeVolumeDetachTimeoutSeconds:
                            description: |-
                              nodeVolumeDetachTimeoutSeconds is the total amount of time that the controller will spend on waiting for all volumes
                              to be detached. The default value is 0, meaning that the volumes can be detached without any time limitations.
                            format: int32
                            minimum: 0
                            type: integer
                        type: object
                      infrastructureRef:
                        description: |-
                          infrastructureRef is a required reference to a custom resource
                          offered by an infrastructure provider.
                        properties:
                          apiGroup:
                            description: |-
                              apiGroup is the group of the resource being referenced.
                              apiGroup must be fully qualified domain name.
                              The corresponding version for this reference will be looked up from the contract
                              labels of the corresponding CRD of the resource being referenced.
                            maxLength: 253
                            minLength: 1
                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                            type: string
                          kind:
                            description: |-
                              kind of the resource being referenced.
                              kind must consist of alphanumeric characters or '-', start with an alphabetic character, and end with an alphanumeric character.
                            maxLength: 63
                            minLength: 1
                            pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
                            type: string
                          name:
                            description: |-
                              name of the resource being referenced.
                              name must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
                            maxLength: 253
                            minLength: 1
                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                            type: string
                        required:
                        - apiGroup
                        - kind
                        - name
                        type: object
                    required:
                    - infrastructureRef
                    type: object
                required:
                - spec
                type: object
              manifestsConfigMapReference:
                description: |-
                  ManifestsConfigMapReference references a ConfigMap which contains Kubernetes manifests to be deployed automatically on the cluster
                  Each data entry in the ConfigMap will be will be copied to a folder on the control plane nodes that RKE2 scans and uses to deploy manifests.
                properties:
                  apiVersion:
                    description: API version of the referent.
                    type: string
                  fieldPath:
                    description: |-
                      If referring to a piece of an object instead of an entire object, this string
                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                      For example, if the object reference is to a container within a pod, this would take on a value like:
                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                      the event) or if no container name is specified "spec.containers[2]" (container with
                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                      referencing a part of an object.
                    type: string
                  kind:
                    description: |-
                      Kind of the referent.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    type: string
                  name:
                    description: |-
                      Name of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    type: string
                  namespace:
                    description: |-
                      Namespace of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                    type: string
                  resourceVersion:
                    description: |-
                      Specific resourceVersion to which this reference is made, if any.
                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                    type: string
                  uid:
                    description: |-
                      UID of the referent.
                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                    type: string
                type: object
                x-kubernetes-map-type: atomic
              postRKE2Commands:
                description: PostRKE2Commands specifies extra commands to run after
                  rke2 setup runs.
                items:
                  type: string
                type: array
              preRKE2Commands:
                description: PreRKE2Commands specifies extra commands to run before
                  rke2 setup runs.
                items:
                  type: string
                type: array
              privateRegistriesConfig:
                description: PrivateRegistriesConfig defines the containerd configuration
                  for private registries and local registry mirrors.
                properties:
                  configs:
                    additionalProperties:
                      description: RegistryConfig contains configuration used to communicate
                        with the registry.
                      properties:
                        authSecret:
                          description: |-
                            Auth is a reference to a Secret containing information to authenticate to the registry.
                            The Secret must provite a username and a password data entry.
                          properties:
                            apiVersion:
                              description: API version of the referent.
                              type: string
                            fieldPath:
                              description: |-
                                If referring to a piece of an object instead of an entire object, this string
                                should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                For example, if the object reference is to a container within a pod, this would take on a value like:
                                "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                the event) or if no container name is specified "spec.containers[2]" (container with
                                index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                referencing a part of an object.
                              type: string
                            kind:
                              description: |-
                                Kind of the referent.
                                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                              type: string
                            name:
                              description: |-
                                Name of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                              type: string
                            namespace:
                              description: |-
                                Namespace of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                              type: string
                            resourceVersion:
                              description: |-
                                Specific resourceVersion to which this reference is made, if any.
                                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                              type: string
                            uid:
                              description: |-
                                UID of the referent.
