-
Notifications
You must be signed in to change notification settings - Fork 85
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add docu for worker config sourceImage
- Loading branch information
Showing
3 changed files
with
15 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -155,6 +155,7 @@ The worker configuration contains: | |
|
||
If you attach the disk with `SCRATCH` type, either an `NVMe` interface or a `SCSI` interface must be specified. | ||
It is only meaningful to provide this volume interface if only `SCRATCH` data volumes are used. | ||
|
||
* Volume Encryption config that specifies values for `kmsKeyName` and `kmsKeyServiceAccountName`. | ||
* The `kmsKeyName` is the | ||
key name of the cloud kms disk encryption key and must be specified if CMEK disk encryption is needed. | ||
|
@@ -166,6 +167,12 @@ The worker configuration contains: | |
gcloud projects add-iam-policy-binding projectId --member | ||
serviceAccount:[email protected] --role roles/cloudkms.cryptoKeyEncrypterDecrypter | ||
``` | ||
|
||
* Setting a volume image with `volume.sourceImage`. | ||
However, this parameter should only be used with particular caution. | ||
For example Gardenlinux works with filesystem LABELs only and creating another disk form the very same image causes the LABELs to be duplicated. | ||
See: https://github.com/gardener/gardener-extension-provider-gcp/issues/323 | ||
|
||
* Service Account with their specified scopes, authorized for this worker. | ||
|
||
Service accounts created in advance that generate access tokens that can be accessed through the metadata server and used to authenticate applications on the instance. | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters