install.openshift.io_installconfigs.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.19.0
  name: installconfigs.install.openshift.io
spec:
  group: install.openshift.io
  names:
    kind: InstallConfig
    listKind: InstallConfigList
    plural: installconfigs
    singular: installconfig
  scope: Namespaced
  versions:
  - name: v1
    schema:
      openAPIV3Schema:
        description: InstallConfig is the configuration for an OpenShift install.
        properties:
          additionalTrustBundle:
            description: |-
              AdditionalTrustBundle is a PEM-encoded X.509 certificate bundle
              that will be added to the nodes' trusted certificate store.
            type: string
          additionalTrustBundlePolicy:
            description: |-
              AdditionalTrustBundlePolicy determines when to add the AdditionalTrustBundle
              to the nodes' trusted certificate store. "Proxyonly" is the default.
              The field can be set to following specified values.
              "Proxyonly" : adds the AdditionalTrustBundle to nodes when http/https proxy is configured.
              "Always" : always adds AdditionalTrustBundle.
            enum:
            - ""
            - Proxyonly
            - Always
            type: string
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          arbiter:
            description: |-
              Arbiter is the configuration for the machines that comprise the
              arbiter nodes.
            properties:
              architecture:
                default: amd64
                description: |-
                  Architecture is the instruction set architecture of the machine pool.
                  Defaults to amd64.
                enum:
                - ""
                - amd64
                type: string
              diskSetup:
                description: |-
                  DiskSetup stores the type of disks that will be setup with MachineConfigs.
                  The available types are etcd, swap and user-defined.
                items:
                  description: |-
                    Disk defines the type of disk (etcd, swap or user-defined) and the configuration
                    of each disk type.
                  properties:
                    etcd:
                      description: DiskEtcd defines a disk type of etcd.
                      properties:
                        platformDiskID:
                          type: string
                      type: object
                    swap:
                      description: DiskSwap defines a disk type of swap.
                      properties:
                        platformDiskID:
                          type: string
                      type: object
                    type:
                      description: DiskType is the string representation of the three
                        types disk setups
                      enum:
                      - etcd
                      - swap
                      - user-defined
                      type: string
                    userDefined:
                      description: DiskUserDefined defines a disk type of user-defined.
                      properties:
                        mountPath:
                          type: string
                        platformDiskID:
                          type: string
                      type: object
                  type: object
                type: array
              fencing:
                description: |-
                  Fencing stores the information about a baremetal host's management controller.
                  Fencing may only be set for control plane nodes.
                properties:
                  credentials:
                    description: Credentials stores the information about a baremetal
                      host's management controller.
                    items:
                      description: Credential stores the information about a baremetal
                        host's management controller.
                      properties:
                        address:
                          type: string
                        certificateVerification:
                          default: Enabled
                          description: |-
                            CertificateVerification Defines whether ssl certificate verification is required or not.
                            If omitted, the platform chooses a default, that default is enabled.
                          enum:
                          - Enabled
                          - Disabled
                          type: string
                        hostName:
                          type: string
                        password:
                          type: string
                        username:
                          type: string
                      required:
                      - address
                      - password
                      - username
                      type: object
                    type: array
                type: object
              hyperthreading:
                default: Enabled
                description: |-
                  Hyperthreading determines the mode of hyperthreading that machines in the
                  pool will utilize.
                  Default is for hyperthreading to be enabled.
                enum:
                - ""
                - Enabled
                - Disabled
                type: string
              management:
                default: ClusterAPI
                description: |-
                  Management is the API that will be used for machine management in the cluster.
                  Using this field for control plane machines requires the ClusterAPIControlPlaneInstall feature gate.
                  Using this field for compute machines requires the ClusterAPIComputeInstall feature gate.
                  Supported platforms: aws
                  Default is ClusterAPI.
                enum:
                - ClusterAPI
                - MachineAPI
                type: string
              name:
                description: |-
                  Name is the name of the machine pool.
                  For the control plane machine pool, the name will always be "master".
                  For the compute machine pools, the only valid name is "worker".
                  For the arbiter machine pools, the only valid name is "arbiter".
                type: string
              platform:
                description: Platform is configuration for machine pool specific to
                  the platform.
                properties:
                  aws:
                    description: AWS is the configuration used when installing on
                      AWS.
                    properties:
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines, where each ID
                          is presented in the format sg-xxxx.
                        items:
                          type: string
                        maxItems: 10
                        type: array
                      amiID:
                        description: |-
                          AMIID is the AMI that should be used to boot the ec2 instance.
                          If set, the AMI should belong to the same region as the cluster.
                        type: string
                      cpuOptions:
                        description: |-
                          CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
                          When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
                          More info:
                          https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
                          https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
                        minProperties: 1
                        properties:
                          confidentialCompute:
                            description: |-
                              ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
                              and, if so, which confidential computing technology to use.
                              Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
                              When set to Disabled, confidential computing will be disabled for the instance.
                              When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
                              In this case, ensure the following conditions are met:
                              1) The selected instance type supports AMD SEV-SNP.
                              2) The selected AWS region supports AMD SEV-SNP.
                              3) The selected AMI supports AMD SEV-SNP.
                              More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
                              When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
                              which is subject to change without notice. The current default is Disabled.
                            enum:
                            - Disabled
                            - AMDEncryptedVirtualizationNestedPaging
                            type: string
                        type: object
                      hostPlacement:
                        description: |-
                          hostPlacement configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host
                          for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL),
                          and to gain visibility and control over instance placement on a physical server.
                          When omitted, the instance is not constrained to a dedicated host.
                        properties:
                          affinity:
                            description: |-
                              affinity specifies the affinity setting for the instance.
                              Allowed values are AnyAvailable and DedicatedHost.
                              When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set.
                              When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host.
                            enum:
                            - DedicatedHost
                            - AnyAvailable
                            type: string
                          dedicatedHost:
                            description: |-
                              dedicatedHost specifies the exact host that an instance should be restarted on if stopped.
                              dedicatedHost is required when 'affinity' is set to DedicatedHost, and forbidden otherwise.
                            items:
                              description: DedicatedHost represents the configuration
                                for the usage of dedicated host.
                              properties:
                                id:
                                  description: |-
                                    id identifies the AWS Dedicated Host on which the instance must run.
                                    The value must start with "h-" followed by 17 lowercase hexadecimal characters (0-9 and a-f).
                                    Must be exactly 19 characters in length.
                                  maxLength: 19
                                  minLength: 19
                                  type: string
                                  x-kubernetes-validations:
                                  - message: hostID must start with 'h-' followed
                                      by 17 lowercase hexadecimal characters (0-9
                                      and a-f)
                                    rule: self.matches('^h-[0-9a-f]{17}$')
                              required:
                              - id
                              type: object
                            type: array
                        required:
                        - affinity
                        type: object
                        x-kubernetes-validations:
                        - message: dedicatedHost is required when affinity is DedicatedHost,
                            and forbidden otherwise
                          rule: 'has(self.affinity) && self.affinity == ''DedicatedHost''
                            ?  has(self.dedicatedHost) : !has(self.dedicatedHost)'
                      iamProfile:
                        description: |-
                          IAMProfile is the name of the IAM instance profile to use for the machine.
                          Leave unset to have the installer create the IAM Profile on your behalf.
                          Cannot be specified together with iamRole.
                        type: string
                      iamRole:
                        description: |-
                          IAMRole is the name of the IAM Role to use for the instance profile of the machine.
                          Leave unset to have the installer create the IAM Role on your behalf.
                          Cannot be specified together with iamProfile.
                        type: string
                      metadataService:
                        description: EC2MetadataOptions defines metadata service interaction
                          options for EC2 instances in the machine pool.
                        properties:
                          authentication:
                            description: |-
                              Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service.
                              When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service.
                              When omitted, this means the user has no opinion and the value is left to the platform to choose a good
                              default, which is subject to change over time. The current default is optional.
                              At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html
                            enum:
                            - Required
                            - Optional
                            type: string
                        type: object
                      rootVolume:
                        description: EC2RootVolume defines the root volume for EC2
                          instances in the machine pool.
                        properties:
                          iops:
                            description: |-
                              IOPS defines the amount of provisioned IOPS. (KiB/s). IOPS may only be set for
                              io1, io2, & gp3 volume types.
                            minimum: 0
                            type: integer
                          kmsKeyARN:
                            description: |-
                              The KMS key that will be used to encrypt the EBS volume.
                              If no key is provided the default KMS key for the account will be used.
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html
                            type: string
                          size:
                            description: Size defines the size of the volume in gibibytes
                              (GiB).
                            minimum: 0
                            type: integer
                          throughput:
                            description: |-
                              Throughput to provision in MiB/s supported for the volume type. Not applicable to all types.

                              This parameter is valid only for gp3 volumes.
                              Valid Range: Minimum value of 125. Maximum value of 2000.

                              When omitted, this means no opinion, and the platform is left to
                              choose a reasonable default, which is subject to change over time.
                              The current default is 125.
                            format: int32
                            maximum: 2000
                            minimum: 125
                            type: integer
                          type:
                            description: Type defines the type of the volume.
                            type: string
                        required:
                        - size
                        - type
                        type: object
                      type:
                        description: |-
                          InstanceType defines the ec2 instance type.
                          eg. m4-large
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  azure:
                    description: Azure is the configuration used when installing on
                      Azure.
                    properties:
                      bootDiagnostics:
                        description: |-
                          BootDiagnostics has the value for the storage account URI where the
                          machine log information of the control plane is sent to.
                          Defaults to managed for control plane if no value is mentioned.
                        properties:
                          resourceGroup:
                            description: |-
                              ResourceGroup specifies the name of the resource group where the
                              storage account to be used for diagnostics storage is present.
                              Only used if the type is set to UserManaged.
                            type: string
                          storageAccountName:
                            description: |-
                              StorageAccountName specifies the storage account where the diagnostics
                              logs need to be stored.
                              Only used if the type is set to UserManaged.
                            type: string
                          type:
                            allOf:
                            - enum:
                              - Managed
                              - UserManaged
                              - Disabled
                            - enum:
                              - Disabled
                              - Managed
                              - UserManaged
                            description: |-
                              Type specifies the boot diagnostics type for the machines created.
                              Defaults as disabled for compute nodes and as managed for control plane
                              nodes.
                              Values allowed are Disabled, Managed and UserManaged.
                            type: string
                        required:
                        - resourceGroup
                        - storageAccountName
                        - type
                        type: object
                      dataDisks:
                        description: DataDisk specifies the parameters that are used
                          to add one or more data disks to the machine.
                        items:
                          description: DataDisk specifies the parameters that are
                            used to add one or more data disks to the machine.
                          properties:
                            cachingType:
                              description: CachingType specifies the caching requirements.
                              enum:
                              - None
                              - ReadOnly
                              - ReadWrite
                              type: string
                            diskSizeGB:
                              description: DiskSizeGB is the size in GB to assign
                                to the data disk.
                              format: int32
                              type: integer
                            lun:
                              description: |-
                                Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM.
                                The value must be between 0 and 63.
                              format: int32
                              type: integer
                            managedDisk:
                              description: ManagedDisk specifies the Managed Disk
                                parameters for the data disk.
                              properties:
                                diskEncryptionSet:
                                  description: DiskEncryptionSet specifies the customer-managed
                                    disk encryption set resource id for the managed
                                    disk.
                                  properties:
                                    id:
                                      description: ID defines resourceID for diskEncryptionSet
                                        resource. It must be in the same subscription
                                      type: string
                                  type: object
                                securityProfile:
                                  description: SecurityProfile specifies the security
                                    profile for the managed disk.
                                  properties:
                                    diskEncryptionSet:
                                      description: |-
                                        DiskEncryptionSet specifies the customer-managed disk encryption set resource id for the
                                        managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                        VMGuest blob.
                                      properties:
                                        id:
                                          description: ID defines resourceID for diskEncryptionSet
                                            resource. It must be in the same subscription
                                          type: string
                                      type: object
                                    securityEncryptionType:
                                      description: |-
                                        SecurityEncryptionType specifies the encryption type of the managed disk.
                                        It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                        blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                        When set to VMGuestStateOnly, VirtualizedTrustedPlatformModule should be set to Enabled.
                                        When set to DiskWithVMGuestState, EncryptionAtHost should be disabled, SecureBoot and
                                        VirtualizedTrustedPlatformModule should be set to Enabled.
                                        It can be set only for Confidential VMs.
                                      enum:
                                      - VMGuestStateOnly
                                      - DiskWithVMGuestState
                                      type: string
                                  type: object
                                storageAccountType:
                                  type: string
                              type: object
                            nameSuffix:
                              description: |-
                                NameSuffix is the suffix to be appended to the machine name to generate the disk name.
                                Each disk name will be in format <machineName>_<nameSuffix>.
                              type: string
                          required:
                          - diskSizeGB
                          - nameSuffix
                          type: object
                        type: array
                      encryptionAtHost:
                        description: EncryptionAtHost enables encryption at the VM
                          host.
                        type: boolean
                      identity:
                        default: UserAssigned
                        description: |-
                          Identity is the type of identity used for the virtual machine.
                          The type 'UserAssigned' is a standalone Azure resource provided by the user
                          and assigned to the VM.
                          The default identity is a user-assigned identity, generated by the installer.
                          This default is expected to change in future releases.
                        properties:
                          type:
                            description: Type specifies the type of identity to be
                              used.
                            enum:
                            - None
                            - UserAssigned
                            type: string
                          userAssignedIdentities:
                            description: |-
                              UserAssignedIdentities is a list of identities to be attached to a node.
                              Only one user-assigned identity may be supplied.
                              Supplying more than one user-assigned identity is an experimental feature
                              which may be enabled with the MachineAPIMigration feature gate.
                            items:
                              description: UserAssignedIdentity contains the fields
                                that comprise a user-assigned identity.
                              properties:
                                name:
                                  description: Name is the name of the user-assigned
                                    identity to be assigned to the node.
                                  type: string
                                resourceGroup:
                                  description: ResourceGroup is the resource group
                                    that contains the user-assigned identity.
                                  type: string
                                subscription:
                                  description: Subscription is the subscription that
                                    contains the user-assigned identity.
                                  type: string
                              required:
                              - name
                              - resourceGroup
                              - subscription
                              type: object
                            type: array
                        required:
                        - type
                        - userAssignedIdentities
                        type: object
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskEncryptionSet:
                            description: DiskEncryptionSet defines a disk encryption
                              set.
                            properties:
                              name:
                                description: Name is the name of the disk encryption
                                  set.
                                type: string
                              resourceGroup:
                                description: |-
                                  ResourceGroup defines the Azure resource group used by the disk
                                  encryption set.
                                type: string
                              subscriptionId:
                                description: |-
                                  SubscriptionID defines the Azure subscription the disk encryption
                                  set is in.
                                  Must be the same subscription ID as the resource group of the installer.
                                type: string
                            required:
                            - name
                            - resourceGroup
                            type: object
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            minimum: 0
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are Premium_LRS and StandardSSD_LRS.
                              Default is Premium_LRS.
                            enum:
                            - Standard_LRS
                            - Premium_LRS
                            - StandardSSD_LRS
                            type: string
                          securityProfile:
                            description: SecurityProfile specifies the security profile
                              for the managed disk.
                            properties:
                              diskEncryptionSet:
                                description: |-
                                  DiskEncryptionSet specifies the customer managed disk encryption set resource id for the
                                  managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                  VMGuestState blob.
                                properties:
                                  name:
                                    description: Name is the name of the disk encryption
                                      set.
                                    type: string
                                  resourceGroup:
                                    description: |-
                                      ResourceGroup defines the Azure resource group used by the disk
                                      encryption set.
                                    type: string
                                  subscriptionId:
                                    description: |-
                                      SubscriptionID defines the Azure subscription the disk encryption
                                      set is in.
                                      Must be the same subscription ID as the resource group of the installer.
                                    type: string
                                required:
                                - name
                                - resourceGroup
                                type: object
                              securityEncryptionType:
                                description: |-
                                  SecurityEncryptionType specifies the encryption type of the managed disk.
                                  It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                  blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                  When set to VMGuestStateOnly, the VTpmEnabled should be set to true.
                                  When set to DiskWithVMGuestState, both SecureBootEnabled and VTpmEnabled should be set to true.
                                  It can be set only for Confidential VMs.
                                enum:
                                - VMGuestStateOnly
                                - DiskWithVMGuestState
                                type: string
                            type: object
                        required:
                        - diskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines the image to use for the OS.
                        properties:
                          offer:
                            description: Offer is the offer of the image.
                            type: string
                          plan:
                            description: |-
                              Plan is the purchase plan of the image.
                              If omitted, it defaults to "WithPurchasePlan".
                            enum:
                            - WithPurchasePlan
                            - NoPurchasePlan
                            type: string
                          publisher:
                            description: Publisher is the publisher of the image.
                            type: string
                          sku:
                            description: SKU is the SKU of the image.
                            type: string
                          version:
                            description: Version is the version of the image.
                            type: string
                        required:
                        - offer
                        - publisher
                        - sku
                        - version
                        type: object
                      settings:
                        description: |-
                          Settings specify the security type and the UEFI settings of the virtual machine. This field can
                          be set for Confidential VMs and Trusted Launch for VMs.
                        properties:
                          confidentialVM:
                            description: |-
                              ConfidentialVM specifies the security configuration of the virtual machine.
                              For more information regarding Confidential VMs, please refer to:
                              https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                          securityType:
                            description: |-
                              SecurityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to
                              enable secure boot and vTPM. The default behavior is: secure boot and vTPM will not be enabled unless this property is set.
                            enum:
                            - ConfidentialVM
                            - TrustedLaunch
                            type: string
                          trustedLaunch:
                            description: |-
                              TrustedLaunch specifies the security configuration of the virtual machine.
                              For more information regarding TrustedLaunch for VMs, please refer to:
                              https://learn.microsoft.com/azure/virtual-machines/trusted-launch
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                        required:
                        - securityType
                        type: object
                      type:
                        description: |-
                          InstanceType defines the azure instance type.
                          eg. Standard_DS_V2
                        type: string
                      ultraSSDCapability:
                        description: ultraSSDCapability defines if the instance should
                          use Ultra SSD disks.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      vmNetworkingType:
                        description: |-
                          VMNetworkingType specifies whether to enable accelerated networking.
                          Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its
                          networking performance.
                          eg. values: "Accelerated", "Basic"
                        enum:
                        - Accelerated
                        - Basic
                        type: string
                      zones:
                        description: |-
                          Zones is list of availability zones that can be used.
                          eg. ["1", "2", "3"]
                        items:
                          type: string
                        type: array
                    type: object
                  baremetal:
                    description: BareMetal is the configuration used when installing
                      on bare metal.
                    type: object
                  gcp:
                    description: GCP is the configuration used when installing on
                      GCP
                    properties:
                      confidentialCompute:
                        default: Disabled
                        description: |-
                          confidentialCompute is an optional field defining whether the instance should have
                          Confidential Computing enabled or not, and the Confidential Computing technology of choice.
                              With Disabled, Confidential Computing is disabled.
                              With Enabled, Confidential Computing is enabled with no preference on the
                          Confidential Computing technology. The platform chooses a default i.e. AMD SEV,
                          which is subject to change over time.
                              With AMDEncryptedVirtualization, Confidential Computing is enabled with
                          AMD Secure Encrypted Virtualization (AMD SEV).
                              With AMDEncryptedVirtualizationNestedPaging, Confidential Computing is
                          enabled with AMD Secure Encrypted Virtualization Secure Nested Paging
                          (AMD SEV-SNP).
                              With IntelTrustedDomainExtensions, Confidential Computing is enabled with
                          Intel Trusted Domain Extensions (Intel TDX).
                              If any value other than Disabled is set, a machine type and region that supports
                          Confidential Computing must be specified. Machine series and regions supporting
                          Confidential Computing technologies can be checked at
                          https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#machine-type-cpu-zone
                              If any value other than Disabled is set, onHostMaintenance is required to be set
                          to "Terminate".
                        enum:
                        - ""
                        - Enabled
                        - Disabled
                        - AMDEncryptedVirtualization
                        - AMDEncryptedVirtualizationNestedPaging
                        - IntelTrustedDomainExtensions
                        type: string
                      onHostMaintenance:
                        default: Migrate
                        description: |-
                          OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot.
                          Allowed values are "Migrate" and "Terminate".
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is "Migrate".
                        enum:
                        - Migrate
                        - Terminate
                        type: string
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          DiskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int64
                            maximum: 65536
                            minimum: 16
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are pd-balanced, pd-ssd, and hyperdisk-balanced.
                            enum:
                            - pd-balanced
                            - pd-ssd
                            - pd-standard
                            - hyperdisk-balanced
                            type: string
                          encryptionKey:
                            description: EncryptionKey defines the KMS key to be used
                              to encrypt the disk.
                            properties:
                              kmsKey:
                                description: KMSKey is a reference to a KMS Key to
                                  use for the encryption.
                                properties:
                                  keyRing:
                                    description: KeyRing is the name of the KMS Key
                                      Ring which the KMS Key belongs to.
                                    type: string
                                  location:
                                    description: Location is the GCP location in which
                                      the Key Ring exists.
                                    type: string
                                  name:
                                    description: Name is the name of the customer
                                      managed encryption key to be used for the disk
                                      encryption.
                                    type: string
                                  projectID:
                                    description: |-
                                      ProjectID is the ID of the Project in which the KMS Key Ring exists.
                                      Defaults to the VM ProjectID if not set.
                                    type: string
                                required:
                                - keyRing
                                - location
                                - name
                                type: object
                              kmsKeyServiceAccount:
                                description: |-
                                  KMSKeyServiceAccount is the service account being used for the
                                  encryption request for the given KMS key. If absent, the Compute
                                  Engine default service account is used.
                                  See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account
                                  for details on the default service account.
                                type: string
                            type: object
                        required:
                        - DiskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines a custom image for instance.
                        properties:
                          name:
                            description: Name defines the name of the image.
                            type: string
                          project:
                            description: Project defines the name of the project containing
                              the image.
                            type: string
                        required:
                        - name
                        - project
                        type: object
                      secureBoot:
                        description: |-
                          SecureBoot Defines whether the instance should have secure boot enabled.
                          secure boot Verify the digital signature of all boot components, and halt the boot process if signature verification fails.
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      serviceAccount:
                        description: |-
                          ServiceAccount is the email of a gcp service account to be used during installations.
                          The provided service account can be attached to both control-plane nodes
                          and worker nodes in order to provide the permissions required by the cloud provider.
                        type: string
                      tags:
                        description: Tags defines a set of network tags which will
                          be added to instances in the machineset
                        items:
                          type: string
                        type: array
                      type:
                        description: |-
                          InstanceType defines the GCP instance type.
                          eg. n1-standard-4
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  ibmcloud:
                    description: IBMCloud is the configuration used when installing
                      on IBM Cloud.
                    properties:
                      bootVolume:
                        description: BootVolume is the configuration for the machine's
                          boot volume.
                        properties:
                          encryptionKey:
                            description: |-
                              EncryptionKey is the CRN referencing a Key Protect or Hyper Protect
                              Crypto Services key to use for volume encryption. If not specified, a
                              provider managed encryption key will be used.
                            type: string
                        type: object
                      dedicatedHosts:
                        description: DedicatedHosts is the configuration for the machine's
                          dedicated host and profile.
                        items:
                          description: DedicatedHost stores the configuration for
                            the machine's dedicated host platform.
                          properties:
                            name:
                              description: |-
                                Name is the name of the dedicated host to provision the machine on. If
                                specified, machines will be created on pre-existing dedicated host.
                              type: string
                            profile:
                              description: |-
                                Profile is the profile ID for the dedicated host. If specified, new
                                dedicated host will be created for machines.
                              type: string
                          type: object
                        type: array
                      type:
                        description: InstanceType is the VSI machine profile.
                        type: string
                      zones:
                        description: Zones is the list of availability zones used
                          for machines in the pool.
                        items:
                          type: string
                        type: array
                    type: object
                  nutanix:
                    description: Nutanix is the configuration used when installing
                      on Nutanix.
                    properties:
                      bootType:
                        description: |-
                          BootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot.
                          If this field is empty or omitted, the VM will use the default boot type "Legacy" to boot.
                          "SecureBoot" depends on "UEFI" boot, i.e., enabling "SecureBoot" means that "UEFI" boot is also enabled.
                        enum:
                        - ""
                        - Legacy
                        - UEFI
                        - SecureBoot
                        type: string
                      categories:
                        description: |-
                          Categories optionally adds one or more prism categories (each with key and value) for
                          the Machine's VM to associate with. All the category key and value pairs specified must
                          already exist in the prism central.
                        items:
                          description: NutanixCategory identifies a pair of prism
                            category key and value
                          properties:
                            key:
                              description: key is the prism category key name
                              maxLength: 64
                              minLength: 1
                              type: string
                            value:
                              description: value is the prism category value associated
                                with the key
                              maxLength: 64
                              minLength: 1
                              type: string
                          required:
                          - key
                          - value
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - key
                        x-kubernetes-list-type: map
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs times NumCoresPerSocket.
                          For example: 4 CPUs and 4 Cores per socket will result in 16 VPUs.
                          The AHV scheduler treats socket and core allocation exactly the same
                          so there is no benefit to configuring cores over CPUs.
                        format: int64
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int64
                        type: integer
                      dataDisks:
                        description: DataDisks holds information of the data disks
                          to attach to the Machine's VM
                        items:
                          description: DataDisk defines a data disk for a Machine
                            VM.
                          properties:
                            dataSourceImage:
                              description: dataSource refers to a data source image
                                for the VM disk.
                              properties:
                                name:
                                  description: Name is the name of the storage container
                                    resource in the Prism Element.
                                  type: string
                                referenceName:
                                  description: ReferenceName is the identifier of
                                    the storage resource configured in the FailureDomain.
                                  type: string
                                uuid:
                                  description: UUID is the UUID of the storage container
                                    resource in the Prism Element.
                                  type: string
                              required:
                              - uuid
                              type: object
                            deviceProperties:
                              description: deviceProperties are the properties of
                                the disk device.
                              properties:
                                adapterType:
                                  description: |-
                                    adapterType is the adapter type of the disk address.
                                    If the deviceType is "Disk", the valid adapterType can be "SCSI", "IDE", "PCI", "SATA" or "SPAPR".
                                    If the deviceType is "CDRom", the valid adapterType can be "IDE" or "SATA".
                                  enum:
                                  - SCSI
                                  - IDE
                                  - PCI
                                  - SATA
                                  - SPAPR
                                  type: string
                                deviceIndex:
                                  default: 0
                                  description: |-
                                    deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0.
                                    For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should
                                    start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0
                                    and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE,
                                    the deviceIndex should start from 1.
                                  format: int32
                                  minimum: 0
                                  type: integer
                                deviceType:
                                  default: Disk
                                  description: |-
                                    deviceType specifies the disk device type.
                                    The valid values are "Disk" and "CDRom", and the default is "Disk".
                                  enum:
                                  - Disk
                                  - CDRom
                                  type: string
                              required:
                              - adapterType
                              - deviceIndex
                              - deviceType
                              type: object
                            diskSize:
                              anyOf:
                              - type: integer
                              - type: string
                              description: |-
                                diskSize is size (in Quantity format) of the disk to attach to the VM.
                                See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation.
                                The minimum diskSize is 1GB.
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            storageConfig:
                              description: storageConfig are the storage configuration
                                parameters of the VM disks.
                              properties:
                                diskMode:
                                  allOf:
                                  - enum:
                                    - Standard
                                    - Flash
                                  - enum:
                                    - Standard
                                    - Flash
                                  default: Standard
                                  description: |-
                                    diskMode specifies the disk mode.
                                    The valid values are Standard and Flash, and the default is Standard.
                                  type: string
                                storageContainer:
                                  description: storageContainer refers to the storage_container
                                    used by the VM disk.
                                  properties:
                                    name:
                                      description: Name is the name of the storage
                                        container resource in the Prism Element.
                                      type: string
                                    referenceName:
                                      description: ReferenceName is the identifier
                                        of the storage resource configured in the
                                        FailureDomain.
                                      type: string
                                    uuid:
                                      description: UUID is the UUID of the storage
                                        container resource in the Prism Element.
                                      type: string
                                  required:
                                  - uuid
                                  type: object
                              required:
                              - diskMode
                              type: object
                          required:
                          - diskSize
                          type: object
                        type: array
                        x-kubernetes-list-type: set
                      failureDomains:
                        description: |-
                          FailureDomains optionally configures a list of failure domain names
                          that will be applied to the MachinePool
                        items:
                          type: string
                        type: array
                        x-kubernetes-list-type: set
                      gpus:
                        description: GPUs is a list of GPU devices to attach to the
                          machine's VM.
                        items:
                          description: NutanixGPU holds the identity of a Nutanix
                            GPU resource in the Prism Central
                          properties:
                            deviceID:
                              description: deviceID is the GPU device ID with the
                                integer value.
                              format: int32
                              type: integer
                            name:
                              description: name is the GPU device name
                              type: string
                            type:
                              description: |-
                                type is the identifier type of the GPU device.
                                Valid values are Name and DeviceID.
                              enum:
                              - Name
                              - DeviceID
                              type: string
                          required:
                          - type
                          type: object
                          x-kubernetes-validations:
                          - message: deviceID configuration is required when type
                              is DeviceID, and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''DeviceID'' ?  has(self.deviceID)
                              : !has(self.deviceID)'
                          - message: name configuration is required when type is Name,
                              and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''Name'' ?  has(self.name)
                              : !has(self.name)'
                        type: array
                        x-kubernetes-list-type: set
                      memoryMiB:
                        description: Memory is the size of a VM's memory in MiB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGiB:
                            description: DiskSizeGiB defines the size of disk in GiB.
                            format: int64
                            type: integer
                        type: object
                      project:
                        description: Project optionally identifies a Prism project
                          for the Machine's VM to associate with.
                        properties:
                          name:
                            description: name is the resource name in the PC
                            type: string
                          type:
                            description: type is the identifier type to use for this
                              resource.
                            enum:
                            - uuid
                            - name
                            type: string
                          uuid:
                            description: uuid is the UUID of the resource in the PC.
                            type: string
                        required:
                        - type
                        type: object
                    type: object
                  openstack:
                    description: OpenStack is the configuration used when installing
                      on OpenStack.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  ovirt:
                    description: Ovirt is the configuration used when installing on
                      oVirt.
                    properties:
                      affinityGroupsNames:
                        description: |-
                          AffinityGroupsNames contains a list of oVirt affinity group names that the newly created machines will join.
                          The affinity groups should exist on the oVirt cluster or created by the OpenShift installer.
                        items:
                          type: string
                        type: array
                      autoPinningPolicy:
                        description: |-
                          AutoPinningPolicy defines the policy to automatically set the CPU
                          and NUMA including pinning to the host for the instance.
                          When the field is omitted the default will be "none".
