aksnodeconfigv1

type ApiServerConfig struct {

	// The certificate public key of the API server.
	ApiServerPublicKey string `protobuf:"bytes,1,opt,name=api_server_public_key,json=apiServerPublicKey,proto3" json:"api_server_public_key,omitempty"`
	// The name or endpoint URI of the API server.
	ApiServerName string `protobuf:"bytes,2,opt,name=api_server_name,json=apiServerName,proto3" json:"api_server_name,omitempty"`
	// contains filtered or unexported fields
}

type AuthConfig struct {

	// Tenant ID
	TenantId string `protobuf:"bytes,1,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// Subscription ID
	SubscriptionId string `protobuf:"bytes,2,opt,name=subscription_id,json=subscriptionId,proto3" json:"subscription_id,omitempty"`
	// Service Principal ID. set to aadClientId
	ServicePrincipalId string `protobuf:"bytes,3,opt,name=service_principal_id,json=servicePrincipalId,proto3" json:"service_principal_id,omitempty"`
	// Service Principal Secret. set to aadClientSecret
	ServicePrincipalSecret string `` /* 129-byte string literal not displayed */
	// Assigned identity id, could be user or system assigned, depending on the type.
	AssignedIdentityId string `protobuf:"bytes,5,opt,name=assigned_identity_id,json=assignedIdentityId,proto3" json:"assigned_identity_id,omitempty"`
	// Specify if use managed identity extension, default to false
	UseManagedIdentityExtension bool `` /* 147-byte string literal not displayed */
	// contains filtered or unexported fields
}

type BootstrappingAuthMethod int32

type BootstrappingConfig struct {

	// Method to authenticate the node to the API server
	BootstrappingAuthMethod BootstrappingAuthMethod `` /* 179-byte string literal not displayed */
	// how the node should join and communicate with the API server after authentication
	ClusterJoinMethod ClusterJoinMethod `` /* 155-byte string literal not displayed */
	// Only required until Secure TLS bootstrapping in place. Would use kubelet identity after that.
	TlsBootstrappingToken *string `` /* 132-byte string literal not displayed */
	// Only used when secure TLS bootstrapping is enabled. This is the AAD resource used to request access tokens from Entra ID.
	SecureTlsBootstrappingAadResource *string `` /* 172-byte string literal not displayed */
	// Only used when secure TLS bootstrapping is enabled. This is the client ID of the user-assigned identity ID the node will use to perform secure TLS bootstrapping.
	SecureTlsBootstrappingUserAssignedIdentityId *string `` /* 209-byte string literal not displayed */
	// Only used when secure TLS bootstrapping is enabled. If specified, the bootstrap client installation will be replaced with the client version downloaded from this URL.
	SecureTlsBootstrappingCustomClientDownloadUrl *string `` /* 212-byte string literal not displayed */
	// Only used when secure TLS bootstrapping is enabled. This is the bootstrapping deadline used to perform secure TLS bootstrapping.
	// If the deadline is hit, the TLS bootstrap token will be used as a fall-back.
	// This field will be deprecated once TLS bootstrap tokens are no longer used.
	SecureTlsBootstrappingDeadline *string `` /* 161-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CloudProviderConfig struct {

	// Enable cloud provider backoff
	Backoff *bool `protobuf:"varint,1,opt,name=backoff,proto3,oneof" json:"backoff,omitempty"`
	// Backoff mode (e.g. "v2")
	BackoffMode string `protobuf:"bytes,2,opt,name=backoff_mode,json=backoffMode,proto3" json:"backoff_mode,omitempty"`
	// Backoff retries
	BackoffRetries *int32 `protobuf:"varint,3,opt,name=backoff_retries,json=backoffRetries,proto3,oneof" json:"backoff_retries,omitempty"`
	// Backoff exponent
	BackoffExponent *float64 `protobuf:"fixed64,4,opt,name=backoff_exponent,json=backoffExponent,proto3,oneof" json:"backoff_exponent,omitempty"`
	// Backoff duration in seconds
	BackoffDuration *int32 `protobuf:"varint,5,opt,name=backoff_duration,json=backoffDuration,proto3,oneof" json:"backoff_duration,omitempty"`
	// Backoff jitter
	BackoffJitter *float64 `protobuf:"fixed64,6,opt,name=backoff_jitter,json=backoffJitter,proto3,oneof" json:"backoff_jitter,omitempty"`
	// Enable cloud provider rate limit
	RateLimit *bool `protobuf:"varint,7,opt,name=rate_limit,json=rateLimit,proto3,oneof" json:"rate_limit,omitempty"`
	// Cloud provider rate limit QPS
	RateLimitQps *float64 `protobuf:"fixed64,8,opt,name=rate_limit_qps,json=rateLimitQps,proto3,oneof" json:"rate_limit_qps,omitempty"`
	// Cloud provider rate limit QPS for write
	RateLimitQpsWrite *float64 `protobuf:"fixed64,9,opt,name=rate_limit_qps_write,json=rateLimitQpsWrite,proto3,oneof" json:"rate_limit_qps_write,omitempty"`
	// Cloud provider rate limit bucket
	RateLimitBucket *int32 `protobuf:"varint,10,opt,name=rate_limit_bucket,json=rateLimitBucket,proto3,oneof" json:"rate_limit_bucket,omitempty"`
	// Cloud provider rate limit bucket for write
	RateLimitBucketWrite *int32 `` /* 133-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ClusterConfig struct {

	// Cluster network config. We assumed network mode is always "transparent" now so it's removed from the contract.
	ClusterNetworkConfig *ClusterNetworkConfig `protobuf:"bytes,1,opt,name=cluster_network_config,json=clusterNetworkConfig,proto3" json:"cluster_network_config,omitempty"`
	// Load balancer config
	LoadBalancerConfig *LoadBalancerConfig `protobuf:"bytes,2,opt,name=load_balancer_config,json=loadBalancerConfig,proto3" json:"load_balancer_config,omitempty"`
	// Rescource group name
	ResourceGroup string `protobuf:"bytes,3,opt,name=resource_group,json=resourceGroup,proto3" json:"resource_group,omitempty"`
	// Location
	Location string `protobuf:"bytes,4,opt,name=location,proto3" json:"location,omitempty"`
	// VM type
	VmType VmType `protobuf:"varint,5,opt,name=vm_type,json=vmType,proto3,enum=aksnodeconfig.v1.VmType" json:"vm_type,omitempty"` // default to standard for v1.27 and below versions and vmss for v1.28+ versions
	// Primary availability set name
	PrimaryAvailabilitySet string `` /* 129-byte string literal not displayed */
	// Primary scale set name
	PrimaryScaleSet string `protobuf:"bytes,7,opt,name=primary_scale_set,json=primaryScaleSet,proto3" json:"primary_scale_set,omitempty"`
	// Specify if it uses instance metadata
	UseInstanceMetadata bool `protobuf:"varint,8,opt,name=use_instance_metadata,json=useInstanceMetadata,proto3" json:"use_instance_metadata,omitempty"` // default to false
	// Cloud provider config for cloud-provider-azure
	CloudProviderConfig *CloudProviderConfig `protobuf:"bytes,9,opt,name=cloud_provider_config,json=cloudProviderConfig,proto3" json:"cloud_provider_config,omitempty"`
	// contains filtered or unexported fields
}

