controlplane.cluster.x-k8s.io_rke2controlplanetemplates.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.17.3
  name: rke2controlplanetemplates.controlplane.cluster.x-k8s.io
spec:
  group: controlplane.cluster.x-k8s.io
  names:
    categories:
    - cluster-api
    kind: RKE2ControlPlaneTemplate
    listKind: RKE2ControlPlaneTemplateList
    plural: rke2controlplanetemplates
    shortNames:
    - rke2ct
    singular: rke2controlplanetemplate
  scope: Namespaced
  versions:
  - name: v1beta1
    schema:
      openAPIV3Schema:
        description: RKE2ControlPlaneTemplate is the Schema for the rke2controlplanetemplates
          API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: Spec is the control plane specification for the template
              resource.
            properties:
              template:
                description: RKE2ControlPlaneTemplateResource contains spec for RKE2ControlPlaneTemplate.
                properties:
                  spec:
                    description: Spec is the specification of the desired behavior
                      of the control plane.
                    properties:
                      agentConfig:
                        description: AgentConfig specifies configuration for the agent
                          nodes.
                        properties:
                          additionalUserData:
                            description: |-
                              AdditionalUserData is a field that allows users to specify additional cloud-init or ignition configuration to be included in the
                              generated cloud-init/ignition script.
                            properties:
                              config:
                                description: |-
                                  In case of using ignition, the data format is documented here: https://kinvolk.io/docs/flatcar-container-linux/latest/provisioning/cl-config/
                                  NOTE: All fields of the UserData that are managed by the RKE2Config controller will be ignored, this include "write_files", "runcmd", "ntp".
                                type: string
                              data:
                                additionalProperties:
                                  type: string
                                description: |-
                                  Data allows to pass arbitrary set of key/value pairs consistent with
                                  https://cloudinit.readthedocs.io/en/latest/reference/modules.html
                                  to extend existing cloud-init configuration
                                type: object
                              strict:
                                description: Strict controls if Config should be strictly
                                  parsed. If so, warnings are treated as errors.
                                type: boolean
                            type: object
                            x-kubernetes-validations:
                            - message: Only config or data could be populated at once
                              rule: '!has(self.data) || !has(self.config)'
                          airGapped:
                            description: |-
                              AirGapped is a boolean value to define if the bootstrapping should be air-gapped,
                              basically supposing that online container registries and RKE2 install scripts are not reachable.
                            type: boolean
                          airGappedChecksum:
                            description: |-
                              AirGappedChecksum is a string value with a sha256sum checksum to compare with checksum
                              of existing sha256sum-<arch>.txt file for packages already available on the machine
                              before performing air-gapped installation.
                            type: string
                          cisProfile:
                            description: CISProfile activates CIS compliance of RKE2
                              for a certain profile
                            enum:
                            - cis
                            - cis-1.23
                            - cis-1.5
                            - cis-1.6
                            type: string
                          containerRuntimeEndpoint:
                            description: ContainerRuntimeEndpoint Disable embedded
                              containerd and use alternative CRI implementation.
                            type: string
                          dataDir:
                            description: DataDir Folder to hold state.
                            type: string
                          enableContainerdSElinux:
                            description: |-
                              EnableContainerdSElinux defines the policy for enabling SELinux for Containerd
                              if value is true, Containerd will run with selinux-enabled=true flag
                              if value is false, Containerd will run without the above flag
                            type: boolean
                          format:
                            description: Format specifies the output format of the
                              bootstrap data. Defaults to cloud-config.
                            enum:
                            - cloud-config
                            - ignition
                            type: string
                          imageCredentialProviderConfigMap:
                            description: |-
                              ImageCredentialProviderConfigMap is a reference to the ConfigMap that contains credential provider plugin config
                              The config map should contain a key "credential-config.yaml" with YAML file content and
                              a key "credential-provider-binaries" with the a path to the binaries for the credential provider.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          kubeProxy:
                            description: KubeProxyArgs Customized flag for kube-proxy
                              process.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubelet:
                            description: KubeletArgs Customized flag for kubelet process.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeletPath:
                            description: KubeletPath Override kubelet binary path.
                            type: string
                          loadBalancerPort:
                            description: |-
                              LoadBalancerPort local port for supervisor client load-balancer. If the supervisor and apiserver are
                              not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer (default: 6444).
                            type: integer
                          nodeAnnotations:
                            additionalProperties:
                              type: string
                            description: |-
                              NodeAnnotations  are annotations that are created on nodes post bootstrap phase.
                              Unfortunately it is not possible to apply annotations via kubelet
                              using current bootstrap configurations.
                              Issue: https://github.com/kubernetes/kubernetes/issues/108046
                            type: object
                          nodeLabels:
                            description: NodeLabels  Registering and starting kubelet
                              with set of labels.
                            items:
                              type: string
                            type: array
                          nodeName:
                            description: NodeNamePrefix Prefix to the Node Name that
                              CAPI will generate.
                            type: string
                          nodeTaints:
                            description: NodeTaints Registering kubelet with set of
                              taints.
                            items:
                              type: string
                            type: array
                          ntp:
                            description: NTP specifies NTP configuration
                            properties:
                              enabled:
                                description: Enabled specifies whether NTP should
                                  be enabled
                                type: boolean
                              servers:
                                description: Servers specifies which NTP servers to
                                  use
                                items:
                                  type: string
                                type: array
                            type: object
                          podSecurityAdmissionConfigFile:
                            description: |-
                              PodSecurityPolicyConfigFile contains the path to the PodSecurityPolicy configuration file. The file can be passed through
                              spec.Files field.
                            type: string
                          protectKernelDefaults:
                            description: |-
                              ProtectKernelDefaults defines Kernel tuning behavior. If true, error if kernel tunables are different than kubelet defaults.
                              if false, kernel tunable can be different from kubelet defaults
                            type: boolean
                          resolvConf:
                            description: ResolvConf is a reference to a ConfigMap
                              containing resolv.conf content for the node.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          runtimeImage:
                            description: RuntimeImage override image to use for runtime
                              binaries (containerd, kubectl, crictl, etc).
                            type: string
                          snapshotter:
                            description: 'Snapshotter override default containerd
                              snapshotter (default: "overlayfs").'
                            type: string
                          systemDefaultRegistry:
                            description: SystemDefaultRegistry Private registry to
                              be used for all system images.
                            type: string
                        type: object
                      files:
                        description: Files specifies extra files to be passed to user_data
                          upon creation.
                        items:
                          description: File defines the input for generating write_files
                            in cloud-init.
                          properties:
                            content:
                              description: Content is the actual content of the file.
                              type: string
                            contentFrom:
                              description: ContentFrom is a referenced source of content
                                to populate the file.
                              properties:
                                configMap:
                                  description: ConfigMapFileSource represents a config
                                    map that should populate this file.
                                  properties:
                                    key:
                                      description: Key is the key in the secret or
                                        config map's data map for this value.
                                      type: string
                                    name:
                                      description: Name of the secret/configmap to
                                        use.
                                      type: string
                                    namespace:
                                      description: Namespace of the secret/configmap.
                                        Defaults to the RKE2BootstrapConfig's namespace.
                                      type: string
                                  required:
                                  - key
                                  - name
                                  type: object
                                secret:
                                  description: SecretFileSource represents a secret
                                    that should populate this file.
                                  properties:
                                    key:
                                      description: Key is the key in the secret or
                                        config map's data map for this value.
                                      type: string
                                    name:
                                      description: Name of the secret/configmap to
                                        use.
                                      type: string
                                    namespace:
                                      description: Namespace of the secret/configmap.
                                        Defaults to the RKE2BootstrapConfig's namespace.
                                      type: string
                                  required:
                                  - key
                                  - name
                                  type: object
                              type: object
                              x-kubernetes-validations:
                              - message: Only configMap or secret can be populated
                                  at once
                                rule: '!(has(self.secret) && has(self.configMap))'
                            encoding:
                              description: Encoding specifies the encoding of the
                                file contents.
                              enum:
                              - base64
                              - gzip
                              - gzip+base64
                              type: string
                            owner:
                              description: Owner specifies the ownership of the file,
                                e.g. "root:root".
                              type: string
                            path:
                              description: Path specifies the full path on disk where
                                to store the file.
                              type: string
                            permissions:
                              description: Permissions specifies the permissions to
                                assign to the file, e.g. "0640".
                              type: string
                          required:
                          - path
                          type: object
                        type: array
                      gzipUserData:
                        description: GzipUserData specifies if the user data should
                          be gzipped.
                        type: boolean
                      infrastructureRef:
                        description: |-
                          InfrastructureRef is a required reference to a custom resource
                          offered by an infrastructure provider.
                          This field is deprecated. Use `.machineTemplate.infrastructureRef` instead.
                        properties:
                          apiVersion:
                            description: API version of the referent.
                            type: string
                          fieldPath:
                            description: |-
                              If referring to a piece of an object instead of an entire object, this string
                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                              For example, if the object reference is to a container within a pod, this would take on a value like:
                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                              the event) or if no container name is specified "spec.containers[2]" (container with
                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                              referencing a part of an object.
                            type: string
                          kind:
                            description: |-
                              Kind of the referent.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                            type: string
                          name:
                            description: |-
                              Name of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                            type: string
                          namespace:
                            description: |-
                              Namespace of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                            type: string
                          resourceVersion:
                            description: |-
                              Specific resourceVersion to which this reference is made, if any.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                            type: string
                          uid:
                            description: |-
                              UID of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      machineTemplate:
                        description: |-
                          MachineTemplate contains information about how machines
                          should be shaped when creating or updating a control plane.
                        properties:
                          infrastructureRef:
                            description: |-
                              InfrastructureRef is a required reference to a custom resource
                              offered by an infrastructure provider.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          metadata:
                            description: |-
                              Standard object's metadata.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                            properties:
                              annotations:
                                additionalProperties:
                                  type: string
                                description: |-
                                  annotations is an unstructured key value map stored with a resource that may be
                                  set by external tools to store and retrieve arbitrary metadata. They are not
                                  queryable and should be preserved when modifying objects.
                                  More info: http://kubernetes.io/docs/user-guide/annotations
                                type: object
                              labels:
                                additionalProperties:
                                  type: string
                                description: |-
                                  labels is a map of string keys and values that can be used to organize and categorize
                                  (scope and select) objects. May match selectors of replication controllers
                                  and services.
                                  More info: http://kubernetes.io/docs/user-guide/labels
                                type: object
                            type: object
                          nodeDeletionTimeout:
                            description: |-
                              nodeDeletionTimeout defines how long the machine controller will attempt to delete the Node that the Machine
                              hosts after the Machine is marked for deletion. A duration of 0 will retry deletion indefinitely.
                              If no value is provided, the default value for this property of the Machine resource will be used.
                            type: string
                          nodeDrainTimeout:
                            description: |-
                              NodeDrainTimeout is the total amount of time that the controller will spend on draining a controlplane node
                              The default value is 0, meaning that the node can be drained without any time limitations.
                              NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`
                            type: string
                          nodeVolumeDetachTimeout:
                            description: |-
                              nodeVolumeDetachTimeout is the total amount of time that the controller will spend on waiting for all volumes
                              to be detached. The default value is 0, meaning that the volumes can be detached without any time limitations.
                            type: string
                        required:
                        - infrastructureRef
                        type: object
                      manifestsConfigMapReference:
                        description: |-
                          ManifestsConfigMapReference references a ConfigMap which contains Kubernetes manifests to be deployed automatically on the cluster
                          Each data entry in the ConfigMap will be will be copied to a folder on the control plane nodes that RKE2 scans and uses to deploy manifests.
                        properties:
                          apiVersion:
                            description: API version of the referent.
                            type: string
                          fieldPath:
                            description: |-
                              If referring to a piece of an object instead of an entire object, this string
                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                              For example, if the object reference is to a container within a pod, this would take on a value like:
                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                              the event) or if no container name is specified "spec.containers[2]" (container with
                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                              referencing a part of an object.
                            type: string
                          kind:
                            description: |-
                              Kind of the referent.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                            type: string
                          name:
                            description: |-
                              Name of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                            type: string
                          namespace:
                            description: |-
                              Namespace of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                            type: string
                          resourceVersion:
                            description: |-
                              Specific resourceVersion to which this reference is made, if any.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                            type: string
                          uid:
                            description: |-
                              UID of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      nodeDrainTimeout:
                        description: |-
                          NodeDrainTimeout is the total amount of time that the controller will spend on draining a controlplane node
                          The default value is 0, meaning that the node can be drained without any time limitations.
                          NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`
                          This field is deprecated. Use `.machineTemplate.nodeDrainTimeout` instead.
                        type: string
                      postRKE2Commands:
                        description: PostRKE2Commands specifies extra commands to
                          run after rke2 setup runs.
                        items:
                          type: string
                        type: array
                      preRKE2Commands:
                        description: PreRKE2Commands specifies extra commands to run
                          before rke2 setup runs.
                        items:
                          type: string
                        type: array
                      privateRegistriesConfig:
                        description: PrivateRegistriesConfig defines the containerd
                          configuration for private registries and local registry
                          mirrors.
                        properties:
                          configs:
                            additionalProperties:
                              description: RegistryConfig contains configuration used
                                to communicate with the registry.
                              properties:
                                authSecret:
                                  description: |-
                                    Auth is a reference to a Secret containing information to authenticate to the registry.
                                    The Secret must provite a username and a password data entry.
                                  properties:
                                    apiVersion:
                                      description: API version of the referent.
                                      type: string
                                    fieldPath:
                                      description: |-
                                        If referring to a piece of an object instead of an entire object, this string
                                        should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                        For example, if the object reference is to a container within a pod, this would take on a value like:
                                        "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                        the event) or if no container name is specified "spec.containers[2]" (container with
                                        index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                        referencing a part of an object.
                                      type: string
                                    kind:
                                      description: |-
                                        Kind of the referent.
                                        More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                      type: string
                                    name:
                                      description: |-
                                        Name of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    namespace:
                                      description: |-
                                        Namespace of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                      type: string
                                    resourceVersion:
                                      description: |-
                                        Specific resourceVersion to which this reference is made, if any.
                                        More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                      type: string
                                    uid:
                                      description: |-
                                        UID of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                      type: string
                                  type: object
                                  x-kubernetes-map-type: atomic
                                tls:
                                  description: |-
                                    TLS is a pair of CA/Cert/Key which then are used when creating the transport
                                    that communicates with the registry.
                                  properties:
                                    insecureSkipVerify:
                                      description: InsecureSkipVerify may be set to
                                        false to skip verifying the registry's certificate,
                                        default is true.
                                      type: boolean
                                    tlsConfigSecret:
                                      description: |-
                                        TLSConfigSecret is a reference to a secret of type `kubernetes.io/tls` thich has up to 3 entries: tls.crt, tls.key and ca.crt
                                        which describe the TLS configuration necessary to connect to the registry.
                                      properties:
                                        apiVersion:
                                          description: API version of the referent.
                                          type: string
                                        fieldPath:
                                          description: |-
                                            If referring to a piece of an object instead of an entire object, this string
                                            should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                            For example, if the object reference is to a container within a pod, this would take on a value like:
                                            "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                            the event) or if no container name is specified "spec.containers[2]" (container with
                                            index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                            referencing a part of an object.
                                          type: string
                                        kind:
                                          description: |-
                                            Kind of the referent.
                                            More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                          type: string
                                        name:
                                          description: |-
                                            Name of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                          type: string
                                        namespace:
                                          description: |-
                                            Namespace of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                          type: string
                                        resourceVersion:
                                          description: |-
                                            Specific resourceVersion to which this reference is made, if any.
                                            More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                          type: string
                                        uid:
                                          description: |-
                                            UID of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                          type: string
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
                              type: object
                            description: |-
                              Configs are configs for each registry.
                              The key is the FDQN or IP of the registry.
                            type: object
                          mirrors:
                            additionalProperties:
                              description: Mirror contains the config related to the
                                registry mirror.
                              properties:
                                endpoint:
                                  description: |-
                                    Endpoints are endpoints for a namespace. CRI plugin will try the endpoints
                                    one by one until a working one is found. The endpoint must be a valid url
                                    with host specified.
                                    The scheme, host and path from the endpoint URL will be used.
                                  items:
                                    type: string
                                  type: array
                                rewrite:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    Rewrites are repository rewrite rules for a namespace. When fetching image resources
                                    from an endpoint and a key matches the repository via regular expression matching
                                    it will be replaced with the corresponding value from the map in the resource request.
                                  type: object
                              type: object
                            description: Mirrors are namespace to mirror mapping for
                              all namespaces.
                            type: object
                        type: object
                      registrationAddress:
                        description: |-
                          RegistrationAddress is an explicit address to use when registering a node. This is required if
                          the registration type is "address". Its for scenarios where a load-balancer or VIP is used.
                        type: string
                      registrationMethod:
                        description: RegistrationMethod is the method to use for registering
                          nodes into the RKE2 cluster.
                        enum:
                        - internal-first
                        - internal-only-ips
                        - external-only-ips
                        - address
                        - control-plane-endpoint
                        - ""
                        type: string
                      remediationStrategy:
                        description: remediationStrategy is the RemediationStrategy
                          that controls how control plane machine remediation happens.
                        properties:
                          maxRetry:
                            description: "maxRetry is the Max number of retries while
                              attempting to remediate an unhealthy machine.\nA retry
                              happens when a machine that was created as a replacement
                              for an unhealthy machine also fails.\nFor example, given
                              a control plane with three machines M1, M2, M3:\n\n\tM1
                              become unhealthy; remediation happens, and M1-1 is created
                              as a replacement.\n\tIf M1-1 (replacement of M1) has
                              problems while bootstrapping it will become unhealthy,
                              and then be\n\tremediated; such operation is considered
                              a retry, remediation-retry #1.\n\tIf M1-2 (replacement
                              of M1-1) becomes unhealthy, remediation-retry #2 will
                              happen, etc.\n\nA retry could happen only after RetryPeriod
                              from the previous retry.\nIf a machine is marked as
                              unhealthy after MinHealthyPeriod from the previous remediation
                              expired,\nthis is not considered a retry anymore because
                              the new issue is assumed unrelated from the previous
                              one.\n\nIf not set, the remedation will be retried infinitely."
                            format: int32
                            type: integer
                          minHealthyPeriod:
                            description: "minHealthyPeriod defines the duration after
                              which RKE2ControlPlane will consider any failure to
                              a machine unrelated\nfrom the previous one. In this
                              case the remediation is not considered a retry anymore,
                              and thus the retry\ncounter restarts from 0. For example,
                              assuming MinHealthyPeriod is set to 1h (default)\n\n\tM1
                              become unhealthy; remediation happens, and M1-1 is created
                              as a replacement.\n\tIf M1-1 (replacement of M1) has
                              problems within the 1hr after the creation, also\n\tthis
                              machine will be remediated and this operation is considered
                              a retry - a problem related\n\tto the original issue
                              happened to M1 -.\n\n\tIf instead the problem on M1-1
                              is happening after MinHealthyPeriod expired, e.g. four
                              days after\n\tm1-1 has been created as a remediation
                              of M1, the problem on M1-1 is considered unrelated to\n\tthe
                              original issue happened to M1.\n\nIf not set, this value
                              is defaulted to 1h."
                            type: string
                          retryPeriod:
                            description: |-
                              retryPeriod is the duration that RKE2ControlPlane should wait before remediating a machine being created as a replacement
                              for an unhealthy machine (a retry).

                              If not set, a retry will happen immediately.
                            type: string
                        type: object
                      replicas:
                        description: Replicas is the number of replicas for the Control
                          Plane.
                        format: int32
                        type: integer
                      rolloutStrategy:
                        description: The RolloutStrategy to use to replace control
                          plane machines with new ones.
                        properties:
                          rollingUpdate:
                            description: Rolling update config params. Present only
                              if RolloutStrategyType = RollingUpdate.
                            properties:
                              maxSurge:
                                anyOf:
                                - type: integer
                                - type: string
                                description: |-
                                  The maximum number of control planes that can be scheduled above or under the
                                  desired number of control planes.
                                  Value can be an absolute number 1 or 0.
                                  Defaults to 1.
                                  Example: when this is set to 1, the control plane can be scaled
                                  up immediately when the rolling update starts.
                                x-kubernetes-int-or-string: true
                            type: object
                          type:
                            description: |-
                              Type of rollout. Currently the only supported strategy is "RollingUpdate".
                              Default is RollingUpdate.
                            type: string
                        type: object
                      serverConfig:
                        description: ServerConfig specifies configuration for the
                          agent nodes.
                        properties:
                          advertiseAddress:
                            description: 'AdvertiseAddress IP address that apiserver
                              uses to advertise to members of the cluster (default:
                              node-external-ip/node-ip).'
                            type: string
                          auditPolicySecret:
                            description: AuditPolicySecret path to the file that defines
                              the audit policy configuration.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          bindAddress:
                            description: 'BindAddress describes the rke2 bind address
                              (default: 0.0.0.0).'
                            type: string
                          cloudControllerManager:
                            description: CloudControllerManager defines optional custom
                              configuration of the Cloud Controller Manager.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          cloudProviderConfigMap:
                            description: |-
                              CloudProviderConfigMap is a reference to a ConfigMap containing Cloud provider configuration.
                              The config map must contain a key named cloud-config.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          cloudProviderName:
                            description: CloudProviderName cloud provider name.
                            type: string
                          clusterDNS:
                            description: 'ClusterDNS is the cluster IP for CoreDNS
                              service. Should be in your service-cidr range (default:
                              10.43.0.10).'
                            type: string
                          clusterDomain:
                            description: 'ClusterDomain is the cluster domain name
                              (default: "cluster.local").'
                            type: string
                          cni:
                            description: |-
                              CNI describes the CNI Plugins to deploy, one of none, calico, canal, cilium;
                              optionally with multus as the first value to enable the multus meta-plugin (default: canal).
                            enum:
                            - none
                            - calico
                            - canal
                            - cilium
                            type: string
                          cniMultusEnable:
                            description: |-
                              CNIMultusEnable enables multus as the first CNI plugin (default: false).
                              This option will automatically make Multus a primary CNI, and the value, if specified in the CNI field, as a secondary CNI plugin.
                            type: boolean
                          disableComponents:
                            description: DisableComponents lists Kubernetes components
                              and RKE2 plugin components that will be disabled.
                            properties:
                              kubernetesComponents:
                                description: KubernetesComponents is a list of Kubernetes
                                  components to disable.
                                items:
                                  description: 'DisabledKubernetesComponent is an
                                    enum field that can take one of the following
                                    values: scheduler, kubeProxy or cloudController.'
                                  enum:
                                  - scheduler
                                  - kubeProxy
                                  - cloudController
                                  type: string
                                type: array
                              pluginComponents:
                                description: PluginComponents is a list of PluginComponents
                                  to disable.
                                items:
                                  description: DisabledPluginComponent selects a plugin
                                    Components to be disabled.
                                  enum:
                                  - rke2-coredns
                                  - rke2-ingress-nginx
                                  - rke2-metrics-server
                                  - rke2-snapshot-controller
                                  - rke2-snapshot-controller-crd
                                  - rke2-snapshot-validation-webhook
                                  type: string
                                type: array
                            type: object
                          embeddedRegistry:
                            description: EmbeddedRegistry enables the embedded registry.
                            type: boolean
                          etcd:
                            description: Etcd defines optional custom configuration
                              of ETCD.
                            properties:
                              backupConfig:
                                description: 'BackupConfig defines how RKE2 will snapshot
                                  ETCD: target storage, schedule, etc.'
                                properties:
                                  directory:
                                    description: Directory to save db snapshots.
                                    type: string
                                  disableAutomaticSnapshots:
                                    description: |-
                                      DisableAutomaticSnapshots defines the policy for ETCD snapshots.
                                      true means automatic snapshots will be scheduled, false means automatic snapshots will not be scheduled.
                                    type: boolean
                                  retention:
                                    description: 'Retention Number of snapshots to
                                      retain Default: 5 (default: 5).'
                                    type: string
                                  s3:
                                    description: S3 Enable backup to an S3-compatible
                                      Object Store.
                                    properties:
                                      bucket:
                                        description: Bucket S3 bucket name.
                                        type: string
                                      endpoint:
                                        description: 'Endpoint S3 endpoint url (default:
                                          "s3.amazonaws.com").'
                                        type: string
                                      endpointCAsecret:
                                        description: |-
                                          EndpointCA references the Secret that contains a custom CA that should be trusted to connect to S3 endpoint.
                                          The secret must contain a key named "ca.pem" that contains the CA certificate.
                                        properties:
                                          apiVersion:
                                            description: API version of the referent.
                                            type: string
                                          fieldPath:
                                            description: |-
                                              If referring to a piece of an object instead of an entire object, this string
                                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                              For example, if the object reference is to a container within a pod, this would take on a value like:
                                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                              the event) or if no container name is specified "spec.containers[2]" (container with
                                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                              referencing a part of an object.
                                            type: string
                                          kind:
                                            description: |-
                                              Kind of the referent.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                            type: string
                                          name:
                                            description: |-
                                              Name of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                            type: string
                                          namespace:
                                            description: |-
                                              Namespace of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                            type: string
                                          resourceVersion:
                                            description: |-
                                              Specific resourceVersion to which this reference is made, if any.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                            type: string
                                          uid:
                                            description: |-
                                              UID of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                            type: string
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      enforceSslVerify:
                                        description: EnforceSSLVerify may be set to
                                          false to skip verifying the registry's certificate,
                                          default is true.
                                        type: boolean
                                      folder:
                                        description: Folder S3 folder.
                                        type: string
                                      region:
                                        description: 'Region S3 region / bucket location
                                          (optional) (default: "us-east-1").'
                                        type: string
                                      s3CredentialSecret:
                                        description: |-
                                          S3CredentialSecret is a reference to a Secret containing the Access Key and Secret Key necessary to access the target S3 Bucket.
                                          The Secret must contain the following keys: "aws_access_key_id" and "aws_secret_access_key".
                                          If empty, the controller will default to IAM authentication
                                        properties:
                                          apiVersion:
                                            description: API version of the referent.
                                            type: string
                                          fieldPath:
                                            description: |-
                                              If referring to a piece of an object instead of an entire object, this string
                                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                              For example, if the object reference is to a container within a pod, this would take on a value like:
                                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                              the event) or if no container name is specified "spec.containers[2]" (container with
                                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                              referencing a part of an object.
                                            type: string
                                          kind:
                                            description: |-
                                              Kind of the referent.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                            type: string
                                          name:
                                            description: |-
                                              Name of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                            type: string
                                          namespace:
                                            description: |-
                                              Namespace of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                            type: string
                                          resourceVersion:
                                            description: |-
                                              Specific resourceVersion to which this reference is made, if any.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                            type: string
                                          uid:
                                            description: |-
                                              UID of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                            type: string
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                    - endpoint
                                    type: object
                                  scheduleCron:
                                    description: 'ScheduleCron Snapshot interval time
                                      in cron spec. eg. every 5 hours ''* */5 * *
                                      *'' (default: "0 */12 * * *").'
                                    type: string
                                  snapshotName:
                                    description: 'SnapshotName Set the base name of
                                      etcd snapshots. Default: etcd-snapshot-<unix-timestamp>
                                      (default: "etcd-snapshot").'
                                    type: string
                                type: object
                              customConfig:
                                description: CustomConfig defines the custom settings
                                  for ETCD.
                                properties:
                                  extraArgs:
                                    description: 'ExtraArgs is a list of command line
                                      arguments (format: flag=value) to pass to a
                                      Kubernetes Component command.'
                                    items:
                                      type: string
                                    type: array
                                  extraEnv:
                                    additionalProperties:
                                      type: string
                                    description: ExtraEnv is a map of environment
                                      variables to pass on to a Kubernetes Component
                                      command.
                                    type: object
                                  extraMounts:
                                    additionalProperties:
                                      type: string
                                    description: ExtraMounts is a map of volume mounts
                                      to be added for the Kubernetes component StaticPod
                                    type: object
                                  overrideImage:
                                    description: OverrideImage is a string that references
                                      a container image to override the default one
                                      for the Kubernetes Component
                                    type: string
                                type: object
                              exposeMetrics:
                                description: |-
                                  ExposeEtcdMetrics defines the policy for ETCD Metrics exposure.
                                  if value is true, ETCD metrics will be exposed
                                  if value is false, ETCD metrics will NOT be exposed
                                type: boolean
                            type: object
                          externalDatastoreSecret:
                            description: |-
                              ExternalDatastoreSecret is a reference to a Secret that contains configuration about connecting to an external datastore.
                              The secret must contain a key named "endpoint" that contains the connection string for the external datastore.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          kubeAPIServer:
                            description: KubeAPIServer defines optional custom configuration
                              of the Kube API Server.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeControllerManager:
                            description: KubeControllerManager defines optional custom
                              configuration of the Kube Controller Manager.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeScheduler:
                            description: KubeScheduler defines optional custom configuration
                              of the Kube Scheduler.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          pauseImage:
                            description: PauseImage Override image to use for pause.
                            type: string
                          secretsEncryption:
                            description: SecretsEncrytion defines encryption at rest
                              configuration
                            properties:
                              encryptionKeySecret:
                                description: EncyptionKey secret reference
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              provider:
                                description: Encryption provider
                                enum:
                                - aescbc
                                - secretbox
                                type: string
                            type: object
                          serviceNodePortRange:
                            description: 'ServiceNodePortRange is the port range to
                              reserve for services with NodePort visibility (default:
                              "30000-32767").'
                            type: string
                          supervisorMetrics:
                            description: SupervisorMetrics enables the RKE2 supervisor
                              metrics endpoint on port 9345.
                            type: boolean
                          tlsSan:
                            description: TLSSan Add additional hostname or IP as a
                              Subject Alternative Name in the TLS cert.
                            items:
                              type: string
                            type: array
                        type: object
                      version:
                        description: Version defines the desired Kubernetes version.
                        pattern: (v\d\.\d{2}\.\d+\+rke2r\d)|^$
                        type: string
                    required:
                    - rolloutStrategy
                    type: object
                required:
                - spec
                type: object
            required:
            - template
            type: object
          status:
            description: Status is the current state of the control plane.
            properties:
              availableServerIPs:
                description: AvailableServerIPs is a list of the Control Plane IP
                  adds that can be used to register further nodes.
                items:
                  type: string
                type: array
              conditions:
                description: Conditions defines current service state of the RKE2Config.
                items:
                  description: Condition defines an observation of a Cluster API resource
                    operational state.
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed. If that is not known, then using the time when
                        the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This field may be empty.
                      maxLength: 10240
                      minLength: 1
                      type: string
                    reason:
                      description: |-
                        reason is the reason for the condition's last transition in CamelCase.
                        The specific API may choose whether or not this field is considered a guaranteed API.
                        This field may be empty.
                      maxLength: 256
                      minLength: 1
                      type: string
                    severity:
                      description: |-
                        severity provides an explicit classification of Reason code, so the users or machines can immediately
                        understand the current situation and act accordingly.
                        The Severity field MUST be set only when Status=False.
                      maxLength: 32
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      type: string
                    type:
                      description: |-
                        type of condition in CamelCase or in foo.example.com/CamelCase.
                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
                        can be useful (see .node.status.conditions), the ability to deconflict is important.
                      maxLength: 256
                      minLength: 1
                      type: string
                  required:
                  - lastTransitionTime
                  - status
                  - type
                  type: object
                type: array
              dataSecretName:
                description: DataSecretName is the name of the secret that stores
                  the bootstrap data script.
                type: string
              failureMessage:
                description: |-
                  FailureMessage will be set on non-retryable errors.

                  Deprecated: This field is deprecated and is going to be removed when support for v1beta1 is dropped.
                type: string
              failureReason:
                description: |-
                  FailureReason will be set on non-retryable errors.

                  Deprecated: This field is deprecated and is going to be removed when support for v1beta1 is dropped.
                type: string
              initialized:
                description: Initialized indicates the target cluster has completed
                  initialization.
                type: boolean
              lastRemediation:
                description: lastRemediation stores info about last remediation performed.
                properties:
                  machine:
                    description: machine is the machine name of the latest machine
                      being remediated.
                    maxLength: 253
                    minLength: 1
                    type: string
                  retryCount:
                    description: |-
                      retryCount used to keep track of remediation retry for the last remediated machine.
                      A retry happens when a machine that was created as a replacement for an unhealthy machine also fails.
                    type: integer
                  timestamp:
                    description: timestamp is when last remediation happened. It is
                      represented in RFC3339 form and is in UTC.
                    format: date-time
                    type: string
                required:
                - machine
                - retryCount
                - timestamp
                type: object
              observedGeneration:
                description: ObservedGeneration is the latest generation observed
                  by the controller.
                format: int64
                type: integer
              ready:
                description: |-
                  Ready denotes that the RKE2ControlPlane API Server became ready during initial provisioning
                  to receive requests.
                  NOTE: this field is part of the Cluster API contract and it is used to orchestrate provisioning.
                  The value of this field is never updated after provisioning is completed. Please use conditions
                  to check the operational state of the control plane.
                type: boolean
              readyReplicas:
                description: ReadyReplicas is the number of replicas current attached
                  to this ControlPlane Resource and that have Ready Status.
                format: int32
                type: integer
              replicas:
                description: Replicas is the number of replicas current attached to
                  this ControlPlane Resource.
                format: int32
                type: integer
              unavailableReplicas:
                description: UnavailableReplicas is the number of replicas current
                  attached to this ControlPlane Resource and that are up-to-date with
                  Control Plane config.
                format: int32
                type: integer
              updatedReplicas:
                description: UpdatedReplicas is the number of replicas current attached
                  to this ControlPlane Resource and that are up-to-date with Control
                  Plane config.
                format: int32
                type: integer
              v1beta2:
                description: v1beta2 groups all the fields that will be added or modified
                  in RKE2ControlPlane's status with the V1Beta2 version.
                properties:
                  availableReplicas:
                    description: |-
                      availableReplicas is the number of available replicas targeted by this RKE2ControlPlane.
                      A machine is considered available when Machine's Available condition is true.
                    format: int32
                    type: integer
                  conditions:
                    description: |-
                      conditions represents the observations of a RKE2ControlPlane's current state.
                      Known condition types are Available, CertificatesAvailable, EtcdClusterAvailable, MachinesReady, MachinesUpToDate,
                      ScalingUp, ScalingDown, Remediating, Deleting, Paused.
                    items:
                      description: Condition contains details for one aspect of the
                        current state of this API Resource.
                      properties:
                        lastTransitionTime:
                          description: |-
                            lastTransitionTime is the last time the condition transitioned from one status to another.
                            This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                          format: date-time
                          type: string
                        message:
                          description: |-
                            message is a human readable message indicating details about the transition.
                            This may be an empty string.
                          maxLength: 32768
                          type: string
                        observedGeneration:
                          description: |-
                            observedGeneration represents the .metadata.generation that the condition was set based upon.
                            For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                            with respect to the current state of the instance.
                          format: int64
                          minimum: 0
                          type: integer
                        reason:
                          description: |-
                            reason contains a programmatic identifier indicating the reason for the condition's last transition.
                            Producers of specific condition types may define expected values and meanings for this field,
                            and whether the values are considered a guaranteed API.
                            The value should be a CamelCase string.
                            This field may not be empty.
                          maxLength: 1024
                          minLength: 1
                          pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                          type: string
                        status:
                          description: status of the condition, one of True, False,
                            Unknown.
                          enum:
                          - "True"
                          - "False"
                          - Unknown
                          type: string
                        type:
                          description: type of condition in CamelCase or in foo.example.com/CamelCase.
                          maxLength: 316
                          pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                          type: string
                      required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                      type: object
                    maxItems: 32
                    type: array
                    x-kubernetes-list-map-keys:
                    - type
                    x-kubernetes-list-type: map
                  readyReplicas:
                    description: readyReplicas is the number of ready replicas for
                      this RKE2ControlPlane. A machine is considered ready when Machine's
                      Ready condition is true.
                    format: int32
                    type: integer
                  upToDateReplicas:
                    description: |-
                      upToDateReplicas is the number of up-to-date replicas targeted by this RKE2ControlPlane.
                      A machine is considered up-to-date when Machine's UpToDate condition is true.
                    format: int32
                    type: integer
                type: object
              version:
                description: |-
                  Version represents the minimum Kubernetes version for the control plane machines
                  in the cluster.
                type: string
            type: object
        type: object
    served: true
    storage: false
  - additionalPrinterColumns:
    - description: Name of the ClusterClass owning this template
      jsonPath: .metadata.ownerReferences[?(@.kind=="ClusterClass")].name
      name: ClusterClass
      type: string
    - description: Time duration since creation of RKE2ControlPlaneTemplate
      jsonPath: .metadata.creationTimestamp
      name: Age
      type: date
    name: v1beta2
    schema:
      openAPIV3Schema:
        description: RKE2ControlPlaneTemplate is the Schema for the rke2controlplanetemplates
          API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: Spec is the control plane specification for the template
              resource.
            properties:
              template:
                description: template defines the desired state of RKE2ControlPlaneTemplate.
                properties:
                  spec:
                    description: Spec is the specification of the desired behavior
                      of the control plane.
                    properties:
                      agentConfig:
                        description: AgentConfig specifies configuration for the agent
                          nodes.
                        properties:
                          additionalUserData:
                            description: |-
                              AdditionalUserData is a field that allows users to specify additional cloud-init or ignition configuration to be included in the
                              generated cloud-init/ignition script.
                            properties:
                              config:
                                description: |-
                                  In case of using ignition, the data format is documented here: https://kinvolk.io/docs/flatcar-container-linux/latest/provisioning/cl-config/
                                  NOTE: All fields of the UserData that are managed by the RKE2Config controller will be ignored, this include "write_files", "runcmd", "ntp".
                                type: string
                              data:
                                additionalProperties:
                                  type: string
                                description: |-
                                  Data allows to pass arbitrary set of key/value pairs consistent with
                                  https://cloudinit.readthedocs.io/en/latest/reference/modules.html
                                  to extend existing cloud-init configuration
                                type: object
                              strict:
                                description: Strict controls if Config should be strictly
                                  parsed. If so, warnings are treated as errors.
                                type: boolean
                            type: object
                            x-kubernetes-validations:
                            - message: Only config or data could be populated at once
                              rule: '!has(self.data) || !has(self.config)'
                          airGapped:
                            description: |-
                              AirGapped is a boolean value to define if the bootstrapping should be air-gapped,
                              basically supposing that online container registries and RKE2 install scripts are not reachable.
                            type: boolean
                          airGappedChecksum:
                            description: |-
                              AirGappedChecksum is a string value with a sha256sum checksum to compare with checksum
                              of existing sha256sum-<arch>.txt file for packages already available on the machine
                              before performing air-gapped installation.
                            type: string
                          cisProfile:
                            description: CISProfile activates CIS compliance of RKE2
                              for a certain profile
                            enum:
                            - cis
                            - cis-1.23
                            - cis-1.5
                            - cis-1.6
                            type: string
                          containerRuntimeEndpoint:
                            description: ContainerRuntimeEndpoint Disable embedded
                              containerd and use alternative CRI implementation.
                            type: string
                          dataDir:
                            description: DataDir Folder to hold state.
                            type: string
                          enableContainerdSElinux:
                            description: |-
                              EnableContainerdSElinux defines the policy for enabling SELinux for Containerd
                              if value is true, Containerd will run with selinux-enabled=true flag
                              if value is false, Containerd will run without the above flag
                            type: boolean
                          format:
                            description: Format specifies the output format of the
                              bootstrap data. Defaults to cloud-config.
                            enum:
                            - cloud-config
                            - ignition
                            type: string
                          imageCredentialProviderConfigMap:
                            description: |-
                              ImageCredentialProviderConfigMap is a reference to the ConfigMap that contains credential provider plugin config
                              The config map should contain a key "credential-config.yaml" with YAML file content and
                              a key "credential-provider-binaries" with the a path to the binaries for the credential provider.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          kubeProxy:
                            description: KubeProxyArgs Customized flag for kube-proxy
                              process.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubelet:
                            description: KubeletArgs Customized flag for kubelet process.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeletPath:
                            description: KubeletPath Override kubelet binary path.
                            type: string
                          loadBalancerPort:
                            description: |-
                              LoadBalancerPort local port for supervisor client load-balancer. If the supervisor and apiserver are
                              not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer (default: 6444).
                            type: integer
                          nodeAnnotations:
                            additionalProperties:
                              type: string
                            description: |-
                              NodeAnnotations  are annotations that are created on nodes post bootstrap phase.
                              Unfortunately it is not possible to apply annotations via kubelet
                              using current bootstrap configurations.
                              Issue: https://github.com/kubernetes/kubernetes/issues/108046
                            type: object
                          nodeLabels:
                            description: NodeLabels  Registering and starting kubelet
                              with set of labels.
                            items:
                              type: string
                            type: array
                          nodeName:
                            description: NodeNamePrefix Prefix to the Node Name that
                              CAPI will generate.
                            type: string
                          nodeTaints:
                            description: NodeTaints Registering kubelet with set of
                              taints.
                            items:
                              type: string
                            type: array
                          ntp:
                            description: NTP specifies NTP configuration
                            properties:
                              enabled:
                                description: Enabled specifies whether NTP should
                                  be enabled
                                type: boolean
                              servers:
                                description: Servers specifies which NTP servers to
                                  use
                                items:
                                  type: string
                                type: array
                            type: object
                          podSecurityAdmissionConfigFile:
                            description: |-
                              PodSecurityPolicyConfigFile contains the path to the PodSecurityPolicy configuration file. The file can be passed through
                              spec.Files field.
                            type: string
                          protectKernelDefaults:
                            description: |-
                              ProtectKernelDefaults defines Kernel tuning behavior. If true, error if kernel tunables are different than kubelet defaults.
                              if false, kernel tunable can be different from kubelet defaults
                            type: boolean
                          resolvConf:
                            description: ResolvConf is a reference to a ConfigMap
                              containing resolv.conf content for the node.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          runtimeImage:
                            description: RuntimeImage override image to use for runtime
                              binaries (containerd, kubectl, crictl, etc).
                            type: string
                          snapshotter:
                            description: 'Snapshotter override default containerd
                              snapshotter (default: "overlayfs").'
                            type: string
                          systemDefaultRegistry:
                            description: SystemDefaultRegistry Private registry to
                              be used for all system images.
                            type: string
                        type: object
                      files:
                        description: Files specifies extra files to be passed to user_data
                          upon creation.
                        items:
                          description: File defines the input for generating write_files
                            in cloud-init.
                          properties:
                            content:
                              description: Content is the actual content of the file.
                              type: string
                            contentFrom:
                              description: ContentFrom is a referenced source of content
                                to populate the file.
                              properties:
                                configMap:
                                  description: ConfigMapFileSource represents a config
                                    map that should populate this file.
                                  properties:
                                    key:
                                      description: Key is the key in the secret or
                                        config map's data map for this value.
