Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec

The Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec schema encapsulates the NSX Container Plugin-specific cluster networking configuration parameters for the vSphere Namespaces Cluster Set operation.

This schema was added in vSphere API 7.0.0.0.

JSON Example

{
    "pod_cidrs": [
        {
            "address": "string",
            "prefix": 0
        }
    ],
    "ingress_cidrs": [
        {
            "address": "string",
            "prefix": 0
        }
    ],
    "egress_cidrs": [
        {
            "address": "string",
            "prefix": 0
        }
    ],
    "default_ingress_tls_certificate": "string"
}

array of Vcenter NamespaceManagement Ipv4Cidr

pod_cidrs

Required

CIDR blocks from which Kubernetes allocates pod IP addresses. This range should not overlap with those in Vcenter NamespaceManagement Clusters EnableSpec.service_cidr, Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.ingress_cidrs, Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.egress_cidrs, or other services running in the datacenter. A set operation only allows for addition of new CIDR blocks to the existing list. All Pod CIDR blocks must be of at least subnet size /23.

This property was added in vSphere API 7.0.0.0.

array of Vcenter NamespaceManagement Ipv4Cidr

ingress_cidrs

Required

CIDR blocks from which NSX assigns IP addresses for Kubernetes Ingresses and Kubernetes Services of type LoadBalancer. These ranges should not overlap with those in Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.pod_cidrs, Vcenter NamespaceManagement Clusters EnableSpec.service_cidr, Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.egress_cidrs, or other services running in the datacenter. A set operation only allows for addition of new CIDR blocks to the existing list.

This property was added in vSphere API 7.0.0.0.

array of Vcenter NamespaceManagement Ipv4Cidr

egress_cidrs

Required

CIDR blocks from which NSX assigns IP addresses used for performing SNAT from container IPs to external IPs. These ranges should not overlap with those in Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.pod_cidrs, Vcenter NamespaceManagement Clusters EnableSpec.service_cidr, Vcenter NamespaceManagement Clusters NCPClusterNetworkSetSpec.ingress_cidrs, or other services running in the datacenter. A set operation only allows for addition of new CIDR blocks to the existing list.

This property was added in vSphere API 7.0.0.0.

string

default_ingress_tls_certificate

Required

PEM-encoded x509 certificate used by NSX as a default fallback certificate for Kubernetes Ingress services.

This property was added in vSphere API 7.0.0.0.