type ClusterJoinMethod int32

type ClusterNetworkConfig struct {

	// Virtual network name
	VnetName string `protobuf:"bytes,1,opt,name=vnet_name,json=vnetName,proto3" json:"vnet_name,omitempty"`
	// Virtual network resource group
	VnetResourceGroup string `protobuf:"bytes,2,opt,name=vnet_resource_group,json=vnetResourceGroup,proto3" json:"vnet_resource_group,omitempty"`
	// Subnet name
	Subnet string `protobuf:"bytes,3,opt,name=subnet,proto3" json:"subnet,omitempty"`
	// Network security group name
	SecurityGroupName string `protobuf:"bytes,4,opt,name=security_group_name,json=securityGroupName,proto3" json:"security_group_name,omitempty"`
	// Route table name
	RouteTable string `protobuf:"bytes,5,opt,name=route_table,json=routeTable,proto3" json:"route_table,omitempty"`
	// CoreDNS serviceIP of the cluster
	CoreDnsServiceIp string `protobuf:"bytes,6,opt,name=core_dns_service_ip,json=coreDnsServiceIp,proto3" json:"core_dns_service_ip,omitempty"`
	// contains filtered or unexported fields
}

type Configuration struct {

	// Version of configuration
	Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// Kube binary URL config
	KubeBinaryConfig *KubeBinaryConfig `protobuf:"bytes,2,opt,name=kube_binary_config,json=kubeBinaryConfig,proto3" json:"kube_binary_config,omitempty"`
	// Custom cloud config
	CustomCloudConfig *CustomCloudConfig `protobuf:"bytes,3,opt,name=custom_cloud_config,json=customCloudConfig,proto3" json:"custom_cloud_config,omitempty"`
	// Kubernetes API server configuration
	ApiServerConfig *ApiServerConfig `protobuf:"bytes,4,opt,name=api_server_config,json=apiServerConfig,proto3" json:"api_server_config,omitempty"`
	// Various Kubernetes cluster level configuration
	ClusterConfig *ClusterConfig `protobuf:"bytes,5,opt,name=cluster_config,json=clusterConfig,proto3" json:"cluster_config,omitempty"`
	// TLS bootstrap config
	BootstrappingConfig *BootstrappingConfig `protobuf:"bytes,6,opt,name=bootstrapping_config,json=bootstrappingConfig,proto3" json:"bootstrapping_config,omitempty"`
	// Authentication configuration
	AuthConfig *AuthConfig `protobuf:"bytes,7,opt,name=auth_config,json=authConfig,proto3" json:"auth_config,omitempty"`
	// The CLI tool runc configuration
	RuncConfig *RuncConfig `protobuf:"bytes,8,opt,name=runc_config,json=runcConfig,proto3" json:"runc_config,omitempty"`
	// Containerd configuration
	ContainerdConfig *ContainerdConfig `protobuf:"bytes,9,opt,name=containerd_config,json=containerdConfig,proto3" json:"containerd_config,omitempty"`
	// Kubelet configuration
	KubeletConfig *KubeletConfig `protobuf:"bytes,11,opt,name=kubelet_config,json=kubeletConfig,proto3" json:"kubelet_config,omitempty"`
	// Custom search domain configurations
	CustomSearchDomainConfig *CustomSearchDomainConfig `` /* 138-byte string literal not displayed */
	// Custom Linux OS configurations including SwapFile, SysCtl configs, etc.
	CustomLinuxOsConfig *CustomLinuxOsConfig `protobuf:"bytes,13,opt,name=custom_linux_os_config,json=customLinuxOsConfig,proto3" json:"custom_linux_os_config,omitempty"`
	// HTTP/HTTPS proxy configuration for the node
	HttpProxyConfig *HttpProxyConfig `protobuf:"bytes,14,opt,name=http_proxy_config,json=httpProxyConfig,proto3" json:"http_proxy_config,omitempty"`
	// GPU configuration for the node
	GpuConfig *GpuConfig `protobuf:"bytes,15,opt,name=gpu_config,json=gpuConfig,proto3" json:"gpu_config,omitempty"`
	// Network configuration for the node
	NetworkConfig *NetworkConfig `protobuf:"bytes,16,opt,name=network_config,json=networkConfig,proto3" json:"network_config,omitempty"`
	// Kubernetes certificate authority (CA) certificate, required by the node to establish TLS with the API server
	KubernetesCaCert string `protobuf:"bytes,17,opt,name=kubernetes_ca_cert,json=kubernetesCaCert,proto3" json:"kubernetes_ca_cert,omitempty"`
	// Kubernetes version
	KubernetesVersion string `protobuf:"bytes,18,opt,name=kubernetes_version,json=kubernetesVersion,proto3" json:"kubernetes_version,omitempty"`
	// Kube proxy URL
	KubeProxyUrl string `protobuf:"bytes,19,opt,name=kube_proxy_url,json=kubeProxyUrl,proto3" json:"kube_proxy_url,omitempty"`
	// The VM size of the node
	VmSize string `protobuf:"bytes,20,opt,name=vm_size,json=vmSize,proto3" json:"vm_size,omitempty"`
	// Linux admin username. If not specified, the default value is "azureuser"
	LinuxAdminUsername string `protobuf:"bytes,21,opt,name=linux_admin_username,json=linuxAdminUsername,proto3" json:"linux_admin_username,omitempty"`
	// Specifies whether the node is a VHD node. This is still needed for some customized scenarios.
	// This is labeled as optional (explicit presence) so that we know whether it's set or not.
	// If it's not set, the default value will be nil.
	IsVhd *bool `protobuf:"varint,22,opt,name=is_vhd,json=isVhd,proto3,oneof" json:"is_vhd,omitempty"`
	// Specifies whether SSH is enabled or disabled on the VM node
	// This is labeled as optional (explicit presence) so that we know whether it's set or not.
	// If it's not set, the default value will be nil, but will be set to true on the VHD.
	EnableSsh *bool `protobuf:"varint,23,opt,name=enable_ssh,json=enableSsh,proto3,oneof" json:"enable_ssh,omitempty"`
	// Specifies whether unattended upgrade is enabled or disabled on the VM node
	EnableUnattendedUpgrade bool `` /* 134-byte string literal not displayed */
	// The message of the day that is displayed on the VM node when a user logs in
	MessageOfTheDay string `protobuf:"bytes,25,opt,name=message_of_the_day,json=messageOfTheDay,proto3" json:"message_of_the_day,omitempty"`
	// Specifies whether the hosts config agent is enabled or disabled on the VM node
	EnableHostsConfigAgent bool `` /* 133-byte string literal not displayed */
	// Custom CA certificates to be added to the system trust store
	CustomCaCerts []string `protobuf:"bytes,27,rep,name=custom_ca_certs,json=customCaCerts,proto3" json:"custom_ca_certs,omitempty"`
	// A local file path where cluster provision cse output should be stored
	ProvisionOutput string `protobuf:"bytes,28,opt,name=provision_output,json=provisionOutput,proto3" json:"provision_output,omitempty"`
	// Workload runtime, only "OCIContainer" currently.
	WorkloadRuntime WorkloadRuntime `` /* 146-byte string literal not displayed */
	// Specifies whether IPv6 dual stack is enabled or disabled on the VM node
	Ipv6DualStackEnabled bool `` /* 127-byte string literal not displayed */
	// Command to use for outbound traffic
	OutboundCommand string `protobuf:"bytes,31,opt,name=outbound_command,json=outboundCommand,proto3" json:"outbound_command,omitempty"`
	// Azure private registry server URI
	AzurePrivateRegistryServer string `` /* 144-byte string literal not displayed */
	// Private egress proxy address
	PrivateEgressProxyAddress string `` /* 141-byte string literal not displayed */
	// Specifies whether artifact streaming is enabled or disabled on the VM node
	EnableArtifactStreaming bool `` /* 134-byte string literal not displayed */
	// Specifies if it is a Kata node
	IsKata bool `protobuf:"varint,35,opt,name=is_kata,json=isKata,proto3" json:"is_kata,omitempty"`
	// Specifies whether the node needs cgroupv2.
	// Labeled as optional (explicit presence) so that we know whether it's set or not.
	// If it's not set, the default value will be nil and we will get the value on the VHD during bootstrapping.
	NeedsCgroupv2 *bool `protobuf:"varint,36,opt,name=needs_cgroupv2,json=needsCgroupv2,proto3,oneof" json:"needs_cgroupv2,omitempty"`
	// Specified whether the node wants to disable custom data scripts for bootstrapping
	DisableCustomData bool `protobuf:"varint,37,opt,name=disable_custom_data,json=disableCustomData,proto3" json:"disable_custom_data,omitempty"`
	// Bootstrap profile container registry server URI
	BootstrapProfileContainerRegistryServer string `` /* 185-byte string literal not displayed */
	// IMDS restriction configuration
	ImdsRestrictionConfig *ImdsRestrictionConfig `` /* 127-byte string literal not displayed */
	// Creates a pre-provisioned image for later node spawning.
	// Skips kubelet and some component configuration for image capture scenarios.
	PreProvisionOnly bool `protobuf:"varint,40,opt,name=pre_provision_only,json=preProvisionOnly,proto3" json:"pre_provision_only,omitempty"`
	// Represents localdns profile for agentpool.
	LocalDnsProfile *LocalDnsProfile `protobuf:"bytes,41,opt,name=local_dns_profile,json=localDnsProfile,proto3" json:"local_dns_profile,omitempty"`
	// Specifies whether to disable ssh public key authentication on the VM node
	// This is labeled as optional (explicit presence) so that we know whether it's set or not.
	// If it's not set, the default value will be nil, but will be set to false on the VHD.
	// That is, the default behavior is to enable ssh public key authentication.
	DisablePubkeyAuth *bool `protobuf:"varint,42,opt,name=disable_pubkey_auth,json=disablePubkeyAuth,proto3,oneof" json:"disable_pubkey_auth,omitempty"`
	// Service account based image pull profile configuration
	ServiceAccountImagePullProfile *ServiceAccountImagePullProfile `` /* 158-byte string literal not displayed */
	// CSE timeout override in seconds. If not specified, defaults to 15 minutes with a maximum of 360 minutes (6 hours).
	CseTimeout *int32 `protobuf:"varint,44,opt,name=cse_timeout,json=cseTimeout,proto3,oneof" json:"cse_timeout,omitempty"`
	// contains filtered or unexported fields
}

type ContainerdConfig struct {

	// The base URL for downloading containerd.
	ContainerdDownloadUrlBase string `` /* 140-byte string literal not displayed */
	// The version of containerd to download.
	ContainerdVersion string `protobuf:"bytes,2,opt,name=containerd_version,json=containerdVersion,proto3" json:"containerd_version,omitempty"`
	// The URL for downloading the containerd package.
	ContainerdPackageUrl string `protobuf:"bytes,3,opt,name=containerd_package_url,json=containerdPackageUrl,proto3" json:"containerd_package_url,omitempty"`
	// contains filtered or unexported fields
}

type CustomCloudConfig struct {

	// Name of custom cloud
	CustomCloudEnvName string `protobuf:"bytes,1,opt,name=custom_cloud_env_name,json=customCloudEnvName,proto3" json:"custom_cloud_env_name,omitempty"`
	// RepoDepotEndpoint is the endpoint of the repo depot
	RepoDepotEndpoint string `protobuf:"bytes,2,opt,name=repo_depot_endpoint,json=repoDepotEndpoint,proto3" json:"repo_depot_endpoint,omitempty"`
	// Base64 encoded JSON string of custom cloud environment
	CustomEnvJsonContent string `protobuf:"bytes,3,opt,name=custom_env_json_content,json=customEnvJsonContent,proto3" json:"custom_env_json_content,omitempty"`
	// AKSCustomCloudContainerRegistryDNSSuffix specifies a custom cloud container registry dns suffix for credential provider
	ContainerRegistryDnsSuffix string `` /* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CustomLinuxOsConfig struct {

	// Sysctl settings for Linux agent nodes
	SysctlConfig *SysctlConfig `protobuf:"bytes,1,opt,name=sysctl_config,json=sysctlConfig,proto3" json:"sysctl_config,omitempty"`
	// Ulimit settings for Linux agent nodes
	UlimitConfig *UlimitConfig `protobuf:"bytes,2,opt,name=ulimit_config,json=ulimitConfig,proto3" json:"ulimit_config,omitempty"`
	// Enable or disable swap configuration
	EnableSwapConfig bool `protobuf:"varint,3,opt,name=enable_swap_config,json=enableSwapConfig,proto3" json:"enable_swap_config,omitempty"`
	// The size in MB of a swap file that will be created on each node
	SwapFileSize int32 `protobuf:"varint,4,opt,name=swap_file_size,json=swapFileSize,proto3" json:"swap_file_size,omitempty"`
	// Valid values are "always", "defer", "defer+madvise", "madvise" and "never"
	// If it's unset or set to empty string, it will use the default value in the VHD "always"
	TransparentHugepageSupport string `` /* 141-byte string literal not displayed */
	// Valid values are "always", "madvise" and "never"
	// If it's unset or set to empty string, it will use the default value in the VHD "madvise"
	TransparentDefrag string `protobuf:"bytes,6,opt,name=transparent_defrag,json=transparentDefrag,proto3" json:"transparent_defrag,omitempty"`
	// contains filtered or unexported fields
}

type CustomSearchDomainConfig struct {

	// The name of the custom search domain.
	DomainName string `protobuf:"bytes,1,opt,name=domain_name,json=domainName,proto3" json:"domain_name,omitempty"`
	// The user name for the custom search domain.
	RealmUser string `protobuf:"bytes,2,opt,name=realm_user,json=realmUser,proto3" json:"realm_user,omitempty"`
	// The password for the custom search domain.
	RealmPassword string `protobuf:"bytes,3,opt,name=realm_password,json=realmPassword,proto3" json:"realm_password,omitempty"`
	// contains filtered or unexported fields
}

type GpuConfig struct {

	// Specifies whether any nvidia configurations should be applied for GPU nodes. False when vm size is not a GPU node or driver install is skipped and no GPU configuration is needed.
	// Making optional so that default will be set to IsNvidiaEnabledSku(vmSize) instead of false
	EnableNvidia *bool `protobuf:"varint,1,opt,name=enable_nvidia,json=enableNvidia,proto3,oneof" json:"enable_nvidia,omitempty"`
	// Specifies whether bootstrap process should install and configure the GPU driver when necessary. Configuration includes appropriate set up of components like the fabric manager where applicable.
	ConfigGpuDriver bool `protobuf:"varint,2,opt,name=config_gpu_driver,json=configGpuDriver,proto3" json:"config_gpu_driver,omitempty"`
	// Specifies whether special config is needed for MIG GPUs that use GPU dedicated VHDs and enable the device plugin (for all GPU dedicated VHDs)
	GpuDevicePlugin bool `protobuf:"varint,3,opt,name=gpu_device_plugin,json=gpuDevicePlugin,proto3" json:"gpu_device_plugin,omitempty"`
	// Represents the GPU instance profile.
	GpuInstanceProfile string `protobuf:"bytes,4,opt,name=gpu_instance_profile,json=gpuInstanceProfile,proto3" json:"gpu_instance_profile,omitempty"`
	// Same as enable_nvidia, but for AMD GPUs.
	EnableAmdGpu *bool `protobuf:"varint,5,opt,name=enable_amd_gpu,json=enableAmdGpu,proto3,oneof" json:"enable_amd_gpu,omitempty"`
	// Specifies whether the managed GPU experience AFEC (Azure Feature Engineering Configuration) is enabled.
	ManagedGpuExperienceAfecEnabled bool `` /* 161-byte string literal not displayed */
	// Specifies whether managed GPU is enabled.
	EnableManagedGpu bool `protobuf:"varint,7,opt,name=enable_managed_gpu,json=enableManagedGpu,proto3" json:"enable_managed_gpu,omitempty"`
	// mig_strategy specifies the MIG strategy for the nvidia-device-plugin.
	// Valid values are "None", "Single", "Mixed". Only meaningful when MIG is enabled
	// (i.e., when gpu_instance_profile is set). Defaults to "Single" if not specified.
	MigStrategy string `protobuf:"bytes,8,opt,name=mig_strategy,json=migStrategy,proto3" json:"mig_strategy,omitempty"`
	// contains filtered or unexported fields
}

type HttpProxyConfig struct {

	// Proxy endpoint/URL using HTTP through which the traffic should be routed for making HTTP connections outside the cluster
	HttpProxy string `protobuf:"bytes,1,opt,name=http_proxy,json=httpProxy,proto3" json:"http_proxy,omitempty"`
	// Proxy endpoint/URL using HTTPS through which the traffic should be routed for making HTTPS connections outside the cluster
	HttpsProxy string `protobuf:"bytes,2,opt,name=https_proxy,json=httpsProxy,proto3" json:"https_proxy,omitempty"`
	// A list of entries including IPs, domains, or other network CIDRs that should not be accessed through the proxy
	NoProxyEntries []string `protobuf:"bytes,3,rep,name=no_proxy_entries,json=noProxyEntries,proto3" json:"no_proxy_entries,omitempty"`
	// Custom CA certificate that should be trusted by the proxy
	ProxyTrustedCa string `protobuf:"bytes,4,opt,name=proxy_trusted_ca,json=proxyTrustedCa,proto3" json:"proxy_trusted_ca,omitempty"`
	// contains filtered or unexported fields
}

type ImdsRestrictionConfig struct {

	// Enable IMDS restriction for the node.
	EnableImdsRestriction bool `` /* 127-byte string literal not displayed */
	// Insert IMDS restriction rule to mangle table.
	InsertImdsRestrictionRuleToMangleTable bool `` /* 186-byte string literal not displayed */
	// contains filtered or unexported fields
}

type KubeBinaryConfig struct {

	// default kube binary url
	KubeBinaryUrl string `protobuf:"bytes,1,opt,name=kube_binary_url,json=kubeBinaryUrl,proto3" json:"kube_binary_url,omitempty"`
	// user's custom kube binary url
	CustomKubeBinaryUrl string `protobuf:"bytes,2,opt,name=custom_kube_binary_url,json=customKubeBinaryUrl,proto3" json:"custom_kube_binary_url,omitempty"`
	// privately cached kube binary url
	PrivateKubeBinaryUrl string `protobuf:"bytes,3,opt,name=private_kube_binary_url,json=privateKubeBinaryUrl,proto3" json:"private_kube_binary_url,omitempty"`
	// full path to the "pause" image. Used for --pod-infra-container-image.
	PodInfraContainerImageUrl string `` /* 142-byte string literal not displayed */
	// Full path to the Linux credential provider (tar.gz) to use.
	LinuxCredentialProviderUrl string `` /* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

type KubeletAnonymousAuthentication struct {

	// enabled allows anonymous requests to the kubelet server.
	// Requests that are not rejected by another authentication method are treated as anonymous requests.
	// Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
	// +optional.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

type KubeletAuthentication struct {

	// x509 contains settings related to x509 client certificate authentication.
	// +optional.
	X509 *KubeletX509Authentication `protobuf:"bytes,1,opt,name=x509,proto3" json:"x509,omitempty"`
	// webhook contains settings related to webhook bearer token authentication.
	// +optional.
	Webhook *KubeletWebhookAuthentication `protobuf:"bytes,2,opt,name=webhook,proto3" json:"webhook,omitempty"`
	// anonymous contains settings related to anonymous authentication.
	// +optional.
	Anonymous *KubeletAnonymousAuthentication `protobuf:"bytes,3,opt,name=anonymous,proto3" json:"anonymous,omitempty"`
	// contains filtered or unexported fields
}

type KubeletAuthorization struct {

	// mode is the authorization mode to apply to requests to the kubelet server.
	// Valid values are AlwaysAllow and Webhook.
	// Webhook mode uses the SubjectAccessReview API to determine authorization.
	// +optional.
	Mode string `protobuf:"bytes,1,opt,name=mode,proto3" json:"mode,omitempty"`
	// webhook contains settings related to Webhook authorization.
	// +optional.
	Webhook *KubeletWebhookAuthorization `protobuf:"bytes,2,opt,name=webhook,proto3" json:"webhook,omitempty"`
	// contains filtered or unexported fields
}