                                      type: string
                                    name:
                                      description: Name of the secret/configmap to
                                        use.
                                      type: string
                                    namespace:
                                      description: Namespace of the secret/configmap.
                                        Defaults to the RKE2BootstrapConfig's namespace.
                                      type: string
                                  required:
                                  - key
                                  - name
                                  type: object
                                secret:
                                  description: SecretFileSource represents a secret
                                    that should populate this file.
                                  properties:
                                    key:
                                      description: Key is the key in the secret or
                                        config map's data map for this value.
                                      type: string
                                    name:
                                      description: Name of the secret/configmap to
                                        use.
                                      type: string
                                    namespace:
                                      description: Namespace of the secret/configmap.
                                        Defaults to the RKE2BootstrapConfig's namespace.
                                      type: string
                                  required:
                                  - key
                                  - name
                                  type: object
                              type: object
                              x-kubernetes-validations:
                              - message: Only configMap or secret can be populated
                                  at once
                                rule: '!(has(self.secret) && has(self.configMap))'
                            encoding:
                              description: Encoding specifies the encoding of the
                                file contents.
                              enum:
                              - base64
                              - gzip
                              - gzip+base64
                              type: string
                            owner:
                              description: Owner specifies the ownership of the file,
                                e.g. "root:root".
                              type: string
                            path:
                              description: Path specifies the full path on disk where
                                to store the file.
                              type: string
                            permissions:
                              description: Permissions specifies the permissions to
                                assign to the file, e.g. "0640".
                              type: string
                          required:
                          - path
                          type: object
                        type: array
                      gzipUserData:
                        description: GzipUserData specifies if the user data should
                          be gzipped.
                        type: boolean
                      machineTemplate:
                        description: |-
                          MachineTemplate contains information about how machines
                          should be shaped when creating or updating a control plane.
                        properties:
                          metadata:
                            description: |-
                              Standard object's metadata.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                            minProperties: 1
                            properties:
                              annotations:
                                additionalProperties:
                                  type: string
                                description: |-
                                  annotations is an unstructured key value map stored with a resource that may be
                                  set by external tools to store and retrieve arbitrary metadata. They are not
                                  queryable and should be preserved when modifying objects.
                                  More info: http://kubernetes.io/docs/user-guide/annotations
                                type: object
                              labels:
                                additionalProperties:
                                  type: string
                                description: |-
                                  labels is a map of string keys and values that can be used to organize and categorize
                                  (scope and select) objects. May match selectors of replication controllers
                                  and services.
                                  More info: http://kubernetes.io/docs/user-guide/labels
                                type: object
                            type: object
                          spec:
                            description: |-
                              spec defines the spec for Machines
                              in a RKE2ControlPlane object.
                            properties:
                              deletion:
                                description: deletion contains configuration options
                                  for Machine deletion.
                                minProperties: 1
                                properties:
                                  nodeDeletionTimeoutSeconds:
                                    description: |-
                                      nodeDeletionTimeoutSeconds defines how long the machine controller will attempt to delete the Node that the Machine
                                      hosts after the Machine is marked for deletion. A duration of 0 will retry deletion indefinitely.
                                      If no value is provided, the default value for this property of the Machine resource will be used.
                                    format: int32
                                    minimum: 0
                                    type: integer
                                  nodeDrainTimeoutSeconds:
                                    description: |-
                                      nodeDrainTimeoutSeconds is the total amount of time that the controller will spend on draining a controlplane node
                                      The default value is 0, meaning that the node can be drained without any time limitations.
                                      NOTE: nodeDrainTimeoutSeconds is different from `kubectl drain --timeout`
                                    format: int32
                                    minimum: 0
                                    type: integer
                                  nodeVolumeDetachTimeoutSeconds:
                                    description: |-
                                      nodeVolumeDetachTimeoutSeconds is the total amount of time that the controller will spend on waiting for all volumes
                                      to be detached. The default value is 0, meaning that the volumes can be detached without any time limitations.
                                    format: int32
                                    minimum: 0
                                    type: integer
                                type: object
                              infrastructureRef:
                                description: |-
                                  infrastructureRef is a required reference to a custom resource
                                  offered by an infrastructure provider.
                                properties:
                                  apiGroup:
                                    description: |-
                                      apiGroup is the group of the resource being referenced.
                                      apiGroup must be fully qualified domain name.
                                      The corresponding version for this reference will be looked up from the contract
                                      labels of the corresponding CRD of the resource being referenced.
                                    maxLength: 253
                                    minLength: 1
                                    pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                    type: string
                                  kind:
                                    description: |-
                                      kind of the resource being referenced.
                                      kind must consist of alphanumeric characters or '-', start with an alphabetic character, and end with an alphanumeric character.
                                    maxLength: 63
                                    minLength: 1
                                    pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
                                    type: string
                                  name:
                                    description: |-
                                      name of the resource being referenced.
                                      name must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
                                    maxLength: 253
                                    minLength: 1
                                    pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                    type: string
                                required:
                                - apiGroup
                                - kind
                                - name
                                type: object
                            required:
                            - infrastructureRef
                            type: object
                        required:
                        - spec
                        type: object
                      manifestsConfigMapReference:
                        description: |-
                          ManifestsConfigMapReference references a ConfigMap which contains Kubernetes manifests to be deployed automatically on the cluster
                          Each data entry in the ConfigMap will be will be copied to a folder on the control plane nodes that RKE2 scans and uses to deploy manifests.
                        properties:
                          apiVersion:
                            description: API version of the referent.
                            type: string
                          fieldPath:
                            description: |-
                              If referring to a piece of an object instead of an entire object, this string
                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                              For example, if the object reference is to a container within a pod, this would take on a value like:
                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                              the event) or if no container name is specified "spec.containers[2]" (container with
                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                              referencing a part of an object.
                            type: string
                          kind:
                            description: |-
                              Kind of the referent.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                            type: string
                          name:
                            description: |-
                              Name of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                            type: string
                          namespace:
                            description: |-
                              Namespace of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                            type: string
                          resourceVersion:
                            description: |-
                              Specific resourceVersion to which this reference is made, if any.
                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                            type: string
                          uid:
                            description: |-
                              UID of the referent.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      postRKE2Commands:
                        description: PostRKE2Commands specifies extra commands to
                          run after rke2 setup runs.
                        items:
                          type: string
                        type: array
                      preRKE2Commands:
                        description: PreRKE2Commands specifies extra commands to run
                          before rke2 setup runs.
                        items:
                          type: string
                        type: array
                      privateRegistriesConfig:
                        description: PrivateRegistriesConfig defines the containerd
                          configuration for private registries and local registry
                          mirrors.
                        properties:
                          configs:
                            additionalProperties:
                              description: RegistryConfig contains configuration used
                                to communicate with the registry.
                              properties:
                                authSecret:
                                  description: |-
                                    Auth is a reference to a Secret containing information to authenticate to the registry.
                                    The Secret must provite a username and a password data entry.
                                  properties:
                                    apiVersion:
                                      description: API version of the referent.
                                      type: string
                                    fieldPath:
                                      description: |-
                                        If referring to a piece of an object instead of an entire object, this string
                                        should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                        For example, if the object reference is to a container within a pod, this would take on a value like:
                                        "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                        the event) or if no container name is specified "spec.containers[2]" (container with
                                        index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                        referencing a part of an object.
                                      type: string
                                    kind:
                                      description: |-
                                        Kind of the referent.
                                        More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                      type: string
                                    name:
                                      description: |-
                                        Name of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    namespace:
                                      description: |-
                                        Namespace of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                      type: string
                                    resourceVersion:
                                      description: |-
                                        Specific resourceVersion to which this reference is made, if any.
                                        More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                      type: string
                                    uid:
                                      description: |-
                                        UID of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                      type: string
                                  type: object
                                  x-kubernetes-map-type: atomic
                                tls:
                                  description: |-
                                    TLS is a pair of CA/Cert/Key which then are used when creating the transport
                                    that communicates with the registry.
                                  properties:
                                    insecureSkipVerify:
                                      description: InsecureSkipVerify may be set to
                                        false to skip verifying the registry's certificate,
                                        default is true.
                                      type: boolean
                                    tlsConfigSecret:
                                      description: |-
                                        TLSConfigSecret is a reference to a secret of type `kubernetes.io/tls` thich has up to 3 entries: tls.crt, tls.key and ca.crt
                                        which describe the TLS configuration necessary to connect to the registry.
                                      properties:
                                        apiVersion:
                                          description: API version of the referent.
                                          type: string
                                        fieldPath:
                                          description: |-
                                            If referring to a piece of an object instead of an entire object, this string
                                            should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                            For example, if the object reference is to a container within a pod, this would take on a value like:
                                            "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                            the event) or if no container name is specified "spec.containers[2]" (container with
                                            index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                            referencing a part of an object.