                                More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                              type: string
                          type: object
                          x-kubernetes-map-type: atomic
                        tls:
                          description: |-
                            TLS is a pair of CA/Cert/Key which then are used when creating the transport
                            that communicates with the registry.
                          properties:
                            insecureSkipVerify:
                              description: InsecureSkipVerify may be set to false
                                to skip verifying the registry's certificate, default
                                is true.
                              type: boolean
                            tlsConfigSecret:
                              description: |-
                                TLSConfigSecret is a reference to a secret of type `kubernetes.io/tls` thich has up to 3 entries: tls.crt, tls.key and ca.crt
                                which describe the TLS configuration necessary to connect to the registry.
                              properties:
                                apiVersion:
                                  description: API version of the referent.
                                  type: string
                                fieldPath:
                                  description: |-
                                    If referring to a piece of an object instead of an entire object, this string
                                    should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                    For example, if the object reference is to a container within a pod, this would take on a value like:
                                    "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                    the event) or if no container name is specified "spec.containers[2]" (container with
                                    index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                    referencing a part of an object.
                                  type: string
                                kind:
                                  description: |-
                                    Kind of the referent.
                                    More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                  type: string
                                name:
                                  description: |-
                                    Name of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                  type: string
                                namespace:
                                  description: |-
                                    Namespace of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                  type: string
                                resourceVersion:
                                  description: |-
                                    Specific resourceVersion to which this reference is made, if any.
                                    More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                  type: string
                                uid:
                                  description: |-
                                    UID of the referent.
                                    More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                  type: string
                              type: object
                              x-kubernetes-map-type: atomic
                          type: object
                      type: object
                    description: |-
                      Configs are configs for each registry.
                      The key is the FDQN or IP of the registry.
                    type: object
                  mirrors:
                    additionalProperties:
                      description: Mirror contains the config related to the registry
                        mirror.
                      properties:
                        endpoint:
                          description: |-
                            Endpoints are endpoints for a namespace. CRI plugin will try the endpoints
                            one by one until a working one is found. The endpoint must be a valid url
                            with host specified.
                            The scheme, host and path from the endpoint URL will be used.
                          items:
                            type: string
                          type: array
                        rewrite:
                          additionalProperties:
                            type: string
                          description: |-
                            Rewrites are repository rewrite rules for a namespace. When fetching image resources
                            from an endpoint and a key matches the repository via regular expression matching
                            it will be replaced with the corresponding value from the map in the resource request.
                          type: object
                      type: object
                    description: Mirrors are namespace to mirror mapping for all namespaces.
                    type: object
                type: object
              registrationAddress:
                description: |-
                  RegistrationAddress is an explicit address to use when registering a node. This is required if
                  the registration type is "address". Its for scenarios where a load-balancer or VIP is used.
                type: string
              registrationMethod:
                description: RegistrationMethod is the method to use for registering
                  nodes into the RKE2 cluster.
                enum:
                - internal-first
                - internal-only-ips
                - external-only-ips
                - address
                - control-plane-endpoint
                - ""
                type: string
              remediationStrategy:
                description: remediationStrategy is the RemediationStrategy that controls
                  how control plane machine remediation happens.
                properties:
                  maxRetry:
                    description: "maxRetry is the Max number of retries while attempting
                      to remediate an unhealthy machine.\nA retry happens when a machine
                      that was created as a replacement for an unhealthy machine also
                      fails.\nFor example, given a control plane with three machines
                      M1, M2, M3:\n\n\tM1 become unhealthy; remediation happens, and
                      M1-1 is created as a replacement.\n\tIf M1-1 (replacement of
                      M1) has problems while bootstrapping it will become unhealthy,
                      and then be\n\tremediated; such operation is considered a retry,
                      remediation-retry #1.\n\tIf M1-2 (replacement of M1-1) becomes
                      unhealthy, remediation-retry #2 will happen, etc.\n\nA retry
                      could happen only after RetryPeriod from the previous retry.\nIf
                      a machine is marked as unhealthy after MinHealthyPeriod from
                      the previous remediation expired,\nthis is not considered a
                      retry anymore because the new issue is assumed unrelated from
                      the previous one.\n\nIf not set, the remedation will be retried
                      infinitely."
                    format: int32
                    type: integer
                  minHealthyPeriod:
                    description: "minHealthyPeriod defines the duration after which
                      RKE2ControlPlane will consider any failure to a machine unrelated\nfrom
                      the previous one. In this case the remediation is not considered
                      a retry anymore, and thus the retry\ncounter restarts from 0.
                      For example, assuming MinHealthyPeriod is set to 1h (default)\n\n\tM1
                      become unhealthy; remediation happens, and M1-1 is created as
                      a replacement.\n\tIf M1-1 (replacement of M1) has problems within
                      the 1hr after the creation, also\n\tthis machine will be remediated
                      and this operation is considered a retry - a problem related\n\tto
                      the original issue happened to M1 -.\n\n\tIf instead the problem
                      on M1-1 is happening after MinHealthyPeriod expired, e.g. four
                      days after\n\tm1-1 has been created as a remediation of M1,
                      the problem on M1-1 is considered unrelated to\n\tthe original
                      issue happened to M1.\n\nIf not set, this value is defaulted
                      to 1h."
                    type: string
                  retryPeriod:
                    description: |-
                      retryPeriod is the duration that RKE2ControlPlane should wait before remediating a machine being created as a replacement
                      for an unhealthy machine (a retry).

                      If not set, a retry will happen immediately.
                    type: string
                type: object
              replicas:
                description: Replicas is the number of replicas for the Control Plane.
                format: int32
                type: integer
              rolloutStrategy:
                description: The Rollout to use to replace control plane machines
                  with new ones.
                properties:
                  rollingUpdate:
                    description: Rolling update config params. Present only if RolloutStrategyType
                      = RollingUpdate.
                    properties:
                      maxSurge:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The maximum number of control planes that can be scheduled above or under the
                          desired number of control planes.
                          Value can be an absolute number 1 or 0.
                          Defaults to 1.
                          Example: when this is set to 1, the control plane can be scaled
                          up immediately when the rolling update starts.
                        x-kubernetes-int-or-string: true
                    type: object
                  type:
                    description: |-
                      Type of rollout. Currently the only supported strategy is "RollingUpdate".
                      Default is RollingUpdate.
                    type: string
                type: object
              serverConfig:
                description: ServerConfig specifies configuration for the agent nodes.
                properties:
                  advertiseAddress:
                    description: 'AdvertiseAddress IP address that apiserver uses
                      to advertise to members of the cluster (default: node-external-ip/node-ip).'
                    type: string
                  auditPolicySecret:
                    description: AuditPolicySecret path to the file that defines the
                      audit policy configuration.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  bindAddress:
                    description: 'BindAddress describes the rke2 bind address (default:
                      0.0.0.0).'
                    type: string
                  cloudControllerManager:
                    description: CloudControllerManager defines optional custom configuration
                      of the Cloud Controller Manager.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  cloudProviderConfigMap:
                    description: |-
                      CloudProviderConfigMap is a reference to a ConfigMap containing Cloud provider configuration.
                      The config map must contain a key named cloud-config.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  cloudProviderName:
                    description: CloudProviderName cloud provider name.
                    type: string
                  clusterDNS:
                    description: 'ClusterDNS is the cluster IP for CoreDNS service.
                      Should be in your service-cidr range (default: 10.43.0.10).'
                    type: string
                  clusterDomain:
                    description: 'ClusterDomain is the cluster domain name (default:
                      "cluster.local").'
                    type: string
                  cni:
                    description: |-
                      CNI describes the CNI Plugins to deploy, one of none, calico, canal, cilium;
                      optionally with multus as the first value to enable the multus meta-plugin (default: canal).
                    enum:
                    - none
                    - calico
                    - canal
                    - cilium
                    type: string
                  cniMultusEnable:
                    description: |-
                      CNIMultusEnable enables multus as the first CNI plugin (default: false).
                      This option will automatically make Multus a primary CNI, and the value, if specified in the CNI field, as a secondary CNI plugin.
                    type: boolean
                  disableComponents:
                    description: DisableComponents lists Kubernetes components and
                      RKE2 plugin components that will be disabled.
                    properties:
                      kubernetesComponents:
                        description: KubernetesComponents is a list of Kubernetes
                          components to disable.
                        items:
                          description: 'DisabledKubernetesComponent is an enum field
                            that can take one of the following values: scheduler,
                            kubeProxy or cloudController.'
                          enum:
                          - scheduler
                          - kubeProxy
                          - cloudController
                          type: string
                        type: array
                      pluginComponents:
                        description: PluginComponents is a list of PluginComponents
                          to disable.
                        items:
                          description: DisabledPluginComponent selects a plugin Components
                            to be disabled.
                          enum:
                          - rke2-coredns
                          - rke2-ingress-nginx
                          - rke2-metrics-server
                          - rke2-snapshot-controller
                          - rke2-snapshot-controller-crd
                          - rke2-snapshot-validation-webhook
                          type: string
                        type: array
                    type: object
                  embeddedRegistry:
                    description: EmbeddedRegistry enables the embedded registry.
                    type: boolean
                  etcd:
                    description: Etcd defines optional custom configuration of ETCD.
                    properties:
                      backupConfig:
                        description: 'BackupConfig defines how RKE2 will snapshot
                          ETCD: target storage, schedule, etc.'
                        properties:
                          directory:
                            description: Directory to save db snapshots.
                            type: string
                          disableAutomaticSnapshots:
                            description: |-
                              DisableAutomaticSnapshots defines the policy for ETCD snapshots.
                              true means automatic snapshots will be scheduled, false means automatic snapshots will not be scheduled.
                            type: boolean
                          retention:
                            description: 'Retention Number of snapshots to retain
                              Default: 5 (default: 5).'
                            type: string
                          s3:
                            description: S3 Enable backup to an S3-compatible Object
                              Store.
                            properties:
                              bucket:
                                description: Bucket S3 bucket name.
                                type: string
                              endpoint:
                                description: 'Endpoint S3 endpoint url (default: "s3.amazonaws.com").'
                                type: string
                              endpointCAsecret:
                                description: |-
                                  EndpointCA references the Secret that contains a custom CA that should be trusted to connect to S3 endpoint.
                                  The secret must contain a key named "ca.pem" that contains the CA certificate.
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              enforceSslVerify:
                                description: EnforceSSLVerify may be set to false
                                  to skip verifying the registry's certificate, default
                                  is true.
                                type: boolean
                              folder:
                                description: Folder S3 folder.
                                type: string
                              region:
                                description: 'Region S3 region / bucket location (optional)
                                  (default: "us-east-1").'
                                type: string
                              s3CredentialSecret:
                                description: |-
                                  S3CredentialSecret is a reference to a Secret containing the Access Key and Secret Key necessary to access the target S3 Bucket.
                                  The Secret must contain the following keys: "aws_access_key_id" and "aws_secret_access_key".
                                  If empty, the controller will default to IAM authentication
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                            required:
                            - endpoint
                            type: object
                          scheduleCron:
                            description: 'ScheduleCron Snapshot interval time in cron
                              spec. eg. every 5 hours ''* */5 * * *'' (default: "0
                              */12 * * *").'
                            type: string
                          snapshotName:
                            description: 'SnapshotName Set the base name of etcd snapshots.
                              Default: etcd-snapshot-<unix-timestamp> (default: "etcd-snapshot").'
                            type: string
                        type: object
                      customConfig:
                        description: CustomConfig defines the custom settings for
                          ETCD.
                        properties:
                          extraArgs:
                            description: 'ExtraArgs is a list of command line arguments
                              (format: flag=value) to pass to a Kubernetes Component
                              command.'
                            items:
                              type: string
                            type: array
                          extraEnv:
                            additionalProperties:
                              type: string
                            description: ExtraEnv is a map of environment variables
                              to pass on to a Kubernetes Component command.
                            type: object
                          extraMounts:
                            additionalProperties:
                              type: string
                            description: ExtraMounts is a map of volume mounts to
                              be added for the Kubernetes component StaticPod
                            type: object
                          overrideImage:
                            description: OverrideImage is a string that references
                              a container image to override the default one for the
                              Kubernetes Component
                            type: string
                        type: object
                      exposeMetrics:
                        description: |-
                          ExposeEtcdMetrics defines the policy for ETCD Metrics exposure.
                          if value is true, ETCD metrics will be exposed
                          if value is false, ETCD metrics will NOT be exposed
                        type: boolean
                    type: object
                  externalDatastoreSecret:
                    description: |-
                      ExternalDatastoreSecret is a reference to a Secret that contains configuration about connecting to an external datastore.
                      The secret must contain a key named "endpoint" that contains the connection string for the external datastore.
                    properties:
                      apiVersion:
                        description: API version of the referent.
                        type: string
                      fieldPath:
                        description: |-
                          If referring to a piece of an object instead of an entire object, this string
                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                          For example, if the object reference is to a container within a pod, this would take on a value like:
                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
                          the event) or if no container name is specified "spec.containers[2]" (container with
                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
                          referencing a part of an object.
                        type: string
                      kind:
                        description: |-
                          Kind of the referent.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        type: string
                      name:
                        description: |-
                          Name of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                        type: string
                      namespace:
                        description: |-
                          Namespace of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                        type: string
                      resourceVersion:
                        description: |-
                          Specific resourceVersion to which this reference is made, if any.
                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                        type: string
                      uid:
                        description: |-
                          UID of the referent.
                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                        type: string
                    type: object
                    x-kubernetes-map-type: atomic
                  kubeAPIServer:
                    description: KubeAPIServer defines optional custom configuration
                      of the Kube API Server.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeControllerManager:
                    description: KubeControllerManager defines optional custom configuration
                      of the Kube Controller Manager.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  kubeScheduler:
                    description: KubeScheduler defines optional custom configuration
                      of the Kube Scheduler.
                    properties:
                      extraArgs:
                        description: 'ExtraArgs is a list of command line arguments
                          (format: flag=value) to pass to a Kubernetes Component command.'
                        items:
                          type: string
                        type: array
                      extraEnv:
                        additionalProperties:
                          type: string
                        description: ExtraEnv is a map of environment variables to
                          pass on to a Kubernetes Component command.
                        type: object
                      extraMounts:
                        additionalProperties:
                          type: string
                        description: ExtraMounts is a map of volume mounts to be added
                          for the Kubernetes component StaticPod
                        type: object
                      overrideImage:
                        description: OverrideImage is a string that references a container
                          image to override the default one for the Kubernetes Component
                        type: string
                    type: object
                  pauseImage:
                    description: PauseImage Override image to use for pause.
                    type: string
                  secretsEncryption:
                    description: SecretsEncrytion defines encryption at rest configuration
                    properties:
                      encryptionKeySecret:
                        description: EncyptionKey secret reference
                        properties:
                          apiVersion:
                            description: API version of the referent.
                            type: string
                          fieldPath:
                            description: |-
                              If referring to a piece of an object instead of an entire object, this string
                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                              For example, if the object reference is to a container within a pod, this would take on a value like:
                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                              the event) or if no container name is specified "spec.containers[2]" (container with
                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                              referencing a part of an object.
                            type: string
                          kind:
                            description: |-
                              Kind of the referent.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                            type: string
                          name:
                            description: |-
                              Name of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                            type: string
                          namespace:
                            description: |-
                              Namespace of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                            type: string
                          resourceVersion:
                            description: |-
                              Specific resourceVersion to which this reference is made, if any.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                            type: string
                          uid:
                            description: |-
                              UID of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      provider:
                        description: Encryption provider
                        enum:
                        - aescbc
                        - secretbox
                        type: string
                    type: object
                  serviceNodePortRange:
                    description: 'ServiceNodePortRange is the port range to reserve
                      for services with NodePort visibility (default: "30000-32767").'
                    type: string
                  supervisorMetrics:
                    description: SupervisorMetrics enables the RKE2 supervisor metrics
                      endpoint on port 9345.
                    type: boolean
                  tlsSan:
                    description: TLSSan Add additional hostname or IP as a Subject
                      Alternative Name in the TLS cert.
                    items:
                      type: string
                    type: array
                type: object
              version:
                description: Version defines the desired Kubernetes version.
                pattern: (v\d\.\d{2}\.\d+\+rke2r\d)|^$
                type: string
            required:
            - rolloutStrategy
            - version
            type: object
          status:
            description: RKE2ControlPlaneStatus defines the observed state of RKE2ControlPlane.
            properties:
              availableReplicas:
                description: |-
                  availableReplicas is the number of available replicas targeted by this RKE2ControlPlane.
                  A machine is considered available when Machine's Available condition is true.
                format: int32
                type: integer
              availableServerIPs:
                description: AvailableServerIPs is a list of the Control Plane IP
                  adds that can be used to register further nodes.
                items:
                  type: string
                type: array
              conditions:
                description: Conditions defines current service state of the RKE2Config.
                items:
                  description: Condition contains details for one aspect of the current
                    state of this API Resource.
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This may be an empty string.
                      maxLength: 32768
                      type: string
                    observedGeneration:
                      description: |-
                        observedGeneration represents the .metadata.generation that the condition was set based upon.
                        For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                        with respect to the current state of the instance.
                      format: int64
                      minimum: 0
                      type: integer
                    reason:
                      description: |-
                        reason contains a programmatic identifier indicating the reason for the condition's last transition.
                        Producers of specific condition types may define expected values and meanings for this field,
                        and whether the values are considered a guaranteed API.
                        The value should be a CamelCase string.
                        This field may not be empty.
                      maxLength: 1024
                      minLength: 1
                      pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      enum:
                      - "True"
                      - "False"
                      - Unknown
                      type: string
                    type:
                      description: type of condition in CamelCase or in foo.example.com/CamelCase.
                      maxLength: 316
                      pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                      type: string
                  required:
                  - lastTransitionTime
                  - message
                  - reason
                  - status
                  - type
                  type: object
                type: array
              initialization:
                description: |-
                  initialization provides observations of the RKE2ControlPlane initialization process.
                  NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial Machine provisioning.
                minProperties: 1
                properties:
                  controlPlaneInitialized:
                    description: |-
                      controlPlaneInitialized is true when the RKE2ControlPlane provider reports that the Kubernetes control plane is initialized;
                      A control plane is considered initialized when it can accept requests, no matter if this happens before
                      the control plane is fully provisioned or not.
                      NOTE: this field is part of the Cluster API contract, and it is used to orchestrate initial Machine provisioning.
                    type: boolean
                type: object
              lastRemediation:
                description: lastRemediation stores info about last remediation performed.
                properties:
                  machine:
                    description: machine is the machine name of the latest machine
                      being remediated.
                    maxLength: 253
                    minLength: 1
                    type: string
                  retryCount:
                    description: |-
                      retryCount used to keep track of remediation retry for the last remediated machine.
                      A retry happens when a machine that was created as a replacement for an unhealthy machine also fails.
                    type: integer
                  timestamp:
                    description: timestamp is when last remediation happened. It is
                      represented in RFC3339 form and is in UTC.
                    format: date-time
                    type: string
                required:
                - machine
                - retryCount
                - timestamp
                type: object
              observedGeneration:
                description: ObservedGeneration is the latest generation observed
                  by the controller.
                format: int64
                type: integer
              readyReplicas:
                description: ReadyReplicas is the number of replicas current attached
                  to this ControlPlane Resource and that have Ready Status.
                format: int32
                type: integer
              replicas:
                description: Replicas is the number of replicas current attached to
                  this ControlPlane Resource.
                format: int32
                type: integer
              upToDateReplicas:
                description: |-
                  upToDateReplicas is the number of up-to-date replicas targeted by this RKE2ControlPlane.
                  A machine is considered up-to-date when Machine's UpToDate condition is true.
                format: int32
                type: integer
              version:
                description: |-
                  Version represents the minimum Kubernetes version for the control plane machines
                  in the cluster.
                type: string
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}