type KubeletConfig struct {

	// A map of kubelet flags to their values. The map is sorted by key.
	KubeletFlags map[string]string `` /* 185-byte string literal not displayed */
	// A map of node labels to their values.
	KubeletNodeLabels map[string]string `` /* 202-byte string literal not displayed */
	// The type of disk to use for the kubelet.
	KubeletDiskType KubeletDisk `` /* 143-byte string literal not displayed */
	// Whether kubelet config should be enabled.
	EnableKubeletConfigFile bool `` /* 135-byte string literal not displayed */
	// content of the kubelet config file.
	KubeletConfigFileConfig *KubeletConfigFileConfig `` /* 134-byte string literal not displayed */
	// Kubelet client private key
	KubeletClientKey string `protobuf:"bytes,6,opt,name=kubelet_client_key,json=kubeletClientKey,proto3" json:"kubelet_client_key,omitempty"`
	// The content of the kubelet client certificate file.
	KubeletClientCertContent string `` /* 137-byte string literal not displayed */
	// The path used to mount docker images, emptyDir volumes, and kubelet data.
	ContainerDataDir string `protobuf:"bytes,8,opt,name=container_data_dir,json=containerDataDir,proto3" json:"container_data_dir,omitempty"`
	// contains filtered or unexported fields
}

type KubeletConfigFileConfig struct {

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated.
	// In CamelCase.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds.
	// +optional.
	Kind string `protobuf:"bytes,1,opt,name=kind,proto3" json:"kind,omitempty"`
	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion string `protobuf:"bytes,2,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// staticPodPath is the path to the directory containing local (static) pods to
	// run, or the path to a single static pod file.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// the set of static pods specified at the new path may be different than the
	// ones the Kubelet initially started with, and this may disrupt your node.
	// Default: ""
	// +optional.
	StaticPodPath string `protobuf:"bytes,3,opt,name=static_pod_path,json=staticPodPath,proto3" json:"static_pod_path,omitempty"`
	// address is the IP address for the Kubelet to serve on (set to 0.0.0.0
	// for all interfaces).
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Default: "0.0.0.0"
	// +optional.
	Address string `protobuf:"bytes,4,opt,name=address,proto3" json:"address,omitempty"`
	// readOnlyPort is the read-only port for the Kubelet to serve on with
	// no authentication/authorization.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Default: 0 (disabled)
	// +optional.
	ReadOnlyPort int32 `protobuf:"varint,5,opt,name=read_only_port,json=readOnlyPort,proto3" json:"read_only_port,omitempty"`
	// tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
	// if any, concatenated after server cert). If tlsCertFile and
	// tlsPrivateKeyFile are not provided, a self-signed certificate
	// and key are generated for the public address and saved to the directory
	// passed to the Kubelet's --cert-dir flag.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Default: ""
	// +optional.
	TlsCertFile string `protobuf:"bytes,6,opt,name=tls_cert_file,json=tlsCertFile,proto3" json:"tls_cert_file,omitempty"`
	// tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Default: ""
	// +optional.
	TlsPrivateKeyFile string `protobuf:"bytes,7,opt,name=tls_private_key_file,json=tlsPrivateKeyFile,proto3" json:"tls_private_key_file,omitempty"`
	// TLSCipherSuites is the list of allowed cipher suites for the server.
	// Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Default: nil
	// +optional.
	TlsCipherSuites []string `protobuf:"bytes,8,rep,name=tls_cipher_suites,json=tlsCipherSuites,proto3" json:"tls_cipher_suites,omitempty"`
	// rotateCertificates enables client certificate rotation. The Kubelet will request a
	// new certificate from the certificates.k8s.io API. This requires an approver to approve the
	// certificate signing requests.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// disabling it may disrupt the Kubelet's ability to authenticate with the API server
	// after the current certificate expires.
	// Default: false
	// +optional.
	RotateCertificates bool `protobuf:"varint,9,opt,name=rotate_certificates,json=rotateCertificates,proto3" json:"rotate_certificates,omitempty"`
	// serverTLSBootstrap enables server certificate bootstrap. Instead of self
	// signing a serving certificate, the Kubelet will request a certificate from
	// the 'certificates.k8s.io' API. This requires an approver to approve the
	// certificate signing requests (CSR). The RotateKubeletServerCertificate feature
	// must be enabled when setting this field.
	// Default: false
	// +optional
	ServerTlsBootstrap bool `protobuf:"varint,10,opt,name=server_tls_bootstrap,json=serverTLSBootstrap,proto3" json:"server_tls_bootstrap,omitempty"`
	// authentication specifies how requests to the Kubelet's server are authenticated
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Defaults:
	// anonymous:
	// enabled: false
	// webhook:
	// enabled: true
	// cacheTTL: "2m"
	// +optional.
	Authentication *KubeletAuthentication `protobuf:"bytes,11,opt,name=authentication,proto3" json:"authentication,omitempty"`
	// authorization specifies how requests to the Kubelet's server are authorized
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may disrupt components that interact with the Kubelet server.
	// Defaults:
	// mode: Webhook
	// webhook:
	// cacheAuthorizedTTL: "5m"
	// cacheUnauthorizedTTL: "30s"
	// +optional.
	Authorization *KubeletAuthorization `protobuf:"bytes,12,opt,name=authorization,proto3" json:"authorization,omitempty"`
	// eventRecordQPS is the maximum event creations per second. If 0, there
	// is no limit enforced.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may impact scalability by changing the amount of traffic produced by
	// event creations.
	// Default: 5
	// +optional.
	EventRecordQps *int32 `protobuf:"varint,13,opt,name=event_record_qps,json=eventRecordQPS,proto3,oneof" json:"event_record_qps,omitempty"`
	// clusterDomain is the DNS domain for this cluster. If set, kubelet will
	// configure all containers to search this domain in addition to the
	// host's search domains.
	// Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
	// as it should be kept in sync with the rest of the cluster.
	// Default: ""
	// +optional.
	ClusterDomain string `protobuf:"bytes,14,opt,name=cluster_domain,json=clusterDomain,proto3" json:"cluster_domain,omitempty"`
	// clusterDNS is a list of IP addresses for the cluster DNS server. If set,
	// kubelet will configure all containers to use this for DNS resolution
	// instead of the host's DNS servers.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// changes will only take effect on Pods created after the update. Draining
	// the node is recommended before changing this field.
	// Default: nil
	// +optional.
	ClusterDns []string `protobuf:"bytes,15,rep,name=cluster_dns,json=clusterDNS,proto3" json:"cluster_dns,omitempty"`
	// streamingConnectionIdleTimeout is the maximum time a streaming connection
	// can be idle before the connection is automatically closed.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may impact components that rely on infrequent updates over streaming
	// connections to the Kubelet server.
	// Default: "4h"
	// +optional.
	StreamingConnectionIdleTimeout string `` /* 156-byte string literal not displayed */
	// nodeStatusUpdateFrequency is the frequency that kubelet computes node
	// status. If node lease feature is not enabled, it is also the frequency that
	// kubelet posts node status to master.
	// Note: When node lease feature is not enabled, be cautious when changing the
	// constant, it must work with nodeMonitorGracePeriod in nodecontroller.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may impact node scalability, and also that the node controller's
	// nodeMonitorGracePeriod must be set to N*NodeStatusUpdateFrequency,
	// where N is the number of retries before the node controller marks
	// the node unhealthy.
	// Default: "10s"
	// +optional.
	NodeStatusUpdateFrequency string `` /* 141-byte string literal not displayed */
	// nodeStatusReportFrequency is the frequency that kubelet posts node
	// status to master if node status does not change. Kubelet will ignore this
	// frequency and post node status immediately if any change is detected. It is
	// only used when node lease feature is enabled. nodeStatusReportFrequency's
	// default value is 5m. But if nodeStatusUpdateFrequency is set explicitly,
	// nodeStatusReportFrequency's default value will be set to
	// nodeStatusUpdateFrequency for backward compatibility.
	// Default: "5m"
	// +optional.
	NodeStatusReportFrequency string `` /* 141-byte string literal not displayed */
	// imageGCHighThresholdPercent is the percent of disk usage after which
	// image garbage collection is always run. The percent is calculated as
	// this field value out of 100.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may trigger or delay garbage collection, and may change the image overhead
	// on the node.
	// Default: 85
	// +optional.
	ImageGcHighThresholdPercent *int32 `` /* 156-byte string literal not displayed */
	// imageGCLowThresholdPercent is the percent of disk usage before which
	// image garbage collection is never run. Lowest disk usage to garbage
	// collect to. The percent is calculated as this field value out of 100.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may trigger or delay garbage collection, and may change the image overhead
	// on the node.
	// Default: 80
	// +optional.
	ImageGcLowThresholdPercent *int32 `` /* 153-byte string literal not displayed */
	// Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
	// And all Burstable and BestEffort pods are brought up under their
	// specific top level QoS cgroup.
	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
	// reboot. It is safest to keep this value the same as the local config.
	// Default: true
	// +optional.
	CgroupsPerQos *bool `protobuf:"varint,21,opt,name=cgroups_per_qos,json=cgroupsPerQOS,proto3,oneof" json:"cgroups_per_qos,omitempty"`
	// CPUManagerPolicy is the name of the policy to use.
	// Requires the CPUManager feature gate to be enabled.
	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
	// reboot. It is safest to keep this value the same as the local config.
	// Default: "none"
	// +optional.
	CpuManagerPolicy string `protobuf:"bytes,22,opt,name=cpu_manager_policy,json=cpuManagerPolicy,proto3" json:"cpu_manager_policy,omitempty"`
	// TopologyManagerPolicy is the name of the policy to use.
	// Policies other than "none" require the TopologyManager feature gate to be enabled.
	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
	// reboot. It is safest to keep this value the same as the local config.
	// Default: "none"
	// +optional.
	TopologyManagerPolicy string `` /* 127-byte string literal not displayed */
	// maxPods is the number of pods that can run on this Kubelet.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// changes may cause Pods to fail admission on Kubelet restart, and may change
	// the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
	// future scheduling decisions. Increasing this value may also decrease performance,
	// as more Pods can be packed into a single node.
	// Default: 110
	// +optional.
	MaxPods *int32 `protobuf:"varint,24,opt,name=max_pods,json=maxPods,proto3,oneof" json:"max_pods,omitempty"`
	// PodPidsLimit is the maximum number of pids in any pod.
	// Requires the SupportPodPidsLimit feature gate to be enabled.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// lowering it may prevent container processes from forking after the change.
	// Default: -1
	// +optional.
	PodPidsLimit *int32 `protobuf:"varint,25,opt,name=pod_pids_limit,json=podPidsLimit,proto3,oneof" json:"pod_pids_limit,omitempty"`
	// ResolvConf is the resolver configuration file used as the basis
	// for the container DNS resolution configuration.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// changes will only take effect on Pods created after the update. Draining
	// the node is recommended before changing this field.
	// Default: "/etc/resolv.conf"
	// +optional.
	ResolvConf string `protobuf:"bytes,26,opt,name=resolv_conf,json=resolvConf,proto3" json:"resolv_conf,omitempty"`
	// cpuCFSQuota enables CPU CFS quota enforcement for containers that
	// specify CPU limits.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// disabling it may reduce node stability.
	// Default: true
	// +optional.
	CpuCfsQuota *bool `protobuf:"varint,27,opt,name=cpu_cfs_quota,json=cpuCFSQuota,proto3,oneof" json:"cpu_cfs_quota,omitempty"`
	// CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// limits set for containers will result in different cpu.cfs_quota settings. This
	// will trigger container restarts on the node being reconfigured.
	// Default: "100ms"
	// +optional.
	CpuCfsQuotaPeriod string `protobuf:"bytes,28,opt,name=cpu_cfs_quota_period,json=cpuCFSQuotaPeriod,proto3" json:"cpu_cfs_quota_period,omitempty"`
	// Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
	// To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may trigger or delay Pod evictions.
	// Default:
	// memory.available:  "100Mi"
	// nodefs.available:  "10%"
	// nodefs.inodesFree: "5%"
	// imagefs.available: "15%"
	// +optional.
	EvictionHard map[string]string `` /* 186-byte string literal not displayed */
	// protectKernelDefaults, if true, causes the Kubelet to error if kernel
	// flags are not as it expects. Otherwise the Kubelet will attempt to modify
	// kernel flags to match its expectation.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
	// Kubelet expects.
	// Default: false
	// +optional.
	ProtectKernelDefaults bool `` /* 128-byte string literal not displayed */
	// featureGates is a map of feature names to bools that enable or disable alpha/experimental
	// features. This field modifies piecemeal the built-in default values from
	// "k8s.io/kubernetes/pkg/features/kube_features.go".
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
	// documentation for the features you are enabling or disabling. While we
	// encourage feature developers to make it possible to dynamically enable
	// and disable features, some changes may require node reboots, and some
	// features may require careful coordination to retroactively disable.
	// Default: nil
	// +optional.
	FeatureGates map[string]bool `` /* 187-byte string literal not displayed */
	// failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// setting it to true will cause the Kubelet to crash-loop if swap is enabled.
	// Default: true
	// +optional.
	FailSwapOn *bool `protobuf:"varint,32,opt,name=fail_swap_on,json=failSwapOn,proto3,oneof" json:"fail_swap_on,omitempty"`
	// A quantity defines the maximum size of the container log file before it is rotated.
	// For example: "5Mi" or "256Ki".
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may trigger log rotation.
	// Default: "10Mi"
	// +optional.
	ContainerLogMaxSize string `protobuf:"bytes,33,opt,name=container_log_max_size,json=containerLogMaxSize,proto3" json:"container_log_max_size,omitempty"`
	// Maximum number of container log files that can be present for a container.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// lowering it may cause log files to be deleted.
	// Default: 5
	// +optional.
	ContainerLogMaxFiles *int32 `` /* 133-byte string literal not displayed */
	// systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
	// pairs that describe resources reserved for non-kubernetes components.
	// Currently only cpu and memory are supported.
	// See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may not be possible to increase the reserved resources, because this
	// requires resizing cgroups. Always look for a NodeAllocatableEnforced event
	// after updating this field to ensure that the update was successful.
	// Default: nil
	// +optional.
	SystemReserved map[string]string `` /* 192-byte string literal not displayed */
	// A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
	// that describe resources reserved for kubernetes system components.
	// Currently cpu, memory and local storage for root file system are supported.
	// See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// it may not be possible to increase the reserved resources, because this
	// requires resizing cgroups. Always look for a NodeAllocatableEnforced event
	// after updating this field to ensure that the update was successful.
	// Default: nil
	// +optional.
	KubeReserved map[string]string `` /* 186-byte string literal not displayed */
	// This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
	// This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` &
	// `kube-reserved`. If `none` is specified, no other options may be specified.
	// Refer to
	// [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md)
	// doc for more information.
	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
	// removing enforcements may reduce the stability of the node. Alternatively, adding
	// enforcements may reduce the stability of components which were using more than
	// the reserved amount of resources; for example, enforcing kube-reserved may cause
	// Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
	// may cause system daemons to OOM if they use more than the reserved resources.
	// Default: ["pods"]
	// +optional.
	EnforceNodeAllocatable []string `` /* 130-byte string literal not displayed */
	// A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in *).
	// Unsafe sysctl groups are kernel.shm*, kernel.msg*, kernel.sem, fs.mqueue.*, and net.*.
	// These sysctls are namespaced but not allowed by default.
	// For example: "kernel.msg*,net.ipv4.route.min_pmtu"
	// Default: []
	// +optional.
	AllowedUnsafeSysctls []string `protobuf:"bytes,38,rep,name=allowed_unsafe_sysctls,json=allowedUnsafeSysctls,proto3" json:"allowed_unsafe_sysctls,omitempty"`
	// serializeImagePulls when enabled, tells the Kubelet to pull images one
	// at a time. We recommend *not* changing the default value on nodes that
	// run docker daemon with version  < 1.9 or an Aufs storage backend.
	// Issue #10959 has more details.
	// Default: true
	// +optional
	SerializeImagePulls *bool `` /* 128-byte string literal not displayed */
	// SeccompDefault enables the use of `RuntimeDefault` as the default seccomp profile for all workloads.
	// Default: false
	// +optional
	SeccompDefault bool `protobuf:"varint,40,opt,name=seccomp_default,json=seccompDefault,proto3" json:"seccomp_default,omitempty"`
	// contains filtered or unexported fields
}

type KubeletDisk int32

type KubeletWebhookAuthentication struct {

	// enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API.
	// +optional.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// cacheTTL enables caching of authentication results.
	// +optional.
	CacheTtl string `protobuf:"bytes,2,opt,name=cache_ttl,json=cacheTtl,proto3" json:"cache_ttl,omitempty"`
	// contains filtered or unexported fields
}

type KubeletWebhookAuthorization struct {

	// cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.
	// +optional.
	CacheAuthorizedTtl string `protobuf:"bytes,1,opt,name=cache_authorized_ttl,json=cacheAuthorizedTtl,proto3" json:"cache_authorized_ttl,omitempty"`
	// cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.
	// +optional.
	CacheUnauthorizedTtl string `protobuf:"bytes,2,opt,name=cache_unauthorized_ttl,json=cacheUnauthorizedTtl,proto3" json:"cache_unauthorized_ttl,omitempty"`
	// contains filtered or unexported fields
}

type KubeletX509Authentication struct {

	// clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
	// signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
	// and groups corresponding to the Organization in the client certificate.
	// +optional.
	ClientCaFile string `protobuf:"bytes,1,opt,name=client_ca_file,json=clientCAFile,proto3" json:"client_ca_file,omitempty"`
	// contains filtered or unexported fields
}

type LoadBalancerConfig struct {

	// Load balancer sku, default to basic
	LoadBalancerSku LoadBalancerSku `` /* 147-byte string literal not displayed */
	// Specify if master node should be excluded from standard load balancer, default to true
	ExcludeMasterFromStandardLoadBalancer *bool `` /* 187-byte string literal not displayed */
	// Maximum number of load balancer rules, default to 148
	MaxLoadBalancerRuleCount *int32 `` /* 146-byte string literal not displayed */
	// Disable outbound SNAT (Source Network Address Translation) for load balancer, default to false
	DisableOutboundSnat bool `protobuf:"varint,4,opt,name=disable_outbound_snat,json=disableOutboundSnat,proto3" json:"disable_outbound_snat,omitempty"`
	// contains filtered or unexported fields
}

type LoadBalancerSku int32

type LocalDnsOverrides struct {

	// Log level for DNS queries in localDNS.
	QueryLogging string `protobuf:"bytes,1,opt,name=query_logging,json=queryLogging,proto3" json:"query_logging,omitempty"`
	// Enforce TCP or prefer UDP protocol for connections from localDNS to upstream DNS server
	Protocol string `protobuf:"bytes,2,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// Destination server for DNS queries to be forwarded from localDNS.
	ForwardDestination string `protobuf:"bytes,3,opt,name=forward_destination,json=forwardDestination,proto3" json:"forward_destination,omitempty"`
	// Forward policy for selecting upstream DNS server.
	ForwardPolicy string `protobuf:"bytes,4,opt,name=forward_policy,json=forwardPolicy,proto3" json:"forward_policy,omitempty"`
	// Maximum number of concurrent queries.
	MaxConcurrent *int32 `protobuf:"varint,5,opt,name=max_concurrent,json=maxConcurrent,proto3,oneof" json:"max_concurrent,omitempty"`
	// Cache max TTL in seconds.
	CacheDurationInSeconds *int32 `` /* 138-byte string literal not displayed */
	// Serve stale duration in seconds.
	ServeStaleDurationInSeconds *int32 `` /* 155-byte string literal not displayed */
	// Policy for serving stale data.
	ServeStale string `protobuf:"bytes,8,opt,name=serve_stale,json=serveStale,proto3" json:"serve_stale,omitempty"`
	// contains filtered or unexported fields
}

type LocalDnsProfile struct {

	// Specifies if LocalDns should be enabled or not for the nodepool.
	EnableLocalDns bool `protobuf:"varint,1,opt,name=enable_local_dns,json=enableLocalDns,proto3" json:"enable_local_dns,omitempty"`
	// Specifies the Cpu limit to be set for localdns systemd unit.
	CpuLimitInMilliCores *int32 `` /* 134-byte string literal not displayed */
	// Specifies the memory limit to be set for localdns systemd unit.
	MemoryLimitInMb *int32 `protobuf:"varint,3,opt,name=memory_limit_in_mb,json=memoryLimitInMb,proto3,oneof" json:"memory_limit_in_mb,omitempty"`
	// VnetDns overrides apply to DNS traffic from pods with dnsPolicy:default or kubelet (referred to as VnetDns traffic).
	VnetDnsOverrides map[string]*LocalDnsOverrides `` /* 199-byte string literal not displayed */
	// KubeDns overrides apply to DNS traffic from pods with dnsPolicy:ClusterFirst (referred to as KubeDns traffic).
	KubeDnsOverrides map[string]*LocalDnsOverrides `` /* 199-byte string literal not displayed */
	// contains filtered or unexported fields
}

type NetworkConfig struct {

	// Network plugin to be used by the cluster. Options are NONE, AZURE, KUBENET.
	NetworkPlugin NetworkPlugin `` /* 137-byte string literal not displayed */
	// Network policy to be used by the cluster.
	// This is still needed to compute ENSURE_NO_DUPE_PROMISCUOUS_BRIDGE.
	// Other than that, it is not used by others. See the discussions here https://github.com/Azure/AgentBaker/pull/4241#discussion_r1554283228
	NetworkPolicy NetworkPolicy `` /* 137-byte string literal not displayed */
	// URL to the vnet cni plugins tarball.
	VnetCniPluginsUrl string `protobuf:"bytes,3,opt,name=vnet_cni_plugins_url,json=vnetCniPluginsUrl,proto3" json:"vnet_cni_plugins_url,omitempty"`
	// URL to the cni plugins tarball.
	CniPluginsUrl string `protobuf:"bytes,4,opt,name=cni_plugins_url,json=cniPluginsUrl,proto3" json:"cni_plugins_url,omitempty"`
	// contains filtered or unexported fields
}

type NetworkPlugin int32

type NetworkPolicy int32

type RuncConfig struct {

	// The version of runc to use.
	RuncVersion string `protobuf:"bytes,1,opt,name=runc_version,json=runcVersion,proto3" json:"runc_version,omitempty"`
	// The URL to download the runc package from.
	RuncPackageUrl string `protobuf:"bytes,2,opt,name=runc_package_url,json=runcPackageUrl,proto3" json:"runc_package_url,omitempty"`
	// contains filtered or unexported fields
}

type ServiceAccountImagePullProfile struct {

	// Specifies whether service account based image pull is enabled
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Default client ID to use for image pull authentication
	DefaultClientId string `protobuf:"bytes,2,opt,name=default_client_id,json=defaultClientId,proto3" json:"default_client_id,omitempty"`
	// Default tenant ID to use for image pull authentication
	DefaultTenantId string `protobuf:"bytes,3,opt,name=default_tenant_id,json=defaultTenantId,proto3" json:"default_tenant_id,omitempty"`
	// Local authority SNI for identity bindings
	LocalAuthoritySni string `protobuf:"bytes,4,opt,name=local_authority_sni,json=localAuthoritySni,proto3" json:"local_authority_sni,omitempty"`
	// contains filtered or unexported fields
}

type SysctlConfig struct {

	// using optional here to allow detecting if the field is set or not (explicit presence in proto3)
	NetCoreSomaxconn               *int32  `protobuf:"varint,1,opt,name=net_core_somaxconn,json=netCoreSomaxconn,proto3,oneof" json:"net_core_somaxconn,omitempty"`
	NetCoreNetdevMaxBacklog        *int32  `` /* 143-byte string literal not displayed */
	NetCoreRmemDefault             *int32  `` /* 126-byte string literal not displayed */
	NetCoreRmemMax                 *int32  `protobuf:"varint,4,opt,name=net_core_rmem_max,json=netCoreRmemMax,proto3,oneof" json:"net_core_rmem_max,omitempty"`
	NetCoreWmemDefault             *int32  `` /* 126-byte string literal not displayed */
	NetCoreWmemMax                 *int32  `protobuf:"varint,6,opt,name=net_core_wmem_max,json=netCoreWmemMax,proto3,oneof" json:"net_core_wmem_max,omitempty"`
	NetCoreOptmemMax               *int32  `protobuf:"varint,7,opt,name=net_core_optmem_max,json=netCoreOptmemMax,proto3,oneof" json:"net_core_optmem_max,omitempty"`
	NetIpv4TcpMaxSynBacklog        *int32  `` /* 145-byte string literal not displayed */
	NetIpv4TcpMaxTwBuckets         *int32  `` /* 142-byte string literal not displayed */
	NetIpv4TcpFinTimeout           *int32  `` /* 135-byte string literal not displayed */
	NetIpv4TcpKeepaliveTime        *int32  `` /* 144-byte string literal not displayed */
	NetIpv4TcpKeepaliveProbes      *int32  `` /* 150-byte string literal not displayed */
	NetIpv4TcpkeepaliveIntvl       *int32  `` /* 145-byte string literal not displayed */
	NetIpv4TcpTwReuse              *bool   `` /* 126-byte string literal not displayed */
	NetIpv4IpLocalPortRange        *string `` /* 145-byte string literal not displayed */
	NetIpv4NeighDefaultGcThresh1   *int32  `` /* 161-byte string literal not displayed */
	NetIpv4NeighDefaultGcThresh2   *int32  `` /* 161-byte string literal not displayed */
	NetIpv4NeighDefaultGcThresh3   *int32  `` /* 161-byte string literal not displayed */
	NetNetfilterNfConntrackMax     *int32  `` /* 153-byte string literal not displayed */
	NetNetfilterNfConntrackBuckets *int32  `` /* 165-byte string literal not displayed */
	FsInotifyMaxUserWatches        *int32  `` /* 144-byte string literal not displayed */
	FsFileMax                      *int32  `protobuf:"varint,22,opt,name=fs_file_max,json=fsFileMax,proto3,oneof" json:"fs_file_max,omitempty"`
	FsAioMaxNr                     *int32  `protobuf:"varint,23,opt,name=fs_aio_max_nr,json=fsAioMaxNr,proto3,oneof" json:"fs_aio_max_nr,omitempty"`
	FsNrOpen                       *int32  `protobuf:"varint,24,opt,name=fs_nr_open,json=fsNrOpen,proto3,oneof" json:"fs_nr_open,omitempty"`
	KernelThreadsMax               *int32  `protobuf:"varint,25,opt,name=kernel_threads_max,json=kernelThreadsMax,proto3,oneof" json:"kernel_threads_max,omitempty"`
	VmMaxMapCount                  *int32  `protobuf:"varint,26,opt,name=vm_max_map_count,json=vmMaxMapCount,proto3,oneof" json:"vm_max_map_count,omitempty"`
	VmSwappiness                   *int32  `protobuf:"varint,27,opt,name=vm_swappiness,json=vmSwappiness,proto3,oneof" json:"vm_swappiness,omitempty"`
	VmVfsCachePressure             *int32  `` /* 127-byte string literal not displayed */
	// contains filtered or unexported fields
}

type UlimitConfig struct {

	// using optional here to allow detecting if the field is set or not (explicit presence in proto3)
	NoFile          *string `protobuf:"bytes,1,opt,name=no_file,json=noFile,proto3,oneof" json:"no_file,omitempty"`
	MaxLockedMemory *string `protobuf:"bytes,2,opt,name=max_locked_memory,json=maxLockedMemory,proto3,oneof" json:"max_locked_memory,omitempty"`
	// contains filtered or unexported fields
}

type VmType int32

type WorkloadRuntime int32