                                          type: string
                                        kind:
                                          description: |-
                                            Kind of the referent.
                                            More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                          type: string
                                        name:
                                          description: |-
                                            Name of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                          type: string
                                        namespace:
                                          description: |-
                                            Namespace of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                          type: string
                                        resourceVersion:
                                          description: |-
                                            Specific resourceVersion to which this reference is made, if any.
                                            More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                          type: string
                                        uid:
                                          description: |-
                                            UID of the referent.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                          type: string
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
                              type: object
                            description: |-
                              Configs are configs for each registry.
                              The key is the FDQN or IP of the registry.
                            type: object
                          mirrors:
                            additionalProperties:
                              description: Mirror contains the config related to the
                                registry mirror.
                              properties:
                                endpoint:
                                  description: |-
                                    Endpoints are endpoints for a namespace. CRI plugin will try the endpoints
                                    one by one until a working one is found. The endpoint must be a valid url
                                    with host specified.
                                    The scheme, host and path from the endpoint URL will be used.
                                  items:
                                    type: string
                                  type: array
                                rewrite:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    Rewrites are repository rewrite rules for a namespace. When fetching image resources
                                    from an endpoint and a key matches the repository via regular expression matching
                                    it will be replaced with the corresponding value from the map in the resource request.
                                  type: object
                              type: object
                            description: Mirrors are namespace to mirror mapping for
                              all namespaces.
                            type: object
                        type: object
                      registrationAddress:
                        description: |-
                          RegistrationAddress is an explicit address to use when registering a node. This is required if
                          the registration type is "address". Its for scenarios where a load-balancer or VIP is used.
                        type: string
                      registrationMethod:
                        description: RegistrationMethod is the method to use for registering
                          nodes into the RKE2 cluster.
                        enum:
                        - internal-first
                        - internal-only-ips
                        - external-only-ips
                        - address
                        - control-plane-endpoint
                        - ""
                        type: string
                      remediationStrategy:
                        description: remediationStrategy is the RemediationStrategy
                          that controls how control plane machine remediation happens.
                        properties:
                          maxRetry:
                            description: "maxRetry is the Max number of retries while
                              attempting to remediate an unhealthy machine.\nA retry
                              happens when a machine that was created as a replacement
                              for an unhealthy machine also fails.\nFor example, given
                              a control plane with three machines M1, M2, M3:\n\n\tM1
                              become unhealthy; remediation happens, and M1-1 is created
                              as a replacement.\n\tIf M1-1 (replacement of M1) has
                              problems while bootstrapping it will become unhealthy,
                              and then be\n\tremediated; such operation is considered
                              a retry, remediation-retry #1.\n\tIf M1-2 (replacement
                              of M1-1) becomes unhealthy, remediation-retry #2 will
                              happen, etc.\n\nA retry could happen only after RetryPeriod
                              from the previous retry.\nIf a machine is marked as
                              unhealthy after MinHealthyPeriod from the previous remediation
                              expired,\nthis is not considered a retry anymore because
                              the new issue is assumed unrelated from the previous
                              one.\n\nIf not set, the remedation will be retried infinitely."
                            format: int32
                            type: integer
                          minHealthyPeriod:
                            description: "minHealthyPeriod defines the duration after
                              which RKE2ControlPlane will consider any failure to
                              a machine unrelated\nfrom the previous one. In this
                              case the remediation is not considered a retry anymore,
                              and thus the retry\ncounter restarts from 0. For example,
                              assuming MinHealthyPeriod is set to 1h (default)\n\n\tM1
                              become unhealthy; remediation happens, and M1-1 is created
                              as a replacement.\n\tIf M1-1 (replacement of M1) has
                              problems within the 1hr after the creation, also\n\tthis
                              machine will be remediated and this operation is considered
                              a retry - a problem related\n\tto the original issue
                              happened to M1 -.\n\n\tIf instead the problem on M1-1
                              is happening after MinHealthyPeriod expired, e.g. four
                              days after\n\tm1-1 has been created as a remediation
                              of M1, the problem on M1-1 is considered unrelated to\n\tthe
                              original issue happened to M1.\n\nIf not set, this value
                              is defaulted to 1h."
                            type: string
                          retryPeriod:
                            description: |-
                              retryPeriod is the duration that RKE2ControlPlane should wait before remediating a machine being created as a replacement
                              for an unhealthy machine (a retry).

                              If not set, a retry will happen immediately.
                            type: string
                        type: object
                      rolloutStrategy:
                        description: The Rollout to use to replace control plane machines
                          with new ones.
                        properties:
                          rollingUpdate:
                            description: Rolling update config params. Present only
                              if RolloutStrategyType = RollingUpdate.
                            properties:
                              maxSurge:
                                anyOf:
                                - type: integer
                                - type: string
                                description: |-
                                  The maximum number of control planes that can be scheduled above or under the
                                  desired number of control planes.
                                  Value can be an absolute number 1 or 0.
                                  Defaults to 1.
                                  Example: when this is set to 1, the control plane can be scaled
                                  up immediately when the rolling update starts.
                                x-kubernetes-int-or-string: true
                            type: object
                          type:
                            description: |-
                              Type of rollout. Currently the only supported strategy is "RollingUpdate".
                              Default is RollingUpdate.
                            type: string
                        type: object
                      serverConfig:
                        description: ServerConfig specifies configuration for the
                          agent nodes.
                        properties:
                          advertiseAddress:
                            description: 'AdvertiseAddress IP address that apiserver
                              uses to advertise to members of the cluster (default:
                              node-external-ip/node-ip).'
                            type: string
                          auditPolicySecret:
                            description: AuditPolicySecret path to the file that defines
                              the audit policy configuration.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          bindAddress:
                            description: 'BindAddress describes the rke2 bind address
                              (default: 0.0.0.0).'
                            type: string
                          cloudControllerManager:
                            description: CloudControllerManager defines optional custom
                              configuration of the Cloud Controller Manager.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          cloudProviderConfigMap:
                            description: |-
                              CloudProviderConfigMap is a reference to a ConfigMap containing Cloud provider configuration.
                              The config map must contain a key named cloud-config.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          cloudProviderName:
                            description: CloudProviderName cloud provider name.
                            type: string
                          clusterDNS:
                            description: 'ClusterDNS is the cluster IP for CoreDNS
                              service. Should be in your service-cidr range (default:
                              10.43.0.10).'
                            type: string
                          clusterDomain:
                            description: 'ClusterDomain is the cluster domain name
                              (default: "cluster.local").'
                            type: string
                          cni:
                            description: |-
                              CNI describes the CNI Plugins to deploy, one of none, calico, canal, cilium;
                              optionally with multus as the first value to enable the multus meta-plugin (default: canal).
                            enum:
                            - none
                            - calico
                            - canal
                            - cilium
                            type: string
                          cniMultusEnable:
                            description: |-
                              CNIMultusEnable enables multus as the first CNI plugin (default: false).
                              This option will automatically make Multus a primary CNI, and the value, if specified in the CNI field, as a secondary CNI plugin.
                            type: boolean
                          disableComponents:
                            description: DisableComponents lists Kubernetes components
                              and RKE2 plugin components that will be disabled.
                            properties:
                              kubernetesComponents:
                                description: KubernetesComponents is a list of Kubernetes
                                  components to disable.
                                items:
                                  description: 'DisabledKubernetesComponent is an
                                    enum field that can take one of the following
                                    values: scheduler, kubeProxy or cloudController.'
                                  enum:
                                  - scheduler
                                  - kubeProxy
                                  - cloudController
                                  type: string
                                type: array
                              pluginComponents:
                                description: PluginComponents is a list of PluginComponents
                                  to disable.
                                items:
                                  description: DisabledPluginComponent selects a plugin
                                    Components to be disabled.
                                  enum:
                                  - rke2-coredns
                                  - rke2-ingress-nginx
                                  - rke2-metrics-server
                                  - rke2-snapshot-controller
                                  - rke2-snapshot-controller-crd
                                  - rke2-snapshot-validation-webhook
                                  type: string
                                type: array
                            type: object
                          embeddedRegistry:
                            description: EmbeddedRegistry enables the embedded registry.
                            type: boolean
                          etcd:
                            description: Etcd defines optional custom configuration
                              of ETCD.
                            properties:
                              backupConfig:
                                description: 'BackupConfig defines how RKE2 will snapshot
                                  ETCD: target storage, schedule, etc.'
                                properties:
                                  directory:
                                    description: Directory to save db snapshots.
                                    type: string
                                  disableAutomaticSnapshots:
                                    description: |-
                                      DisableAutomaticSnapshots defines the policy for ETCD snapshots.
                                      true means automatic snapshots will be scheduled, false means automatic snapshots will not be scheduled.
                                    type: boolean
                                  retention:
                                    description: 'Retention Number of snapshots to
                                      retain Default: 5 (default: 5).'
                                    type: string
                                  s3:
                                    description: S3 Enable backup to an S3-compatible
                                      Object Store.
                                    properties:
                                      bucket:
                                        description: Bucket S3 bucket name.
                                        type: string
                                      endpoint:
                                        description: 'Endpoint S3 endpoint url (default:
                                          "s3.amazonaws.com").'
                                        type: string
                                      endpointCAsecret:
                                        description: |-
                                          EndpointCA references the Secret that contains a custom CA that should be trusted to connect to S3 endpoint.
                                          The secret must contain a key named "ca.pem" that contains the CA certificate.
                                        properties:
                                          apiVersion:
                                            description: API version of the referent.
                                            type: string
                                          fieldPath:
                                            description: |-
                                              If referring to a piece of an object instead of an entire object, this string
                                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                              For example, if the object reference is to a container within a pod, this would take on a value like:
                                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                              the event) or if no container name is specified "spec.containers[2]" (container with
                                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                              referencing a part of an object.
                                            type: string
                                          kind:
                                            description: |-
                                              Kind of the referent.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                            type: string
                                          name:
                                            description: |-
                                              Name of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                            type: string
                                          namespace:
                                            description: |-
                                              Namespace of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                            type: string
                                          resourceVersion:
                                            description: |-
                                              Specific resourceVersion to which this reference is made, if any.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                            type: string
                                          uid:
                                            description: |-
                                              UID of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                            type: string
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      enforceSslVerify:
                                        description: EnforceSSLVerify may be set to
                                          false to skip verifying the registry's certificate,
                                          default is true.
                                        type: boolean
                                      folder:
                                        description: Folder S3 folder.
                                        type: string
                                      region:
                                        description: 'Region S3 region / bucket location
                                          (optional) (default: "us-east-1").'
                                        type: string
                                      s3CredentialSecret:
                                        description: |-
                                          S3CredentialSecret is a reference to a Secret containing the Access Key and Secret Key necessary to access the target S3 Bucket.
                                          The Secret must contain the following keys: "aws_access_key_id" and "aws_secret_access_key".
                                          If empty, the controller will default to IAM authentication
                                        properties:
                                          apiVersion:
                                            description: API version of the referent.
                                            type: string
                                          fieldPath:
                                            description: |-
                                              If referring to a piece of an object instead of an entire object, this string
                                              should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                              For example, if the object reference is to a container within a pod, this would take on a value like:
                                              "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                              the event) or if no container name is specified "spec.containers[2]" (container with
                                              index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                              referencing a part of an object.
                                            type: string
                                          kind:
                                            description: |-
                                              Kind of the referent.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                            type: string
                                          name:
                                            description: |-
                                              Name of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                            type: string
                                          namespace:
                                            description: |-
                                              Namespace of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                            type: string
                                          resourceVersion:
                                            description: |-
                                              Specific resourceVersion to which this reference is made, if any.
                                              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                            type: string
                                          uid:
                                            description: |-
                                              UID of the referent.
                                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                            type: string
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                    - endpoint
                                    type: object
                                  scheduleCron:
                                    description: 'ScheduleCron Snapshot interval time
                                      in cron spec. eg. every 5 hours ''* */5 * *
                                      *'' (default: "0 */12 * * *").'
                                    type: string
                                  snapshotName:
                                    description: 'SnapshotName Set the base name of
                                      etcd snapshots. Default: etcd-snapshot-<unix-timestamp>
                                      (default: "etcd-snapshot").'
                                    type: string
                                type: object
                              customConfig:
                                description: CustomConfig defines the custom settings
                                  for ETCD.
                                properties:
                                  extraArgs:
                                    description: 'ExtraArgs is a list of command line
                                      arguments (format: flag=value) to pass to a
                                      Kubernetes Component command.'
                                    items:
                                      type: string
                                    type: array
                                  extraEnv:
                                    additionalProperties:
                                      type: string
                                    description: ExtraEnv is a map of environment
                                      variables to pass on to a Kubernetes Component
                                      command.
                                    type: object
                                  extraMounts:
                                    additionalProperties:
                                      type: string
                                    description: ExtraMounts is a map of volume mounts
                                      to be added for the Kubernetes component StaticPod
                                    type: object
                                  overrideImage:
                                    description: OverrideImage is a string that references
                                      a container image to override the default one
                                      for the Kubernetes Component
                                    type: string
                                type: object
                              exposeMetrics:
                                description: |-
                                  ExposeEtcdMetrics defines the policy for ETCD Metrics exposure.
                                  if value is true, ETCD metrics will be exposed
                                  if value is false, ETCD metrics will NOT be exposed
                                type: boolean
                            type: object
                          externalDatastoreSecret:
                            description: |-
                              ExternalDatastoreSecret is a reference to a Secret that contains configuration about connecting to an external datastore.
                              The secret must contain a key named "endpoint" that contains the connection string for the external datastore.
                            properties:
                              apiVersion:
                                description: API version of the referent.
                                type: string
                              fieldPath:
                                description: |-
                                  If referring to a piece of an object instead of an entire object, this string
                                  should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                  For example, if the object reference is to a container within a pod, this would take on a value like:
                                  "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                  the event) or if no container name is specified "spec.containers[2]" (container with
                                  index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                  referencing a part of an object.
                                type: string
                              kind:
                                description: |-
                                  Kind of the referent.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                type: string
                              name:
                                description: |-
                                  Name of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                type: string
                              namespace:
                                description: |-
                                  Namespace of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                type: string
                              resourceVersion:
                                description: |-
                                  Specific resourceVersion to which this reference is made, if any.
                                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                type: string
                              uid:
                                description: |-
                                  UID of the referent.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                type: string
                            type: object
                            x-kubernetes-map-type: atomic
                          kubeAPIServer:
                            description: KubeAPIServer defines optional custom configuration
                              of the Kube API Server.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeControllerManager:
                            description: KubeControllerManager defines optional custom
                              configuration of the Kube Controller Manager.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          kubeScheduler:
                            description: KubeScheduler defines optional custom configuration
                              of the Kube Scheduler.
                            properties:
                              extraArgs:
                                description: 'ExtraArgs is a list of command line
                                  arguments (format: flag=value) to pass to a Kubernetes
                                  Component command.'
                                items:
                                  type: string
                                type: array
                              extraEnv:
                                additionalProperties:
                                  type: string
                                description: ExtraEnv is a map of environment variables
                                  to pass on to a Kubernetes Component command.
                                type: object
                              extraMounts:
                                additionalProperties:
                                  type: string
                                description: ExtraMounts is a map of volume mounts
                                  to be added for the Kubernetes component StaticPod
                                type: object
                              overrideImage:
                                description: OverrideImage is a string that references
                                  a container image to override the default one for
                                  the Kubernetes Component
                                type: string
                            type: object
                          pauseImage:
                            description: PauseImage Override image to use for pause.
                            type: string
                          secretsEncryption:
                            description: SecretsEncrytion defines encryption at rest
                              configuration
                            properties:
                              encryptionKeySecret:
                                description: EncyptionKey secret reference
                                properties:
                                  apiVersion:
                                    description: API version of the referent.
                                    type: string
                                  fieldPath:
                                    description: |-
                                      If referring to a piece of an object instead of an entire object, this string
                                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
                                      For example, if the object reference is to a container within a pod, this would take on a value like:
                                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
                                      the event) or if no container name is specified "spec.containers[2]" (container with
                                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
                                      referencing a part of an object.
                                    type: string
                                  kind:
                                    description: |-
                                      Kind of the referent.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  namespace:
                                    description: |-
                                      Namespace of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
                                    type: string
                                  resourceVersion:
                                    description: |-
                                      Specific resourceVersion to which this reference is made, if any.
                                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                                    type: string
                                  uid:
                                    description: |-
                                      UID of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              provider:
                                description: Encryption provider
                                enum:
                                - aescbc
                                - secretbox
                                type: string
                            type: object
                          serviceNodePortRange:
                            description: 'ServiceNodePortRange is the port range to
                              reserve for services with NodePort visibility (default:
                              "30000-32767").'
                            type: string
                          supervisorMetrics:
                            description: SupervisorMetrics enables the RKE2 supervisor
                              metrics endpoint on port 9345.
                            type: boolean
                          tlsSan:
                            description: TLSSan Add additional hostname or IP as a
                              Subject Alternative Name in the TLS cert.
                            items:
                              type: string
                            type: array
                        type: object
                    required:
                    - rolloutStrategy
                    type: object
                required:
                - spec
                type: object
            required:
            - template
            type: object
        required:
        - metadata
        - spec
        type: object
    served: true
    storage: true
    subresources: {}