                        enum:
                        - none
                        - resize_and_pin
                        type: string
                      clone:
                        description: |-
                          Clone makes sure that the disks are cloned from the template and are not linked.
                          Defaults to true for high performance and server VM types, false for desktop types.

                          Note: this option is not documented in the OpenShift documentation. This is intentional as it has sane defaults
                          that shouldn't be changed unless needed for debugging or resolving issues in cooperation with Red Hat support.
                        type: boolean
                      cpu:
                        description: CPU defines the VM CPU.
                        properties:
                          cores:
                            description: |-
                              Cores is the number of cores per socket.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          sockets:
                            description: |-
                              Sockets is the number of sockets for a VM.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          threads:
                            description: Threads is the number of CPU threads.
                            format: int32
                            type: integer
                        required:
                        - cores
                        - sockets
                        - threads
                        type: object
                      format:
                        description: |-
                          Format is the disk format that the disks are in. Can be "cow" or "raw". "raw" disables several features that
                          may be needed, such as incremental backups.
                        enum:
                        - ""
                        - raw
                        - cow
                        type: string
                      hugepages:
                        description: Hugepages is the size of a VM's hugepages to
                          use in KiBs.
                        enum:
                        - 2048
                        - 1048576
                        format: int32
                        type: integer
                      instanceTypeID:
                        description: |-
                          InstanceTypeID defines the VM instance type and overrides
                          the hardware parameters of the created VM, including cpu and memory.
                          If InstanceTypeID is passed, all memory and cpu variables will be ignored.
                        type: string
                      memoryMB:
                        description: MemoryMB is the size of a VM's memory in MiBs.
                        format: int32
                        type: integer
                      osDisk:
                        description: OSDisk is the the root disk of the node.
                        properties:
                          sizeGB:
                            description: SizeGB size of the bootable disk in GiB.
                            format: int64
                            type: integer
                        required:
                        - sizeGB
                        type: object
                      sparse:
                        description: Sparse indicates that sparse provisioning should
                          be used and disks should be not preallocated.
                        type: boolean
                      vmType:
                        description: VMType defines the workload type of the VM.
                        enum:
                        - ""
                        - desktop
                        - server
                        - high_performance
                        type: string
                    type: object
                  powervc:
                    description: PowerVC is the configuration used when installing
                      on IBM Power VC.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  powervs:
                    description: PowerVS is the configuration used when installing
                      on IBM Power VS.
                    properties:
                      memoryGiB:
                        description: memoryGiB is the size of a virtual machine's
                          memory, in GiB.
                        format: int32
                        type: integer
                      procType:
                        description: |-
                          ProcType defines the processor sharing model for the instance.
                          Must be one of {Capped, Dedicated, Shared}.
                        enum:
                        - Dedicated
                        - Shared
                        - Capped
                        - ""
                        type: string
                      processors:
                        anyOf:
                        - type: integer
                        - type: string
                        description: Processors defines the processing units for the
                          instance.
                        x-kubernetes-int-or-string: true
                      smtLevel:
                        description: SMTLevel specifies the level of SMT to set the
                          control plane and worker nodes to.
                        type: string
                      sysType:
                        description: SysType defines the system type for instance.
                        type: string
                      volumeIDs:
                        description: VolumeIDs is the list of volumes attached to
                          the instance.
                        items:
                          type: string
                        type: array
                    type: object
                  vsphere:
                    description: VSphere is the configuration used when installing
                      on vSphere.
                    properties:
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs/NumCoresPerSocket.
                        format: int32
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int32
                        type: integer
                      dataDisks:
                        description: DataDisks are additional disks to add to the
                          VM that are not part of the VM's OVA template.
                        items:
                          description: DataDisk defines a data disk to add to the
                            VM that is not part of the VM OVA template.
                          properties:
                            name:
                              description: |-
                                name is used to identify the disk definition. name is required needs to be unique so that it can be used to
                                clearly identify purpose of the disk.
                              example: images_1
                              maxLength: 80
                              pattern: ^[a-zA-Z0-9]([-_a-zA-Z0-9]*[a-zA-Z0-9])?$
                              type: string
                            provisioningMode:
                              description: |-
                                provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk.
                                Allowed values are "Thin", "Thick", "EagerlyZeroed", and omitted.
                                When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space.
                                When set to Thick, the full disk size will be allocated when disk is created.
                                When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats.
                                When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.
                              enum:
                              - Thin
                              - Thick
                              - EagerlyZeroed
                              type: string
                            sizeGiB:
                              description: |-
                                sizeGiB is the size of the disk in GiB.
                                The maximum supported size is 16384 GiB.
                              format: int32
                              maximum: 16384
                              minimum: 1
                              type: integer
                          required:
                          - name
                          - sizeGiB
                          type: object
                        maxItems: 29
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      memoryMB:
                        description: Memory is the size of a VM's memory in MB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            type: integer
                        type: object
                      zones:
                        description: |-
                          Zones defines available zones
                          Zones is available in TechPreview.
                        items:
                          type: string
                        type: array
                    type: object
                type: object
              replicas:
                description: Replicas is the machine count for the machine pool.
                format: int64
                type: integer
            required:
            - name
            - platform
            type: object
          baseDomain:
            description: BaseDomain is the base domain to which the cluster should
              belong.
            type: string
          bootstrapInPlace:
            description: |-
              BootstrapInPlace is the configuration for installing a single node
              with bootstrap in place installation.
            properties:
              installationDisk:
                description: InstallationDisk is the target disk drive for coreos-installer
                type: string
            required:
            - installationDisk
            type: object
          capabilities:
            description: Capabilities configures the installation of optional core
              cluster components.
            properties:
              additionalEnabledCapabilities:
                description: |-
                  additionalEnabledCapabilities extends the set of managed
                  capabilities beyond the baseline defined in
                  baselineCapabilitySet. The default is an empty set.
                items:
                  description: ClusterVersionCapability enumerates optional, core
                    cluster components.
                  enum:
                  - openshift-samples
                  - baremetal
                  - marketplace
                  - Console
                  - Insights
                  - Storage
                  - CSISnapshot
                  - NodeTuning
                  - MachineAPI
                  - Build
                  - DeploymentConfig
                  - ImageRegistry
                  - OperatorLifecycleManager
                  - CloudCredential
                  - Ingress
                  - CloudControllerManager
                  - OperatorLifecycleManagerV1
                  type: string
                type: array
              baselineCapabilitySet:
                description: |-
                  baselineCapabilitySet selects an initial set of
                  optional capabilities to enable, which can be extended via
                  additionalEnabledCapabilities. The default is vCurrent.
                enum:
                - None
                - v4.11
                - v4.12
                - v4.13
                - v4.14
                - v4.15
                - v4.16
                - v4.17
                - v4.18
                - vCurrent
                type: string
            type: object
          compute:
            description: |-
              Compute is the configuration for the machines that comprise the
              compute nodes.
            items:
              description: MachinePool is a pool of machines to be installed.
              properties:
                architecture:
                  default: amd64
                  description: |-
                    Architecture is the instruction set architecture of the machine pool.
                    Defaults to amd64.
                  enum:
                  - ""
                  - amd64
                  type: string
                diskSetup:
                  description: |-
                    DiskSetup stores the type of disks that will be setup with MachineConfigs.
                    The available types are etcd, swap and user-defined.
                  items:
                    description: |-
                      Disk defines the type of disk (etcd, swap or user-defined) and the configuration
                      of each disk type.
                    properties:
                      etcd:
                        description: DiskEtcd defines a disk type of etcd.
                        properties:
                          platformDiskID:
                            type: string
                        type: object
                      swap:
                        description: DiskSwap defines a disk type of swap.
                        properties:
                          platformDiskID:
                            type: string
                        type: object
                      type:
                        description: DiskType is the string representation of the
                          three types disk setups
                        enum:
                        - etcd
                        - swap
                        - user-defined
                        type: string
                      userDefined:
                        description: DiskUserDefined defines a disk type of user-defined.
                        properties:
                          mountPath:
                            type: string
                          platformDiskID:
                            type: string
                        type: object
                    type: object
                  type: array
                fencing:
                  description: |-
                    Fencing stores the information about a baremetal host's management controller.
                    Fencing may only be set for control plane nodes.
                  properties:
                    credentials:
                      description: Credentials stores the information about a baremetal
                        host's management controller.
                      items:
                        description: Credential stores the information about a baremetal
                          host's management controller.
                        properties:
                          address:
                            type: string
                          certificateVerification:
                            default: Enabled
                            description: |-
                              CertificateVerification Defines whether ssl certificate verification is required or not.
                              If omitted, the platform chooses a default, that default is enabled.
                            enum:
                            - Enabled
                            - Disabled
                            type: string
                          hostName:
                            type: string
                          password:
                            type: string
                          username:
                            type: string
                        required:
                        - address
                        - password
                        - username
                        type: object
                      type: array
                  type: object
                hyperthreading:
                  default: Enabled
                  description: |-
                    Hyperthreading determines the mode of hyperthreading that machines in the
                    pool will utilize.
                    Default is for hyperthreading to be enabled.
                  enum:
                  - ""
                  - Enabled
                  - Disabled
                  type: string
                management:
                  default: ClusterAPI
                  description: |-
                    Management is the API that will be used for machine management in the cluster.
                    Using this field for control plane machines requires the ClusterAPIControlPlaneInstall feature gate.
                    Using this field for compute machines requires the ClusterAPIComputeInstall feature gate.
                    Supported platforms: aws
                    Default is ClusterAPI.
                  enum:
                  - ClusterAPI
                  - MachineAPI
                  type: string
                name:
                  description: |-
                    Name is the name of the machine pool.
                    For the control plane machine pool, the name will always be "master".
                    For the compute machine pools, the only valid name is "worker".
                    For the arbiter machine pools, the only valid name is "arbiter".
                  type: string
                platform:
                  description: Platform is configuration for machine pool specific
                    to the platform.
                  properties:
                    aws:
                      description: AWS is the configuration used when installing on
                        AWS.
                      properties:
                        additionalSecurityGroupIDs:
                          description: |-
                            AdditionalSecurityGroupIDs contains IDs of additional security groups for machines, where each ID
                            is presented in the format sg-xxxx.
                          items:
                            type: string
                          maxItems: 10
                          type: array
                        amiID:
                          description: |-
                            AMIID is the AMI that should be used to boot the ec2 instance.
                            If set, the AMI should belong to the same region as the cluster.
                          type: string
                        cpuOptions:
                          description: |-
                            CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
                            When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
                            More info:
                            https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
                            https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
                          minProperties: 1
                          properties:
                            confidentialCompute:
                              description: |-
                                ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
                                and, if so, which confidential computing technology to use.
                                Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
                                When set to Disabled, confidential computing will be disabled for the instance.
                                When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
                                In this case, ensure the following conditions are met:
                                1) The selected instance type supports AMD SEV-SNP.
                                2) The selected AWS region supports AMD SEV-SNP.
                                3) The selected AMI supports AMD SEV-SNP.
                                More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
                                When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
                                which is subject to change without notice. The current default is Disabled.
                              enum:
                              - Disabled
                              - AMDEncryptedVirtualizationNestedPaging
                              type: string
                          type: object
                        hostPlacement:
                          description: |-
                            hostPlacement configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host
                            for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL),
                            and to gain visibility and control over instance placement on a physical server.
                            When omitted, the instance is not constrained to a dedicated host.
                          properties:
                            affinity:
                              description: |-
                                affinity specifies the affinity setting for the instance.
                                Allowed values are AnyAvailable and DedicatedHost.
                                When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set.
                                When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host.
                              enum:
                              - DedicatedHost
                              - AnyAvailable
                              type: string
                            dedicatedHost:
                              description: |-
                                dedicatedHost specifies the exact host that an instance should be restarted on if stopped.
                                dedicatedHost is required when 'affinity' is set to DedicatedHost, and forbidden otherwise.
                              items:
                                description: DedicatedHost represents the configuration
                                  for the usage of dedicated host.
                                properties:
                                  id:
                                    description: |-
                                      id identifies the AWS Dedicated Host on which the instance must run.
                                      The value must start with "h-" followed by 17 lowercase hexadecimal characters (0-9 and a-f).
                                      Must be exactly 19 characters in length.
                                    maxLength: 19
                                    minLength: 19
                                    type: string
                                    x-kubernetes-validations:
                                    - message: hostID must start with 'h-' followed
                                        by 17 lowercase hexadecimal characters (0-9
                                        and a-f)
                                      rule: self.matches('^h-[0-9a-f]{17}$')
                                required:
                                - id
                                type: object
                              type: array
                          required:
                          - affinity
                          type: object
                          x-kubernetes-validations:
                          - message: dedicatedHost is required when affinity is DedicatedHost,
                              and forbidden otherwise
                            rule: 'has(self.affinity) && self.affinity == ''DedicatedHost''
                              ?  has(self.dedicatedHost) : !has(self.dedicatedHost)'
                        iamProfile:
                          description: |-
                            IAMProfile is the name of the IAM instance profile to use for the machine.
                            Leave unset to have the installer create the IAM Profile on your behalf.
                            Cannot be specified together with iamRole.
                          type: string
                        iamRole:
                          description: |-
                            IAMRole is the name of the IAM Role to use for the instance profile of the machine.
                            Leave unset to have the installer create the IAM Role on your behalf.
                            Cannot be specified together with iamProfile.
                          type: string
                        metadataService:
                          description: EC2MetadataOptions defines metadata service
                            interaction options for EC2 instances in the machine pool.
                          properties:
                            authentication:
                              description: |-
                                Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service.
                                When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service.
                                When omitted, this means the user has no opinion and the value is left to the platform to choose a good
                                default, which is subject to change over time. The current default is optional.
                                At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API
                                https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html
                              enum:
                              - Required
                              - Optional
                              type: string
                          type: object
                        rootVolume:
                          description: EC2RootVolume defines the root volume for EC2
                            instances in the machine pool.
                          properties:
                            iops:
                              description: |-
                                IOPS defines the amount of provisioned IOPS. (KiB/s). IOPS may only be set for
                                io1, io2, & gp3 volume types.
                              minimum: 0
                              type: integer
                            kmsKeyARN:
                              description: |-
                                The KMS key that will be used to encrypt the EBS volume.
                                If no key is provided the default KMS key for the account will be used.
                                https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html
                              type: string
                            size:
                              description: Size defines the size of the volume in
                                gibibytes (GiB).
                              minimum: 0
                              type: integer
                            throughput:
                              description: |-
                                Throughput to provision in MiB/s supported for the volume type. Not applicable to all types.

                                This parameter is valid only for gp3 volumes.
                                Valid Range: Minimum value of 125. Maximum value of 2000.

                                When omitted, this means no opinion, and the platform is left to
                                choose a reasonable default, which is subject to change over time.
                                The current default is 125.
                              format: int32
                              maximum: 2000
                              minimum: 125
                              type: integer
                            type:
                              description: Type defines the type of the volume.
                              type: string
                          required:
                          - size
                          - type
                          type: object
                        type:
                          description: |-
                            InstanceType defines the ec2 instance type.
                            eg. m4-large
                          type: string
                        zones:
                          description: Zones is list of availability zones that can
                            be used.
                          items:
                            type: string
                          type: array
                      type: object
                    azure:
                      description: Azure is the configuration used when installing
                        on Azure.
                      properties:
                        bootDiagnostics:
                          description: |-
                            BootDiagnostics has the value for the storage account URI where the
                            machine log information of the control plane is sent to.
                            Defaults to managed for control plane if no value is mentioned.
                          properties:
                            resourceGroup:
                              description: |-
                                ResourceGroup specifies the name of the resource group where the
                                storage account to be used for diagnostics storage is present.
                                Only used if the type is set to UserManaged.
                              type: string
                            storageAccountName:
                              description: |-
                                StorageAccountName specifies the storage account where the diagnostics
                                logs need to be stored.
                                Only used if the type is set to UserManaged.
                              type: string
                            type:
                              allOf:
                              - enum:
                                - Managed
                                - UserManaged
                                - Disabled
                              - enum:
                                - Disabled
                                - Managed
                                - UserManaged
                              description: |-
                                Type specifies the boot diagnostics type for the machines created.
                                Defaults as disabled for compute nodes and as managed for control plane
                                nodes.
                                Values allowed are Disabled, Managed and UserManaged.
                              type: string
                          required:
                          - resourceGroup
                          - storageAccountName
                          - type
                          type: object
                        dataDisks:
                          description: DataDisk specifies the parameters that are
                            used to add one or more data disks to the machine.
                          items:
                            description: DataDisk specifies the parameters that are
                              used to add one or more data disks to the machine.
                            properties:
                              cachingType:
                                description: CachingType specifies the caching requirements.
                                enum:
                                - None
                                - ReadOnly
                                - ReadWrite
                                type: string
                              diskSizeGB:
                                description: DiskSizeGB is the size in GB to assign
                                  to the data disk.
                                format: int32
                                type: integer
                              lun:
                                description: |-
                                  Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM.
                                  The value must be between 0 and 63.
                                format: int32
                                type: integer
                              managedDisk:
                                description: ManagedDisk specifies the Managed Disk
                                  parameters for the data disk.
                                properties:
                                  diskEncryptionSet:
                                    description: DiskEncryptionSet specifies the customer-managed
                                      disk encryption set resource id for the managed
                                      disk.
                                    properties:
                                      id:
                                        description: ID defines resourceID for diskEncryptionSet
                                          resource. It must be in the same subscription
                                        type: string
                                    type: object
                                  securityProfile:
                                    description: SecurityProfile specifies the security
                                      profile for the managed disk.
                                    properties:
                                      diskEncryptionSet:
                                        description: |-
                                          DiskEncryptionSet specifies the customer-managed disk encryption set resource id for the
                                          managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                          VMGuest blob.
                                        properties:
                                          id:
                                            description: ID defines resourceID for
                                              diskEncryptionSet resource. It must
                                              be in the same subscription
                                            type: string
                                        type: object
                                      securityEncryptionType:
                                        description: |-
                                          SecurityEncryptionType specifies the encryption type of the managed disk.
                                          It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                          blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                          When set to VMGuestStateOnly, VirtualizedTrustedPlatformModule should be set to Enabled.
                                          When set to DiskWithVMGuestState, EncryptionAtHost should be disabled, SecureBoot and
                                          VirtualizedTrustedPlatformModule should be set to Enabled.
                                          It can be set only for Confidential VMs.
                                        enum:
                                        - VMGuestStateOnly
                                        - DiskWithVMGuestState
                                        type: string
                                    type: object
                                  storageAccountType:
                                    type: string
                                type: object
                              nameSuffix:
                                description: |-
                                  NameSuffix is the suffix to be appended to the machine name to generate the disk name.
                                  Each disk name will be in format <machineName>_<nameSuffix>.
                                type: string
                            required:
                            - diskSizeGB
                            - nameSuffix
                            type: object
                          type: array
                        encryptionAtHost:
                          description: EncryptionAtHost enables encryption at the
                            VM host.
                          type: boolean
                        identity:
                          default: UserAssigned
                          description: |-
                            Identity is the type of identity used for the virtual machine.
                            The type 'UserAssigned' is a standalone Azure resource provided by the user
                            and assigned to the VM.
                            The default identity is a user-assigned identity, generated by the installer.
                            This default is expected to change in future releases.
                          properties:
                            type:
                              description: Type specifies the type of identity to
                                be used.
                              enum:
                              - None
                              - UserAssigned
                              type: string
                            userAssignedIdentities:
                              description: |-
                                UserAssignedIdentities is a list of identities to be attached to a node.
                                Only one user-assigned identity may be supplied.
                                Supplying more than one user-assigned identity is an experimental feature
                                which may be enabled with the MachineAPIMigration feature gate.
                              items:
                                description: UserAssignedIdentity contains the fields
                                  that comprise a user-assigned identity.
                                properties:
                                  name:
                                    description: Name is the name of the user-assigned
                                      identity to be assigned to the node.
                                    type: string
                                  resourceGroup:
                                    description: ResourceGroup is the resource group
                                      that contains the user-assigned identity.
                                    type: string
                                  subscription:
                                    description: Subscription is the subscription
                                      that contains the user-assigned identity.
                                    type: string
                                required:
                                - name
                                - resourceGroup
                                - subscription
                                type: object
                              type: array
                          required:
                          - type
                          - userAssignedIdentities
                          type: object
                        osDisk:
                          description: OSDisk defines the storage for instance.
                          properties:
                            diskEncryptionSet:
                              description: DiskEncryptionSet defines a disk encryption
                                set.
                              properties:
                                name:
                                  description: Name is the name of the disk encryption
                                    set.
                                  type: string
                                resourceGroup:
                                  description: |-
                                    ResourceGroup defines the Azure resource group used by the disk
                                    encryption set.
                                  type: string
                                subscriptionId:
                                  description: |-
                                    SubscriptionID defines the Azure subscription the disk encryption
                                    set is in.
                                    Must be the same subscription ID as the resource group of the installer.
                                  type: string
                              required:
                              - name
                              - resourceGroup
                              type: object
                            diskSizeGB:
                              description: DiskSizeGB defines the size of disk in
                                GB.
                              format: int32
                              minimum: 0
                              type: integer
                            diskType:
                              description: |-
                                DiskType defines the type of disk.
                                For control plane nodes, the valid values are Premium_LRS and StandardSSD_LRS.
                                Default is Premium_LRS.
                              enum:
                              - Standard_LRS
                              - Premium_LRS
                              - StandardSSD_LRS
                              type: string
                            securityProfile:
                              description: SecurityProfile specifies the security
                                profile for the managed disk.
                              properties:
                                diskEncryptionSet:
                                  description: |-
                                    DiskEncryptionSet specifies the customer managed disk encryption set resource id for the
                                    managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                    VMGuestState blob.
                                  properties:
                                    name:
                                      description: Name is the name of the disk encryption
                                        set.
                                      type: string
                                    resourceGroup:
                                      description: |-
                                        ResourceGroup defines the Azure resource group used by the disk
                                        encryption set.
                                      type: string
                                    subscriptionId:
                                      description: |-
                                        SubscriptionID defines the Azure subscription the disk encryption
                                        set is in.
                                        Must be the same subscription ID as the resource group of the installer.
                                      type: string
                                  required:
                                  - name
                                  - resourceGroup
                                  type: object
                                securityEncryptionType:
                                  description: |-
                                    SecurityEncryptionType specifies the encryption type of the managed disk.
                                    It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                    blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                    When set to VMGuestStateOnly, the VTpmEnabled should be set to true.
                                    When set to DiskWithVMGuestState, both SecureBootEnabled and VTpmEnabled should be set to true.
                                    It can be set only for Confidential VMs.
                                  enum:
                                  - VMGuestStateOnly
                                  - DiskWithVMGuestState
                                  type: string
                              type: object
                          required:
                          - diskSizeGB
                          type: object
                        osImage:
                          description: OSImage defines the image to use for the OS.
                          properties:
                            offer:
                              description: Offer is the offer of the image.
                              type: string
                            plan:
                              description: |-
                                Plan is the purchase plan of the image.
                                If omitted, it defaults to "WithPurchasePlan".
                              enum:
                              - WithPurchasePlan
                              - NoPurchasePlan
                              type: string
                            publisher:
                              description: Publisher is the publisher of the image.
                              type: string
                            sku:
                              description: SKU is the SKU of the image.
                              type: string
                            version:
                              description: Version is the version of the image.
                              type: string
                          required:
                          - offer
                          - publisher
                          - sku
                          - version
                          type: object
                        settings:
                          description: |-
                            Settings specify the security type and the UEFI settings of the virtual machine. This field can
                            be set for Confidential VMs and Trusted Launch for VMs.
                          properties:
                            confidentialVM:
                              description: |-
                                ConfidentialVM specifies the security configuration of the virtual machine.
                                For more information regarding Confidential VMs, please refer to:
                                https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview
                              properties:
                                uefiSettings:
                                  description: UEFISettings specifies the security
                                    settings like secure boot and vTPM used while
                                    creating the virtual machine.
                                  properties:
                                    secureBoot:
                                      description: |-
                                        SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                        Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                        signature verification fails.
                                        If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                      enum:
                                      - Enabled
                                      - Disabled
                                      type: string
                                    virtualizedTrustedPlatformModule:
                                      description: |-
                                        VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                        When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                        The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                        This is required to be set to enabled if the SecurityEncryptionType is defined.
                                        If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                      enum:
                                      - Enabled
                                      - Disabled
                                      type: string
                                  type: object
                              required:
                              - uefiSettings
                              type: object
                            securityType:
                              description: |-
                                SecurityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to
                                enable secure boot and vTPM. The default behavior is: secure boot and vTPM will not be enabled unless this property is set.
                              enum:
                              - ConfidentialVM
                              - TrustedLaunch
                              type: string
                            trustedLaunch:
                              description: |-
                                TrustedLaunch specifies the security configuration of the virtual machine.
                                For more information regarding TrustedLaunch for VMs, please refer to:
                                https://learn.microsoft.com/azure/virtual-machines/trusted-launch
                              properties:
                                uefiSettings:
                                  description: UEFISettings specifies the security
                                    settings like secure boot and vTPM used while
                                    creating the virtual machine.
                                  properties:
                                    secureBoot:
                                      description: |-
                                        SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                        Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                        signature verification fails.
                                        If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                      enum:
                                      - Enabled
                                      - Disabled
                                      type: string
                                    virtualizedTrustedPlatformModule:
                                      description: |-
                                        VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                        When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                        The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                        This is required to be set to enabled if the SecurityEncryptionType is defined.
                                        If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                      enum:
                                      - Enabled
                                      - Disabled
                                      type: string
                                  type: object
                              required:
                              - uefiSettings
                              type: object
                          required:
                          - securityType
                          type: object
                        type:
                          description: |-
                            InstanceType defines the azure instance type.
                            eg. Standard_DS_V2
                          type: string
                        ultraSSDCapability:
                          description: ultraSSDCapability defines if the instance
                            should use Ultra SSD disks.
                          enum:
                          - Enabled
                          - Disabled
                          type: string
                        vmNetworkingType:
                          description: |-
                            VMNetworkingType specifies whether to enable accelerated networking.
                            Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its
                            networking performance.
                            eg. values: "Accelerated", "Basic"
                          enum:
                          - Accelerated
                          - Basic
                          type: string
                        zones:
                          description: |-
                            Zones is list of availability zones that can be used.
                            eg. ["1", "2", "3"]
                          items:
                            type: string
                          type: array
                      type: object
                    baremetal:
                      description: BareMetal is the configuration used when installing
                        on bare metal.
                      type: object
                    gcp:
                      description: GCP is the configuration used when installing on
                        GCP
                      properties:
                        confidentialCompute:
                          default: Disabled
                          description: |-
                            confidentialCompute is an optional field defining whether the instance should have
                            Confidential Computing enabled or not, and the Confidential Computing technology of choice.
                                With Disabled, Confidential Computing is disabled.
                                With Enabled, Confidential Computing is enabled with no preference on the
                            Confidential Computing technology. The platform chooses a default i.e. AMD SEV,
                            which is subject to change over time.
                                With AMDEncryptedVirtualization, Confidential Computing is enabled with
                            AMD Secure Encrypted Virtualization (AMD SEV).
                                With AMDEncryptedVirtualizationNestedPaging, Confidential Computing is
                            enabled with AMD Secure Encrypted Virtualization Secure Nested Paging
                            (AMD SEV-SNP).
                                With IntelTrustedDomainExtensions, Confidential Computing is enabled with
                            Intel Trusted Domain Extensions (Intel TDX).
                                If any value other than Disabled is set, a machine type and region that supports
                            Confidential Computing must be specified. Machine series and regions supporting
                            Confidential Computing technologies can be checked at
                            https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#machine-type-cpu-zone
                                If any value other than Disabled is set, onHostMaintenance is required to be set
                            to "Terminate".
                          enum:
                          - ""
                          - Enabled
                          - Disabled
                          - AMDEncryptedVirtualization
                          - AMDEncryptedVirtualizationNestedPaging
                          - IntelTrustedDomainExtensions
                          type: string
                        onHostMaintenance:
                          default: Migrate
                          description: |-
                            OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot.
                            Allowed values are "Migrate" and "Terminate".
                            If omitted, the platform chooses a default, which is subject to change over time, currently that default is "Migrate".
                          enum:
                          - Migrate
                          - Terminate
                          type: string
                        osDisk:
                          description: OSDisk defines the storage for instance.
                          properties:
                            DiskSizeGB:
                              description: DiskSizeGB defines the size of disk in
                                GB.
                              format: int64
                              maximum: 65536
                              minimum: 16
                              type: integer
                            diskType:
                              description: |-
                                DiskType defines the type of disk.
                                For control plane nodes, the valid values are pd-balanced, pd-ssd, and hyperdisk-balanced.
                              enum:
                              - pd-balanced
                              - pd-ssd
                              - pd-standard
                              - hyperdisk-balanced
                              type: string
                            encryptionKey:
                              description: EncryptionKey defines the KMS key to be
                                used to encrypt the disk.
                              properties:
                                kmsKey:
                                  description: KMSKey is a reference to a KMS Key
                                    to use for the encryption.
                                  properties:
                                    keyRing:
                                      description: KeyRing is the name of the KMS
                                        Key Ring which the KMS Key belongs to.
                                      type: string
                                    location:
                                      description: Location is the GCP location in
                                        which the Key Ring exists.
                                      type: string
                                    name:
                                      description: Name is the name of the customer
                                        managed encryption key to be used for the
                                        disk encryption.
                                      type: string
                                    projectID:
                                      description: |-
                                        ProjectID is the ID of the Project in which the KMS Key Ring exists.
                                        Defaults to the VM ProjectID if not set.
                                      type: string
                                  required:
                                  - keyRing
                                  - location
                                  - name
                                  type: object
                                kmsKeyServiceAccount:
                                  description: |-
                                    KMSKeyServiceAccount is the service account being used for the
                                    encryption request for the given KMS key. If absent, the Compute
                                    Engine default service account is used.
                                    See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account
                                    for details on the default service account.
                                  type: string
                              type: object
                          required:
                          - DiskSizeGB
                          type: object
                        osImage:
                          description: OSImage defines a custom image for instance.
                          properties:
                            name:
                              description: Name defines the name of the image.
                              type: string
                            project:
                              description: Project defines the name of the project
                                containing the image.
                              type: string
                          required:
                          - name
                          - project
                          type: object
                        secureBoot:
                          description: |-
                            SecureBoot Defines whether the instance should have secure boot enabled.
                            secure boot Verify the digital signature of all boot components, and halt the boot process if signature verification fails.
                            If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.
                          enum:
                          - Enabled
                          - Disabled
                          type: string
                        serviceAccount:
                          description: |-
                            ServiceAccount is the email of a gcp service account to be used during installations.
                            The provided service account can be attached to both control-plane nodes
                            and worker nodes in order to provide the permissions required by the cloud provider.
                          type: string
                        tags:
                          description: Tags defines a set of network tags which will
                            be added to instances in the machineset
                          items:
                            type: string
                          type: array
                        type:
                          description: |-
                            InstanceType defines the GCP instance type.
                            eg. n1-standard-4
                          type: string
                        zones:
                          description: Zones is list of availability zones that can
                            be used.
                          items:
                            type: string
                          type: array
                      type: object
                    ibmcloud:
                      description: IBMCloud is the configuration used when installing
                        on IBM Cloud.
                      properties:
                        bootVolume:
                          description: BootVolume is the configuration for the machine's
                            boot volume.
                          properties:
                            encryptionKey:
                              description: |-
                                EncryptionKey is the CRN referencing a Key Protect or Hyper Protect
                                Crypto Services key to use for volume encryption. If not specified, a
                                provider managed encryption key will be used.
                              type: string
                          type: object
                        dedicatedHosts:
                          description: DedicatedHosts is the configuration for the
                            machine's dedicated host and profile.
                          items:
                            description: DedicatedHost stores the configuration for
                              the machine's dedicated host platform.
                            properties:
                              name:
                                description: |-
                                  Name is the name of the dedicated host to provision the machine on. If
                                  specified, machines will be created on pre-existing dedicated host.
                                type: string
                              profile:
                                description: |-
                                  Profile is the profile ID for the dedicated host. If specified, new
                                  dedicated host will be created for machines.
                                type: string
                            type: object
                          type: array
                        type:
                          description: InstanceType is the VSI machine profile.
                          type: string
                        zones:
                          description: Zones is the list of availability zones used
                            for machines in the pool.
                          items:
                            type: string
                          type: array
                      type: object
                    nutanix:
                      description: Nutanix is the configuration used when installing
                        on Nutanix.
                      properties:
                        bootType:
                          description: |-
                            BootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot.
                            If this field is empty or omitted, the VM will use the default boot type "Legacy" to boot.
                            "SecureBoot" depends on "UEFI" boot, i.e., enabling "SecureBoot" means that "UEFI" boot is also enabled.
                          enum:
                          - ""
                          - Legacy
                          - UEFI
                          - SecureBoot
                          type: string
                        categories:
                          description: |-
                            Categories optionally adds one or more prism categories (each with key and value) for
                            the Machine's VM to associate with. All the category key and value pairs specified must
                            already exist in the prism central.
                          items:
                            description: NutanixCategory identifies a pair of prism
                              category key and value
                            properties:
                              key:
                                description: key is the prism category key name
                                maxLength: 64
                                minLength: 1
                                type: string
                              value:
                                description: value is the prism category value associated
                                  with the key
                                maxLength: 64
                                minLength: 1
                                type: string
                            required:
                            - key
                            - value
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                          - key
                          x-kubernetes-list-type: map
                        coresPerSocket:
                          description: |-
                            NumCoresPerSocket is the number of cores per socket in a vm. The number
                            of vCPUs on the vm will be NumCPUs times NumCoresPerSocket.
                            For example: 4 CPUs and 4 Cores per socket will result in 16 VPUs.
                            The AHV scheduler treats socket and core allocation exactly the same
                            so there is no benefit to configuring cores over CPUs.
                          format: int64
                          type: integer
                        cpus:
                          description: NumCPUs is the total number of virtual processor
                            cores to assign a vm.
                          format: int64
                          type: integer
                        dataDisks:
                          description: DataDisks holds information of the data disks
                            to attach to the Machine's VM
                          items:
                            description: DataDisk defines a data disk for a Machine
                              VM.
                            properties:
                              dataSourceImage:
                                description: dataSource refers to a data source image
                                  for the VM disk.
                                properties:
                                  name:
                                    description: Name is the name of the storage container
                                      resource in the Prism Element.
                                    type: string
                                  referenceName:
                                    description: ReferenceName is the identifier of
                                      the storage resource configured in the FailureDomain.
                                    type: string
                                  uuid:
                                    description: UUID is the UUID of the storage container
                                      resource in the Prism Element.
                                    type: string
                                required:
                                - uuid
                                type: object
                              deviceProperties:
                                description: deviceProperties are the properties of
                                  the disk device.
                                properties:
                                  adapterType:
                                    description: |-
                                      adapterType is the adapter type of the disk address.
                                      If the deviceType is "Disk", the valid adapterType can be "SCSI", "IDE", "PCI", "SATA" or "SPAPR".
                                      If the deviceType is "CDRom", the valid adapterType can be "IDE" or "SATA".
                                    enum:
                                    - SCSI
                                    - IDE
                                    - PCI
                                    - SATA
                                    - SPAPR
                                    type: string
                                  deviceIndex:
                                    default: 0
                                    description: |-
                                      deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0.
                                      For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should
                                      start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0
                                      and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE,
                                      the deviceIndex should start from 1.
                                    format: int32
                                    minimum: 0
                                    type: integer
                                  deviceType:
                                    default: Disk
                                    description: |-
                                      deviceType specifies the disk device type.
                                      The valid values are "Disk" and "CDRom", and the default is "Disk".
                                    enum:
                                    - Disk
                                    - CDRom
                                    type: string
                                required:
                                - adapterType
                                - deviceIndex
                                - deviceType
                                type: object
                              diskSize:
                                anyOf:
                                - type: integer
                                - type: string
                                description: |-
                                  diskSize is size (in Quantity format) of the disk to attach to the VM.
                                  See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation.
                                  The minimum diskSize is 1GB.
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              storageConfig:
                                description: storageConfig are the storage configuration
                                  parameters of the VM disks.
                                properties:
                                  diskMode:
                                    allOf:
                                    - enum:
                                      - Standard
                                      - Flash
                                    - enum:
                                      - Standard
                                      - Flash
                                    default: Standard
                                    description: |-
                                      diskMode specifies the disk mode.
                                      The valid values are Standard and Flash, and the default is Standard.
                                    type: string
                                  storageContainer:
                                    description: storageContainer refers to the storage_container
                                      used by the VM disk.
                                    properties:
                                      name:
                                        description: Name is the name of the storage
                                          container resource in the Prism Element.
                                        type: string
                                      referenceName:
                                        description: ReferenceName is the identifier
                                          of the storage resource configured in the
                                          FailureDomain.
                                        type: string
                                      uuid:
                                        description: UUID is the UUID of the storage
                                          container resource in the Prism Element.
                                        type: string
                                    required:
                                    - uuid
                                    type: object
                                required:
                                - diskMode
                                type: object
                            required:
                            - diskSize
                            type: object
                          type: array
                          x-kubernetes-list-type: set
                        failureDomains:
                          description: |-
                            FailureDomains optionally configures a list of failure domain names
                            that will be applied to the MachinePool
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: set
                        gpus:
                          description: GPUs is a list of GPU devices to attach to
                            the machine's VM.
                          items:
                            description: NutanixGPU holds the identity of a Nutanix
                              GPU resource in the Prism Central
                            properties:
                              deviceID:
                                description: deviceID is the GPU device ID with the
                                  integer value.
                                format: int32
                                type: integer
                              name:
                                description: name is the GPU device name
                                type: string
                              type:
                                description: |-
                                  type is the identifier type of the GPU device.
                                  Valid values are Name and DeviceID.
                                enum:
                                - Name
                                - DeviceID
                                type: string
                            required:
                            - type
                            type: object
                            x-kubernetes-validations:
                            - message: deviceID configuration is required when type
                                is DeviceID, and forbidden otherwise
                              rule: 'has(self.type) && self.type == ''DeviceID'' ?  has(self.deviceID)
                                : !has(self.deviceID)'
                            - message: name configuration is required when type is
                                Name, and forbidden otherwise
                              rule: 'has(self.type) && self.type == ''Name'' ?  has(self.name)
                                : !has(self.name)'
                          type: array
                          x-kubernetes-list-type: set
                        memoryMiB:
                          description: Memory is the size of a VM's memory in MiB.
                          format: int64
                          type: integer
                        osDisk:
                          description: OSDisk defines the storage for instance.
                          properties:
                            diskSizeGiB:
                              description: DiskSizeGiB defines the size of disk in
                                GiB.
                              format: int64
                              type: integer
                          type: object
                        project:
                          description: Project optionally identifies a Prism project
                            for the Machine's VM to associate with.
                          properties:
                            name:
                              description: name is the resource name in the PC
                              type: string
                            type:
                              description: type is the identifier type to use for
                                this resource.
                              enum:
                              - uuid
                              - name
                              type: string
                            uuid:
                              description: uuid is the UUID of the resource in the
                                PC.
                              type: string
                          required:
                          - type
                          type: object
                      type: object
                    openstack:
                      description: OpenStack is the configuration used when installing
                        on OpenStack.
                      properties:
                        additionalNetworkIDs:
                          description: |-
                            AdditionalNetworkIDs contains IDs of additional networks for machines,
                            where each ID is presented in UUID v4 format.
                            Allowed address pairs won't be created for the additional networks.
                          items:
                            type: string
                          type: array
                        additionalSecurityGroupIDs:
                          description: |-
                            AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                            where each ID is presented in UUID v4 format.
                          items:
                            type: string
                          type: array
                        rootVolume:
                          description: |-
                            RootVolume defines the root volume for instances in the machine pool.
                            The instances use ephemeral disks if not set.
                          properties:
                            size:
                              description: |-
                                Size defines the size of the volume in gibibytes (GiB).
                                Required
                              type: integer
                            type:
                              description: |-
                                Type defines the type of the volume.
                                Deprecated: Use Types instead.
                              type: string
                            types:
                              description: |-
                                Types is the list of the volume types of the root volumes.
                                This is mutually exclusive with Type.
                              items:
                                type: string
                              type: array
                            zones:
                              description: |-
                                Zones is the list of availability zones where the root volumes should be deployed.
                                If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                              items:
                                type: string
                              type: array
                          required:
                          - size
                          - types
                          type: object
                        serverGroupPolicy:
                          description: |-
                            ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                            Defaults to "soft-anti-affinity".
                          enum:
                          - ""
                          - affinity
                          - soft-affinity
                          - anti-affinity
                          - soft-anti-affinity
                          type: string
                        type:
                          description: |-
                            FlavorName defines the OpenStack Nova flavor.
                            eg. m1.large
                          type: string
                        zones:
                          description: |-
                            Zones is the list of availability zones where the instances should be deployed.
                            If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                          items:
                            type: string
                          type: array
                      required:
                      - type
                      type: object
                    ovirt:
                      description: Ovirt is the configuration used when installing
                        on oVirt.
                      properties:
                        affinityGroupsNames:
                          description: |-
                            AffinityGroupsNames contains a list of oVirt affinity group names that the newly created machines will join.
                            The affinity groups should exist on the oVirt cluster or created by the OpenShift installer.
                          items:
                            type: string
                          type: array
                        autoPinningPolicy:
                          description: |-
                            AutoPinningPolicy defines the policy to automatically set the CPU
                            and NUMA including pinning to the host for the instance.
                            When the field is omitted the default will be "none".
                          enum:
                          - none
                          - resize_and_pin
                          type: string
                        clone:
                          description: |-
                            Clone makes sure that the disks are cloned from the template and are not linked.
                            Defaults to true for high performance and server VM types, false for desktop types.

                            Note: this option is not documented in the OpenShift documentation. This is intentional as it has sane defaults
                            that shouldn't be changed unless needed for debugging or resolving issues in cooperation with Red Hat support.
                          type: boolean
                        cpu:
                          description: CPU defines the VM CPU.
                          properties:
                            cores:
                              description: |-
                                Cores is the number of cores per socket.
                                Total CPUs is (Sockets * Cores)
                              format: int32
                              type: integer
                            sockets:
                              description: |-
                                Sockets is the number of sockets for a VM.
                                Total CPUs is (Sockets * Cores)
                              format: int32
                              type: integer
                            threads:
                              description: Threads is the number of CPU threads.
                              format: int32
                              type: integer
                          required:
                          - cores
                          - sockets
                          - threads
                          type: object
                        format:
                          description: |-
                            Format is the disk format that the disks are in. Can be "cow" or "raw". "raw" disables several features that
                            may be needed, such as incremental backups.
                          enum:
                          - ""
                          - raw
                          - cow
                          type: string
                        hugepages:
                          description: Hugepages is the size of a VM's hugepages to
                            use in KiBs.
                          enum:
                          - 2048
                          - 1048576
                          format: int32
                          type: integer
                        instanceTypeID:
                          description: |-
                            InstanceTypeID defines the VM instance type and overrides
                            the hardware parameters of the created VM, including cpu and memory.
                            If InstanceTypeID is passed, all memory and cpu variables will be ignored.
                          type: string
                        memoryMB:
                          description: MemoryMB is the size of a VM's memory in MiBs.
                          format: int32
                          type: integer
                        osDisk:
                          description: OSDisk is the the root disk of the node.
                          properties:
                            sizeGB:
                              description: SizeGB size of the bootable disk in GiB.
                              format: int64
                              type: integer
                          required:
                          - sizeGB
                          type: object
                        sparse:
                          description: Sparse indicates that sparse provisioning should
                            be used and disks should be not preallocated.
                          type: boolean
                        vmType:
                          description: VMType defines the workload type of the VM.
                          enum:
                          - ""
                          - desktop
                          - server
                          - high_performance
                          type: string
                      type: object
                    powervc:
                      description: PowerVC is the configuration used when installing
                        on IBM Power VC.
                      properties:
                        additionalNetworkIDs:
                          description: |-
                            AdditionalNetworkIDs contains IDs of additional networks for machines,
                            where each ID is presented in UUID v4 format.
                            Allowed address pairs won't be created for the additional networks.
                          items:
                            type: string
                          type: array
                        additionalSecurityGroupIDs:
                          description: |-
                            AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                            where each ID is presented in UUID v4 format.
                          items:
                            type: string
                          type: array
                        rootVolume:
                          description: |-
                            RootVolume defines the root volume for instances in the machine pool.
                            The instances use ephemeral disks if not set.
                          properties:
                            size:
                              description: |-
                                Size defines the size of the volume in gibibytes (GiB).
                                Required
                              type: integer
                            type:
                              description: |-
                                Type defines the type of the volume.
                                Deprecated: Use Types instead.
                              type: string
                            types:
                              description: |-
                                Types is the list of the volume types of the root volumes.
                                This is mutually exclusive with Type.
                              items:
                                type: string
                              type: array
                            zones:
                              description: |-
                                Zones is the list of availability zones where the root volumes should be deployed.
                                If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                              items:
                                type: string
                              type: array
                          required:
                          - size
                          - types
                          type: object
                        serverGroupPolicy:
                          description: |-
                            ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                            Defaults to "soft-anti-affinity".
                          enum:
                          - ""
                          - affinity
                          - soft-affinity
                          - anti-affinity
                          - soft-anti-affinity
                          type: string
                        type:
                          description: |-
                            FlavorName defines the OpenStack Nova flavor.
                            eg. m1.large
                          type: string
                        zones:
                          description: |-
                            Zones is the list of availability zones where the instances should be deployed.
                            If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                          items:
                            type: string
                          type: array
                      required:
                      - type
                      type: object
                    powervs:
                      description: PowerVS is the configuration used when installing
                        on IBM Power VS.
                      properties:
                        memoryGiB:
                          description: memoryGiB is the size of a virtual machine's
                            memory, in GiB.
                          format: int32
                          type: integer
                        procType:
                          description: |-
                            ProcType defines the processor sharing model for the instance.
                            Must be one of {Capped, Dedicated, Shared}.
                          enum:
                          - Dedicated
                          - Shared
                          - Capped
                          - ""
                          type: string
                        processors:
                          anyOf:
                          - type: integer
                          - type: string
                          description: Processors defines the processing units for
                            the instance.
                          x-kubernetes-int-or-string: true
                        smtLevel:
                          description: SMTLevel specifies the level of SMT to set
                            the control plane and worker nodes to.
                          type: string
                        sysType:
                          description: SysType defines the system type for instance.
                          type: string
                        volumeIDs:
                          description: VolumeIDs is the list of volumes attached to
                            the instance.
                          items:
                            type: string
                          type: array
                      type: object
                    vsphere:
                      description: VSphere is the configuration used when installing
                        on vSphere.
                      properties:
                        coresPerSocket:
                          description: |-
                            NumCoresPerSocket is the number of cores per socket in a vm. The number
                            of vCPUs on the vm will be NumCPUs/NumCoresPerSocket.
                          format: int32
                          type: integer
                        cpus:
                          description: NumCPUs is the total number of virtual processor
                            cores to assign a vm.
                          format: int32
                          type: integer
                        dataDisks:
                          description: DataDisks are additional disks to add to the
                            VM that are not part of the VM's OVA template.
                          items:
                            description: DataDisk defines a data disk to add to the
                              VM that is not part of the VM OVA template.
                            properties:
                              name:
                                description: |-
                                  name is used to identify the disk definition. name is required needs to be unique so that it can be used to
                                  clearly identify purpose of the disk.
                                example: images_1
                                maxLength: 80
                                pattern: ^[a-zA-Z0-9]([-_a-zA-Z0-9]*[a-zA-Z0-9])?$
                                type: string
                              provisioningMode:
                                description: |-
                                  provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk.
                                  Allowed values are "Thin", "Thick", "EagerlyZeroed", and omitted.
                                  When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space.
                                  When set to Thick, the full disk size will be allocated when disk is created.
                                  When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats.
                                  When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.
                                enum:
                                - Thin
                                - Thick
                                - EagerlyZeroed
                                type: string
                              sizeGiB:
                                description: |-
                                  sizeGiB is the size of the disk in GiB.
                                  The maximum supported size is 16384 GiB.
                                format: int32
                                maximum: 16384
                                minimum: 1
                                type: integer
                            required:
                            - name
                            - sizeGiB
                            type: object
                          maxItems: 29
                          type: array
                          x-kubernetes-list-map-keys:
                          - name
                          x-kubernetes-list-type: map
                        memoryMB:
                          description: Memory is the size of a VM's memory in MB.
                          format: int64
                          type: integer
                        osDisk:
                          description: OSDisk defines the storage for instance.
                          properties:
                            diskSizeGB:
                              description: DiskSizeGB defines the size of disk in
                                GB.
                              format: int32
                              type: integer
                          type: object
                        zones:
                          description: |-
                            Zones defines available zones
                            Zones is available in TechPreview.
                          items:
                            type: string
                          type: array
                      type: object
                  type: object
                replicas:
                  description: Replicas is the machine count for the machine pool.
                  format: int64
                  type: integer
              required:
              - name
              - platform
              type: object
            type: array
          controlPlane:
            description: |-
              ControlPlane is the configuration for the machines that comprise the
              control plane.
            properties:
              architecture:
                default: amd64
                description: |-
                  Architecture is the instruction set architecture of the machine pool.
                  Defaults to amd64.
                enum:
                - ""
                - amd64
                type: string
              diskSetup:
                description: |-
                  DiskSetup stores the type of disks that will be setup with MachineConfigs.
                  The available types are etcd, swap and user-defined.
                items:
                  description: |-
                    Disk defines the type of disk (etcd, swap or user-defined) and the configuration
                    of each disk type.
                  properties:
                    etcd:
                      description: DiskEtcd defines a disk type of etcd.
                      properties:
                        platformDiskID:
                          type: string
                      type: object
                    swap:
                      description: DiskSwap defines a disk type of swap.
                      properties:
                        platformDiskID:
                          type: string
                      type: object
                    type:
                      description: DiskType is the string representation of the three
                        types disk setups
                      enum:
                      - etcd
                      - swap
                      - user-defined
                      type: string
                    userDefined:
                      description: DiskUserDefined defines a disk type of user-defined.
                      properties:
                        mountPath:
                          type: string
                        platformDiskID:
                          type: string
                      type: object
                  type: object
                type: array
              fencing:
                description: |-
                  Fencing stores the information about a baremetal host's management controller.
                  Fencing may only be set for control plane nodes.
                properties:
                  credentials:
                    description: Credentials stores the information about a baremetal
                      host's management controller.
                    items:
                      description: Credential stores the information about a baremetal
                        host's management controller.
                      properties:
                        address:
                          type: string
                        certificateVerification:
                          default: Enabled
                          description: |-
                            CertificateVerification Defines whether ssl certificate verification is required or not.
                            If omitted, the platform chooses a default, that default is enabled.
                          enum:
                          - Enabled
                          - Disabled
                          type: string
                        hostName:
                          type: string
                        password:
                          type: string
                        username:
                          type: string
                      required:
                      - address
                      - password
                      - username
                      type: object
                    type: array
                type: object
              hyperthreading:
                default: Enabled
                description: |-
                  Hyperthreading determines the mode of hyperthreading that machines in the
                  pool will utilize.
                  Default is for hyperthreading to be enabled.
                enum:
                - ""
                - Enabled
                - Disabled
                type: string
              management:
                default: ClusterAPI
                description: |-
                  Management is the API that will be used for machine management in the cluster.
                  Using this field for control plane machines requires the ClusterAPIControlPlaneInstall feature gate.
                  Using this field for compute machines requires the ClusterAPIComputeInstall feature gate.
                  Supported platforms: aws
                  Default is ClusterAPI.
                enum:
                - ClusterAPI
                - MachineAPI
                type: string
              name:
                description: |-
                  Name is the name of the machine pool.
                  For the control plane machine pool, the name will always be "master".
                  For the compute machine pools, the only valid name is "worker".
                  For the arbiter machine pools, the only valid name is "arbiter".
                type: string
              platform:
                description: Platform is configuration for machine pool specific to
                  the platform.
                properties:
                  aws:
                    description: AWS is the configuration used when installing on
                      AWS.
                    properties:
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines, where each ID
                          is presented in the format sg-xxxx.
                        items:
                          type: string
                        maxItems: 10
                        type: array
                      amiID:
                        description: |-
                          AMIID is the AMI that should be used to boot the ec2 instance.
                          If set, the AMI should belong to the same region as the cluster.
                        type: string
                      cpuOptions:
                        description: |-
                          CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
                          When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
                          More info:
                          https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
                          https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
                        minProperties: 1
                        properties:
                          confidentialCompute:
                            description: |-
                              ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
                              and, if so, which confidential computing technology to use.
                              Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
                              When set to Disabled, confidential computing will be disabled for the instance.
                              When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
                              In this case, ensure the following conditions are met:
                              1) The selected instance type supports AMD SEV-SNP.
                              2) The selected AWS region supports AMD SEV-SNP.
                              3) The selected AMI supports AMD SEV-SNP.
                              More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
                              When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
                              which is subject to change without notice. The current default is Disabled.
                            enum:
                            - Disabled
                            - AMDEncryptedVirtualizationNestedPaging
                            type: string
                        type: object
                      hostPlacement:
                        description: |-
                          hostPlacement configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host
                          for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL),
                          and to gain visibility and control over instance placement on a physical server.
                          When omitted, the instance is not constrained to a dedicated host.
                        properties:
                          affinity:
                            description: |-
                              affinity specifies the affinity setting for the instance.
                              Allowed values are AnyAvailable and DedicatedHost.
                              When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set.
                              When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host.
                            enum:
                            - DedicatedHost
                            - AnyAvailable
                            type: string
                          dedicatedHost:
                            description: |-
                              dedicatedHost specifies the exact host that an instance should be restarted on if stopped.
                              dedicatedHost is required when 'affinity' is set to DedicatedHost, and forbidden otherwise.
                            items:
                              description: DedicatedHost represents the configuration
                                for the usage of dedicated host.
                              properties:
                                id:
                                  description: |-
                                    id identifies the AWS Dedicated Host on which the instance must run.
                                    The value must start with "h-" followed by 17 lowercase hexadecimal characters (0-9 and a-f).
                                    Must be exactly 19 characters in length.
                                  maxLength: 19
                                  minLength: 19
                                  type: string
                                  x-kubernetes-validations:
                                  - message: hostID must start with 'h-' followed
                                      by 17 lowercase hexadecimal characters (0-9
                                      and a-f)
                                    rule: self.matches('^h-[0-9a-f]{17}$')
                              required:
                              - id
                              type: object
                            type: array
                        required:
                        - affinity
                        type: object
                        x-kubernetes-validations:
                        - message: dedicatedHost is required when affinity is DedicatedHost,
                            and forbidden otherwise
                          rule: 'has(self.affinity) && self.affinity == ''DedicatedHost''
                            ?  has(self.dedicatedHost) : !has(self.dedicatedHost)'
                      iamProfile:
                        description: |-
                          IAMProfile is the name of the IAM instance profile to use for the machine.
                          Leave unset to have the installer create the IAM Profile on your behalf.
                          Cannot be specified together with iamRole.
                        type: string
                      iamRole:
                        description: |-
                          IAMRole is the name of the IAM Role to use for the instance profile of the machine.
                          Leave unset to have the installer create the IAM Role on your behalf.
                          Cannot be specified together with iamProfile.
                        type: string
                      metadataService:
                        description: EC2MetadataOptions defines metadata service interaction
                          options for EC2 instances in the machine pool.
                        properties:
                          authentication:
                            description: |-
                              Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service.
                              When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service.
                              When omitted, this means the user has no opinion and the value is left to the platform to choose a good
                              default, which is subject to change over time. The current default is optional.
                              At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html
                            enum:
                            - Required
                            - Optional
                            type: string
                        type: object
                      rootVolume:
                        description: EC2RootVolume defines the root volume for EC2
                          instances in the machine pool.
                        properties:
                          iops:
                            description: |-
                              IOPS defines the amount of provisioned IOPS. (KiB/s). IOPS may only be set for
                              io1, io2, & gp3 volume types.
                            minimum: 0
                            type: integer
                          kmsKeyARN:
                            description: |-
                              The KMS key that will be used to encrypt the EBS volume.
                              If no key is provided the default KMS key for the account will be used.
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html
                            type: string
                          size:
                            description: Size defines the size of the volume in gibibytes
                              (GiB).
                            minimum: 0
                            type: integer
                          throughput:
                            description: |-
                              Throughput to provision in MiB/s supported for the volume type. Not applicable to all types.

                              This parameter is valid only for gp3 volumes.
                              Valid Range: Minimum value of 125. Maximum value of 2000.

                              When omitted, this means no opinion, and the platform is left to
                              choose a reasonable default, which is subject to change over time.
                              The current default is 125.
                            format: int32
                            maximum: 2000
                            minimum: 125
                            type: integer
                          type:
                            description: Type defines the type of the volume.
                            type: string
                        required:
                        - size
                        - type
                        type: object
                      type:
                        description: |-
                          InstanceType defines the ec2 instance type.
                          eg. m4-large
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  azure:
                    description: Azure is the configuration used when installing on
                      Azure.
                    properties:
                      bootDiagnostics:
                        description: |-
                          BootDiagnostics has the value for the storage account URI where the
                          machine log information of the control plane is sent to.
                          Defaults to managed for control plane if no value is mentioned.
                        properties:
                          resourceGroup:
                            description: |-
                              ResourceGroup specifies the name of the resource group where the
                              storage account to be used for diagnostics storage is present.
                              Only used if the type is set to UserManaged.
                            type: string
                          storageAccountName:
                            description: |-
                              StorageAccountName specifies the storage account where the diagnostics
                              logs need to be stored.
                              Only used if the type is set to UserManaged.
                            type: string
                          type:
                            allOf:
                            - enum:
                              - Managed
                              - UserManaged
                              - Disabled
                            - enum:
                              - Disabled
                              - Managed
                              - UserManaged
                            description: |-
                              Type specifies the boot diagnostics type for the machines created.
                              Defaults as disabled for compute nodes and as managed for control plane
                              nodes.
                              Values allowed are Disabled, Managed and UserManaged.
                            type: string
                        required:
                        - resourceGroup
                        - storageAccountName
                        - type
                        type: object
                      dataDisks:
                        description: DataDisk specifies the parameters that are used
                          to add one or more data disks to the machine.
                        items:
                          description: DataDisk specifies the parameters that are
                            used to add one or more data disks to the machine.
                          properties:
                            cachingType:
                              description: CachingType specifies the caching requirements.
                              enum:
                              - None
                              - ReadOnly
                              - ReadWrite
                              type: string
                            diskSizeGB:
                              description: DiskSizeGB is the size in GB to assign
                                to the data disk.
                              format: int32
                              type: integer
                            lun:
                              description: |-
                                Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM.
                                The value must be between 0 and 63.
                              format: int32
                              type: integer
                            managedDisk:
                              description: ManagedDisk specifies the Managed Disk
                                parameters for the data disk.
                              properties:
                                diskEncryptionSet:
                                  description: DiskEncryptionSet specifies the customer-managed
                                    disk encryption set resource id for the managed
                                    disk.
                                  properties:
                                    id:
                                      description: ID defines resourceID for diskEncryptionSet
                                        resource. It must be in the same subscription
                                      type: string
                                  type: object
                                securityProfile:
                                  description: SecurityProfile specifies the security
                                    profile for the managed disk.
                                  properties:
                                    diskEncryptionSet:
                                      description: |-
                                        DiskEncryptionSet specifies the customer-managed disk encryption set resource id for the
                                        managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                        VMGuest blob.
                                      properties:
                                        id:
                                          description: ID defines resourceID for diskEncryptionSet
                                            resource. It must be in the same subscription
                                          type: string
                                      type: object
                                    securityEncryptionType:
                                      description: |-
                                        SecurityEncryptionType specifies the encryption type of the managed disk.
                                        It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                        blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                        When set to VMGuestStateOnly, VirtualizedTrustedPlatformModule should be set to Enabled.
                                        When set to DiskWithVMGuestState, EncryptionAtHost should be disabled, SecureBoot and
                                        VirtualizedTrustedPlatformModule should be set to Enabled.
                                        It can be set only for Confidential VMs.
                                      enum:
                                      - VMGuestStateOnly
                                      - DiskWithVMGuestState
                                      type: string
                                  type: object
                                storageAccountType:
                                  type: string
                              type: object
                            nameSuffix:
                              description: |-
                                NameSuffix is the suffix to be appended to the machine name to generate the disk name.
                                Each disk name will be in format <machineName>_<nameSuffix>.
                              type: string
                          required:
                          - diskSizeGB
                          - nameSuffix
                          type: object
                        type: array
                      encryptionAtHost:
                        description: EncryptionAtHost enables encryption at the VM
                          host.
                        type: boolean
                      identity:
                        default: UserAssigned
                        description: |-
                          Identity is the type of identity used for the virtual machine.
                          The type 'UserAssigned' is a standalone Azure resource provided by the user
                          and assigned to the VM.
                          The default identity is a user-assigned identity, generated by the installer.
                          This default is expected to change in future releases.
                        properties:
                          type:
                            description: Type specifies the type of identity to be
                              used.
                            enum:
                            - None
                            - UserAssigned
                            type: string
                          userAssignedIdentities:
                            description: |-
                              UserAssignedIdentities is a list of identities to be attached to a node.
                              Only one user-assigned identity may be supplied.
                              Supplying more than one user-assigned identity is an experimental feature
                              which may be enabled with the MachineAPIMigration feature gate.
                            items:
                              description: UserAssignedIdentity contains the fields
                                that comprise a user-assigned identity.
                              properties:
                                name:
                                  description: Name is the name of the user-assigned
                                    identity to be assigned to the node.
                                  type: string
                                resourceGroup:
                                  description: ResourceGroup is the resource group
                                    that contains the user-assigned identity.
                                  type: string
                                subscription:
                                  description: Subscription is the subscription that
                                    contains the user-assigned identity.
                                  type: string
                              required:
                              - name
                              - resourceGroup
                              - subscription
                              type: object
                            type: array
                        required:
                        - type
                        - userAssignedIdentities
                        type: object
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskEncryptionSet:
                            description: DiskEncryptionSet defines a disk encryption
                              set.
                            properties:
                              name:
                                description: Name is the name of the disk encryption
                                  set.
                                type: string
                              resourceGroup:
                                description: |-
                                  ResourceGroup defines the Azure resource group used by the disk
                                  encryption set.
                                type: string
                              subscriptionId:
                                description: |-
                                  SubscriptionID defines the Azure subscription the disk encryption
                                  set is in.
                                  Must be the same subscription ID as the resource group of the installer.
                                type: string
                            required:
                            - name
                            - resourceGroup
                            type: object
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            minimum: 0
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are Premium_LRS and StandardSSD_LRS.
                              Default is Premium_LRS.
                            enum:
                            - Standard_LRS
                            - Premium_LRS
                            - StandardSSD_LRS
                            type: string
                          securityProfile:
                            description: SecurityProfile specifies the security profile
                              for the managed disk.
                            properties:
                              diskEncryptionSet:
                                description: |-
                                  DiskEncryptionSet specifies the customer managed disk encryption set resource id for the
                                  managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                  VMGuestState blob.
                                properties:
                                  name:
                                    description: Name is the name of the disk encryption
                                      set.
                                    type: string
                                  resourceGroup:
                                    description: |-
                                      ResourceGroup defines the Azure resource group used by the disk
                                      encryption set.
                                    type: string
                                  subscriptionId:
                                    description: |-
                                      SubscriptionID defines the Azure subscription the disk encryption
                                      set is in.
                                      Must be the same subscription ID as the resource group of the installer.
                                    type: string
                                required:
                                - name
                                - resourceGroup
                                type: object
                              securityEncryptionType:
                                description: |-
                                  SecurityEncryptionType specifies the encryption type of the managed disk.
                                  It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                  blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                  When set to VMGuestStateOnly, the VTpmEnabled should be set to true.
                                  When set to DiskWithVMGuestState, both SecureBootEnabled and VTpmEnabled should be set to true.
                                  It can be set only for Confidential VMs.
                                enum:
                                - VMGuestStateOnly
                                - DiskWithVMGuestState
                                type: string
                            type: object
                        required:
                        - diskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines the image to use for the OS.
                        properties:
                          offer:
                            description: Offer is the offer of the image.
                            type: string
                          plan:
                            description: |-
                              Plan is the purchase plan of the image.
                              If omitted, it defaults to "WithPurchasePlan".
                            enum:
                            - WithPurchasePlan
                            - NoPurchasePlan
                            type: string
                          publisher:
                            description: Publisher is the publisher of the image.
                            type: string
                          sku:
                            description: SKU is the SKU of the image.
                            type: string
                          version:
                            description: Version is the version of the image.
                            type: string
                        required:
                        - offer
                        - publisher
                        - sku
                        - version
                        type: object
                      settings:
                        description: |-
                          Settings specify the security type and the UEFI settings of the virtual machine. This field can
                          be set for Confidential VMs and Trusted Launch for VMs.
                        properties:
                          confidentialVM:
                            description: |-
                              ConfidentialVM specifies the security configuration of the virtual machine.
                              For more information regarding Confidential VMs, please refer to:
                              https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                          securityType:
                            description: |-
                              SecurityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to
                              enable secure boot and vTPM. The default behavior is: secure boot and vTPM will not be enabled unless this property is set.
                            enum:
                            - ConfidentialVM
                            - TrustedLaunch
                            type: string
                          trustedLaunch:
                            description: |-
                              TrustedLaunch specifies the security configuration of the virtual machine.
                              For more information regarding TrustedLaunch for VMs, please refer to:
                              https://learn.microsoft.com/azure/virtual-machines/trusted-launch
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                        required:
                        - securityType
                        type: object
                      type:
                        description: |-
                          InstanceType defines the azure instance type.
                          eg. Standard_DS_V2
                        type: string
                      ultraSSDCapability:
                        description: ultraSSDCapability defines if the instance should
                          use Ultra SSD disks.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      vmNetworkingType:
                        description: |-
                          VMNetworkingType specifies whether to enable accelerated networking.
                          Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its
                          networking performance.
                          eg. values: "Accelerated", "Basic"
                        enum:
                        - Accelerated
                        - Basic
                        type: string
                      zones:
                        description: |-
                          Zones is list of availability zones that can be used.
                          eg. ["1", "2", "3"]
                        items:
                          type: string
                        type: array
                    type: object
                  baremetal:
                    description: BareMetal is the configuration used when installing
                      on bare metal.
                    type: object
                  gcp:
                    description: GCP is the configuration used when installing on
                      GCP
                    properties:
                      confidentialCompute:
                        default: Disabled
                        description: |-
                          confidentialCompute is an optional field defining whether the instance should have
                          Confidential Computing enabled or not, and the Confidential Computing technology of choice.
                              With Disabled, Confidential Computing is disabled.
                              With Enabled, Confidential Computing is enabled with no preference on the
                          Confidential Computing technology. The platform chooses a default i.e. AMD SEV,
                          which is subject to change over time.
                              With AMDEncryptedVirtualization, Confidential Computing is enabled with
                          AMD Secure Encrypted Virtualization (AMD SEV).
                              With AMDEncryptedVirtualizationNestedPaging, Confidential Computing is
                          enabled with AMD Secure Encrypted Virtualization Secure Nested Paging
                          (AMD SEV-SNP).
                              With IntelTrustedDomainExtensions, Confidential Computing is enabled with
                          Intel Trusted Domain Extensions (Intel TDX).
                              If any value other than Disabled is set, a machine type and region that supports
                          Confidential Computing must be specified. Machine series and regions supporting
                          Confidential Computing technologies can be checked at
                          https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#machine-type-cpu-zone
                              If any value other than Disabled is set, onHostMaintenance is required to be set
                          to "Terminate".
                        enum:
                        - ""
                        - Enabled
                        - Disabled
                        - AMDEncryptedVirtualization
                        - AMDEncryptedVirtualizationNestedPaging
                        - IntelTrustedDomainExtensions
                        type: string
                      onHostMaintenance:
                        default: Migrate
                        description: |-
                          OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot.
                          Allowed values are "Migrate" and "Terminate".
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is "Migrate".
                        enum:
                        - Migrate
                        - Terminate
                        type: string
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          DiskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int64
                            maximum: 65536
                            minimum: 16
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are pd-balanced, pd-ssd, and hyperdisk-balanced.
                            enum:
                            - pd-balanced
                            - pd-ssd
                            - pd-standard
                            - hyperdisk-balanced
                            type: string
                          encryptionKey:
                            description: EncryptionKey defines the KMS key to be used
                              to encrypt the disk.
                            properties:
                              kmsKey:
                                description: KMSKey is a reference to a KMS Key to
                                  use for the encryption.
                                properties:
                                  keyRing:
                                    description: KeyRing is the name of the KMS Key
                                      Ring which the KMS Key belongs to.
                                    type: string
                                  location:
                                    description: Location is the GCP location in which
                                      the Key Ring exists.
                                    type: string
                                  name:
                                    description: Name is the name of the customer
                                      managed encryption key to be used for the disk
                                      encryption.
                                    type: string
                                  projectID:
                                    description: |-
                                      ProjectID is the ID of the Project in which the KMS Key Ring exists.
                                      Defaults to the VM ProjectID if not set.
                                    type: string
                                required:
                                - keyRing
                                - location
                                - name
                                type: object
                              kmsKeyServiceAccount:
                                description: |-
                                  KMSKeyServiceAccount is the service account being used for the
                                  encryption request for the given KMS key. If absent, the Compute
                                  Engine default service account is used.
                                  See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account
                                  for details on the default service account.
                                type: string
                            type: object
                        required:
                        - DiskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines a custom image for instance.
                        properties:
                          name:
                            description: Name defines the name of the image.
                            type: string
                          project:
                            description: Project defines the name of the project containing
                              the image.
                            type: string
                        required:
                        - name
                        - project
                        type: object
                      secureBoot:
                        description: |-
                          SecureBoot Defines whether the instance should have secure boot enabled.
                          secure boot Verify the digital signature of all boot components, and halt the boot process if signature verification fails.
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      serviceAccount:
                        description: |-
                          ServiceAccount is the email of a gcp service account to be used during installations.
                          The provided service account can be attached to both control-plane nodes
                          and worker nodes in order to provide the permissions required by the cloud provider.
                        type: string
                      tags:
                        description: Tags defines a set of network tags which will
                          be added to instances in the machineset
                        items:
                          type: string
                        type: array
                      type:
                        description: |-
                          InstanceType defines the GCP instance type.
                          eg. n1-standard-4
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  ibmcloud:
                    description: IBMCloud is the configuration used when installing
                      on IBM Cloud.
                    properties:
                      bootVolume:
                        description: BootVolume is the configuration for the machine's
                          boot volume.
                        properties:
                          encryptionKey:
                            description: |-
                              EncryptionKey is the CRN referencing a Key Protect or Hyper Protect
                              Crypto Services key to use for volume encryption. If not specified, a
                              provider managed encryption key will be used.
                            type: string
                        type: object
                      dedicatedHosts:
                        description: DedicatedHosts is the configuration for the machine's
                          dedicated host and profile.
                        items:
                          description: DedicatedHost stores the configuration for
                            the machine's dedicated host platform.
                          properties:
                            name:
                              description: |-
                                Name is the name of the dedicated host to provision the machine on. If
                                specified, machines will be created on pre-existing dedicated host.
                              type: string
                            profile:
                              description: |-
                                Profile is the profile ID for the dedicated host. If specified, new
                                dedicated host will be created for machines.
                              type: string
                          type: object
                        type: array
                      type:
                        description: InstanceType is the VSI machine profile.
                        type: string
                      zones:
                        description: Zones is the list of availability zones used
                          for machines in the pool.
                        items:
                          type: string
                        type: array
                    type: object
                  nutanix:
                    description: Nutanix is the configuration used when installing
                      on Nutanix.
                    properties:
                      bootType:
                        description: |-
                          BootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot.
                          If this field is empty or omitted, the VM will use the default boot type "Legacy" to boot.
                          "SecureBoot" depends on "UEFI" boot, i.e., enabling "SecureBoot" means that "UEFI" boot is also enabled.
                        enum:
                        - ""
                        - Legacy
                        - UEFI
                        - SecureBoot
                        type: string
                      categories:
                        description: |-
                          Categories optionally adds one or more prism categories (each with key and value) for
                          the Machine's VM to associate with. All the category key and value pairs specified must
                          already exist in the prism central.
                        items:
                          description: NutanixCategory identifies a pair of prism
                            category key and value
                          properties:
                            key:
                              description: key is the prism category key name
                              maxLength: 64
                              minLength: 1
                              type: string
                            value:
                              description: value is the prism category value associated
                                with the key
                              maxLength: 64
                              minLength: 1
                              type: string
                          required:
                          - key
                          - value
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - key
                        x-kubernetes-list-type: map
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs times NumCoresPerSocket.
                          For example: 4 CPUs and 4 Cores per socket will result in 16 VPUs.
                          The AHV scheduler treats socket and core allocation exactly the same
                          so there is no benefit to configuring cores over CPUs.
                        format: int64
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int64
                        type: integer
                      dataDisks:
                        description: DataDisks holds information of the data disks
                          to attach to the Machine's VM
                        items:
                          description: DataDisk defines a data disk for a Machine
                            VM.
                          properties:
                            dataSourceImage:
                              description: dataSource refers to a data source image
                                for the VM disk.
                              properties:
                                name:
                                  description: Name is the name of the storage container
                                    resource in the Prism Element.
                                  type: string
                                referenceName:
                                  description: ReferenceName is the identifier of
                                    the storage resource configured in the FailureDomain.
                                  type: string
                                uuid:
                                  description: UUID is the UUID of the storage container
                                    resource in the Prism Element.
                                  type: string
                              required:
                              - uuid
                              type: object
                            deviceProperties:
                              description: deviceProperties are the properties of
                                the disk device.
                              properties:
                                adapterType:
                                  description: |-
                                    adapterType is the adapter type of the disk address.
                                    If the deviceType is "Disk", the valid adapterType can be "SCSI", "IDE", "PCI", "SATA" or "SPAPR".
                                    If the deviceType is "CDRom", the valid adapterType can be "IDE" or "SATA".
                                  enum:
                                  - SCSI
                                  - IDE
                                  - PCI
                                  - SATA
                                  - SPAPR
                                  type: string
                                deviceIndex:
                                  default: 0
                                  description: |-
                                    deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0.
                                    For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should
                                    start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0
                                    and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE,
                                    the deviceIndex should start from 1.
                                  format: int32
                                  minimum: 0
                                  type: integer
                                deviceType:
                                  default: Disk
                                  description: |-
                                    deviceType specifies the disk device type.
                                    The valid values are "Disk" and "CDRom", and the default is "Disk".
                                  enum:
                                  - Disk
                                  - CDRom
                                  type: string
                              required:
                              - adapterType
                              - deviceIndex
                              - deviceType
                              type: object
                            diskSize:
                              anyOf:
                              - type: integer
                              - type: string
                              description: |-
                                diskSize is size (in Quantity format) of the disk to attach to the VM.
                                See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation.
                                The minimum diskSize is 1GB.
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            storageConfig:
                              description: storageConfig are the storage configuration
                                parameters of the VM disks.
                              properties:
                                diskMode:
                                  allOf:
                                  - enum:
                                    - Standard
                                    - Flash
                                  - enum:
                                    - Standard
                                    - Flash
                                  default: Standard
                                  description: |-
                                    diskMode specifies the disk mode.
                                    The valid values are Standard and Flash, and the default is Standard.
                                  type: string
                                storageContainer:
                                  description: storageContainer refers to the storage_container
                                    used by the VM disk.
                                  properties:
                                    name:
                                      description: Name is the name of the storage
                                        container resource in the Prism Element.
                                      type: string
                                    referenceName:
                                      description: ReferenceName is the identifier
                                        of the storage resource configured in the
                                        FailureDomain.
                                      type: string
                                    uuid:
                                      description: UUID is the UUID of the storage
                                        container resource in the Prism Element.
                                      type: string
                                  required:
                                  - uuid
                                  type: object
                              required:
                              - diskMode
                              type: object
                          required:
                          - diskSize
                          type: object
                        type: array
                        x-kubernetes-list-type: set
                      failureDomains:
                        description: |-
                          FailureDomains optionally configures a list of failure domain names
                          that will be applied to the MachinePool
                        items:
                          type: string
                        type: array
                        x-kubernetes-list-type: set
                      gpus:
                        description: GPUs is a list of GPU devices to attach to the
                          machine's VM.
                        items:
                          description: NutanixGPU holds the identity of a Nutanix
                            GPU resource in the Prism Central
                          properties:
                            deviceID:
                              description: deviceID is the GPU device ID with the
                                integer value.
                              format: int32
                              type: integer
                            name:
                              description: name is the GPU device name
                              type: string
                            type:
                              description: |-
                                type is the identifier type of the GPU device.
                                Valid values are Name and DeviceID.
                              enum:
                              - Name
                              - DeviceID
                              type: string
                          required:
                          - type
                          type: object
                          x-kubernetes-validations:
                          - message: deviceID configuration is required when type
                              is DeviceID, and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''DeviceID'' ?  has(self.deviceID)
                              : !has(self.deviceID)'
                          - message: name configuration is required when type is Name,
                              and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''Name'' ?  has(self.name)
                              : !has(self.name)'
                        type: array
                        x-kubernetes-list-type: set
                      memoryMiB:
                        description: Memory is the size of a VM's memory in MiB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGiB:
                            description: DiskSizeGiB defines the size of disk in GiB.
                            format: int64
                            type: integer
                        type: object
                      project:
                        description: Project optionally identifies a Prism project
                          for the Machine's VM to associate with.
                        properties:
                          name:
                            description: name is the resource name in the PC
                            type: string
                          type:
                            description: type is the identifier type to use for this
                              resource.
                            enum:
                            - uuid
                            - name
                            type: string
                          uuid:
                            description: uuid is the UUID of the resource in the PC.
                            type: string
                        required:
                        - type
                        type: object
                    type: object
                  openstack:
                    description: OpenStack is the configuration used when installing
                      on OpenStack.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  ovirt:
                    description: Ovirt is the configuration used when installing on
                      oVirt.
                    properties:
                      affinityGroupsNames:
                        description: |-
                          AffinityGroupsNames contains a list of oVirt affinity group names that the newly created machines will join.
                          The affinity groups should exist on the oVirt cluster or created by the OpenShift installer.
                        items:
                          type: string
                        type: array
                      autoPinningPolicy:
                        description: |-
                          AutoPinningPolicy defines the policy to automatically set the CPU
                          and NUMA including pinning to the host for the instance.
                          When the field is omitted the default will be "none".
                        enum:
                        - none
                        - resize_and_pin
                        type: string
                      clone:
                        description: |-
                          Clone makes sure that the disks are cloned from the template and are not linked.
                          Defaults to true for high performance and server VM types, false for desktop types.

                          Note: this option is not documented in the OpenShift documentation. This is intentional as it has sane defaults
                          that shouldn't be changed unless needed for debugging or resolving issues in cooperation with Red Hat support.
                        type: boolean
                      cpu:
                        description: CPU defines the VM CPU.
                        properties:
                          cores:
                            description: |-
                              Cores is the number of cores per socket.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          sockets:
                            description: |-
                              Sockets is the number of sockets for a VM.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          threads:
                            description: Threads is the number of CPU threads.
                            format: int32
                            type: integer
                        required:
                        - cores
                        - sockets
                        - threads
                        type: object
                      format:
                        description: |-
                          Format is the disk format that the disks are in. Can be "cow" or "raw". "raw" disables several features that
                          may be needed, such as incremental backups.
                        enum:
                        - ""
                        - raw
                        - cow
                        type: string
                      hugepages:
                        description: Hugepages is the size of a VM's hugepages to
                          use in KiBs.
                        enum:
                        - 2048
                        - 1048576
                        format: int32
                        type: integer
                      instanceTypeID:
                        description: |-
                          InstanceTypeID defines the VM instance type and overrides
                          the hardware parameters of the created VM, including cpu and memory.
                          If InstanceTypeID is passed, all memory and cpu variables will be ignored.
                        type: string
                      memoryMB:
                        description: MemoryMB is the size of a VM's memory in MiBs.
                        format: int32
                        type: integer
                      osDisk:
                        description: OSDisk is the the root disk of the node.
                        properties:
                          sizeGB:
                            description: SizeGB size of the bootable disk in GiB.
                            format: int64
                            type: integer
                        required:
                        - sizeGB
                        type: object
                      sparse:
                        description: Sparse indicates that sparse provisioning should
                          be used and disks should be not preallocated.
                        type: boolean
                      vmType:
                        description: VMType defines the workload type of the VM.
                        enum:
                        - ""
                        - desktop
                        - server
                        - high_performance
                        type: string
                    type: object
                  powervc:
                    description: PowerVC is the configuration used when installing
                      on IBM Power VC.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  powervs:
                    description: PowerVS is the configuration used when installing
                      on IBM Power VS.
                    properties:
                      memoryGiB:
                        description: memoryGiB is the size of a virtual machine's
                          memory, in GiB.
                        format: int32
                        type: integer
                      procType:
                        description: |-
                          ProcType defines the processor sharing model for the instance.
                          Must be one of {Capped, Dedicated, Shared}.
                        enum:
                        - Dedicated
                        - Shared
                        - Capped
                        - ""
                        type: string
                      processors:
                        anyOf:
                        - type: integer
                        - type: string
                        description: Processors defines the processing units for the
                          instance.
                        x-kubernetes-int-or-string: true
                      smtLevel:
                        description: SMTLevel specifies the level of SMT to set the
                          control plane and worker nodes to.
                        type: string
                      sysType:
                        description: SysType defines the system type for instance.
                        type: string
                      volumeIDs:
                        description: VolumeIDs is the list of volumes attached to
                          the instance.
                        items:
                          type: string
                        type: array
                    type: object
                  vsphere:
                    description: VSphere is the configuration used when installing
                      on vSphere.
                    properties:
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs/NumCoresPerSocket.
                        format: int32
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int32
                        type: integer
                      dataDisks:
                        description: DataDisks are additional disks to add to the
                          VM that are not part of the VM's OVA template.
                        items:
                          description: DataDisk defines a data disk to add to the
                            VM that is not part of the VM OVA template.
                          properties:
                            name:
                              description: |-
                                name is used to identify the disk definition. name is required needs to be unique so that it can be used to
                                clearly identify purpose of the disk.
                              example: images_1
                              maxLength: 80
                              pattern: ^[a-zA-Z0-9]([-_a-zA-Z0-9]*[a-zA-Z0-9])?$
                              type: string
                            provisioningMode:
                              description: |-
                                provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk.
                                Allowed values are "Thin", "Thick", "EagerlyZeroed", and omitted.
                                When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space.
                                When set to Thick, the full disk size will be allocated when disk is created.
                                When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats.
                                When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.
                              enum:
                              - Thin
                              - Thick
                              - EagerlyZeroed
                              type: string
                            sizeGiB:
                              description: |-
                                sizeGiB is the size of the disk in GiB.
                                The maximum supported size is 16384 GiB.
                              format: int32
                              maximum: 16384
                              minimum: 1
                              type: integer
                          required:
                          - name
                          - sizeGiB
                          type: object
                        maxItems: 29
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      memoryMB:
                        description: Memory is the size of a VM's memory in MB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            type: integer
                        type: object
                      zones:
                        description: |-
                          Zones defines available zones
                          Zones is available in TechPreview.
                        items:
                          type: string
                        type: array
                    type: object
                type: object
              replicas:
                description: Replicas is the machine count for the machine pool.
                format: int64
                type: integer
            required:
            - name
            - platform
            type: object
          cpuPartitioningMode:
            default: None
            description: |-
              CPUPartitioning determines if a cluster should be setup for CPU workload partitioning at install time.
              When this field is set the cluster will be flagged for CPU Partitioning allowing users to segregate workloads to
              specific CPU Sets. This does not make any decisions on workloads it only configures the nodes to allow CPU Partitioning.
              The "AllNodes" value will setup all nodes for CPU Partitioning, the default is "None".
            enum:
            - None
            - AllNodes
            type: string
          credentialsMode:
            description: |-
              CredentialsMode is used to explicitly set the mode with which CredentialRequests are satisfied.

              If this field is set, then the installer will not attempt to query the cloud permissions before attempting
              installation. If the field is not set or empty, then the installer will perform its normal verification that the
              credentials provided are sufficient to perform an installation.

              There are three possible values for this field, but the valid values are dependent upon the platform being used.
              "Mint": create new credentials with a subset of the overall permissions for each CredentialsRequest
              "Passthrough": copy the credentials with all of the overall permissions for each CredentialsRequest
              "Manual": CredentialsRequests must be handled manually by the user

              For each of the following platforms, the field can be set to the specified values. For all other platforms, the
              field must not be set.
              AWS: "Mint", "Passthrough", "Manual"
              Azure: "Passthrough", "Manual"
              AzureStack: "Manual"
              GCP: "Mint", "Passthrough", "Manual"
              IBMCloud: "Manual"
              OpenStack: "Passthrough"
              PowerVC: "Passthrough"
              PowerVS: "Manual"
              Nutanix: "Manual"
            enum:
            - ""
            - Mint
            - Passthrough
            - Manual
            type: string
          featureGates:
            description: |-
              FeatureGates enables a set of custom feature gates.
              May only be used in conjunction with FeatureSet "CustomNoUpgrade".
              Features may be enabled or disabled by providing a true or false value for the feature gate.
              E.g. "featureGates": ["FeatureGate1=true", "FeatureGate2=false"].
            items:
              type: string
            type: array
          featureSet:
            description: |-
              FeatureSet enables features that are not part of the default feature set.
              Valid values are "Default", "TechPreviewNoUpgrade" and "CustomNoUpgrade".
              When omitted, the "Default" feature set is used.
            type: string
          fips:
            default: false
            description: FIPS configures https://www.nist.gov/itl/fips-general-information
            type: boolean
          imageContentSources:
            description: |-
              ImageContentSources lists sources/repositories for the release-image content.
              The field is deprecated. Please use imageDigestSources.
            items:
              description: |-
                ImageContentSource defines a list of sources/repositories that can be used to pull content.
                The field is deprecated. Please use imageDigestSources.
              properties:
                mirrors:
                  description: Mirrors is one or more repositories that may also contain
                    the same images.
                  items:
                    type: string
                  type: array
                source:
                  description: Source is the repository that users refer to, e.g.
                    in image pull specifications.
                  type: string
              required:
              - source
              type: object
            type: array
          imageDigestSources:
            description: ImageDigestSources lists sources/repositories for the release-image
              content.
            items:
              description: ImageDigestSource defines a list of sources/repositories
                that can be used to pull content.
              properties:
                mirrors:
                  description: Mirrors is one or more repositories that may also contain
                    the same images.
                  items:
                    type: string
                  type: array
                source:
                  description: Source is the repository that users refer to, e.g.
                    in image pull specifications.
                  type: string
                sourcePolicy:
                  description: |-
                    SourcePolicy defines the fallback policy when there is a failure pulling an
                    image from the mirrors.
                  enum:
                  - NeverContactSource
                  - AllowContactingSource
                  type: string
              required:
              - source
              type: object
            type: array
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          networking:
            description: |-
              Networking is the configuration for the pod network provider in
              the cluster.
            properties:
              clusterNetwork:
                description: |-
                  ClusterNetwork is the list of IP address pools for pods.
                  Default is 10.128.0.0/14 and a host prefix of /23.
                items:
                  description: |-
                    ClusterNetworkEntry is a single IP address block for pod IP blocks. IP blocks
                    are allocated with size 2^HostSubnetLength.
                  properties:
                    cidr:
                      description: CIDR is the IP block address pool.
                      type: string
                    hostPrefix:
                      description: |-
                        HostPrefix is the prefix size to allocate to each node from the CIDR.
                        For example, 24 would allocate 2^8=256 adresses to each node. If this
                        field is not used by the plugin, it can be left unset.
                        When multiple CIDRs of the same family (i.e. IPv4/IPv6) are present,
                        their HostPrefix value must be the same.
                      format: int32
                      type: integer
                    hostSubnetLength:
                      description: |-
                        The size of blocks to allocate from the larger pool.
                        This is the length in bits - so a 9 here will allocate a /23.
                      format: int32
                      type: integer
                  required:
                  - cidr
                  type: object
                type: array
              clusterNetworkMTU:
                description: |-
                  ClusterNetworkMTU is the Maximum Transmit (MTU) Unit size in bytes to allocate to the cluster network.
                  For example, 1200 would set the MTU of the entire overlay network. If the deployment does
                  not require changes in the network plugin, leave it unset and the MTU will be calculated
                  automatically based on the host network MTU.
                format: int32
                type: integer
              clusterNetworks:
                description: Deprecated name for ClusterNetwork
                items:
                  description: |-
                    ClusterNetworkEntry is a single IP address block for pod IP blocks. IP blocks
                    are allocated with size 2^HostSubnetLength.
                  properties:
                    cidr:
                      description: CIDR is the IP block address pool.
                      type: string
                    hostPrefix:
                      description: |-
                        HostPrefix is the prefix size to allocate to each node from the CIDR.
                        For example, 24 would allocate 2^8=256 adresses to each node. If this
                        field is not used by the plugin, it can be left unset.
                        When multiple CIDRs of the same family (i.e. IPv4/IPv6) are present,
                        their HostPrefix value must be the same.
                      format: int32
                      type: integer
                    hostSubnetLength:
                      description: |-
                        The size of blocks to allocate from the larger pool.
                        This is the length in bits - so a 9 here will allocate a /23.
                      format: int32
                      type: integer
                  required:
                  - cidr
                  type: object
                type: array
              machineCIDR:
                description: |-
                  Deprecated way to configure an IP address pool for machines.
                  Replaced by MachineNetwork which allows for multiple pools.
                type: string
              machineNetwork:
                description: |-
                  MachineNetwork is the list of IP address pools for machines.
                  This field replaces MachineCIDR, and if set MachineCIDR must
                  be empty or match the first entry in the list.
                  Default is 10.0.0.0/16 for all platforms other than Power VS.
                  For Power VS, the default is 192.168.0.0/24.
                items:
                  description: MachineNetworkEntry is a single IP address block for
                    node IP blocks.
                  properties:
                    cidr:
                      description: CIDR is the IP block address pool for machines
                        within the cluster.
                      type: string
                  required:
                  - cidr
                  type: object
                type: array
              networkType:
                default: OVNKubernetes
                description: |-
                  NetworkType is the type of network to install.
                  The default value is OVNKubernetes.
                type: string
              ovnKubernetesConfig:
                description: |-
                  OVNKubernetesConfig provides configuration for ovn-kubernetes as the default
                  pod network when NetworkType is set to OVNKubernetes.
                properties:
                  ipv4:
                    description: |-
                      ipv4 allows users to configure IP settings for IPv4 connections. When omitted,
                      this means no opinions and the default configuration is used. Check individual
                      fields within ipv4 for details of default values.
                    properties:
                      internalJoinSubnet:
                        description: |-
                          internalJoinSubnet is a v4 subnet used internally by ovn-kubernetes in case the
                          default one is being already used by something else. It must not overlap with
                          any other subnet being used by OpenShift or by the node network. The size of the
                          subnet must be larger than the number of nodes. The value cannot be changed
                          after installation.
                          The current default value is 100.64.0.0/16
                          The subnet must be large enough to accommodate one IP per node in your cluster
                          The value must be in proper IPV4 CIDR format
                        type: string
                    type: object
                type: object
              serviceCIDR:
                description: |-
                  Deprecated way to configure an IP address pool for services.
                  Replaced by ServiceNetwork which allows for multiple pools.
                type: string
              serviceNetwork:
                description: |-
                  ServiceNetwork is the list of IP address pools for services.
                  Default is 172.30.0.0/16.
                  NOTE: currently only one entry is supported.
                items:
                  type: string
                maxItems: 1
                type: array
              type:
                description: Deprecated name for NetworkType
                type: string
            type: object
          operatorPublishingStrategy:
            description: OperatorPublishingStrategy controls the visibility of ingress
              and apiserver. Defaults to public.
            properties:
              apiserver:
                default: External
                description: APIServer sets the visibility of the load balancers servicing
                  the APIserver.
                enum:
                - ""
                - External
                - Internal
                type: string
              ingress:
                default: External
                description: Ingress sets the visibility of the created dns resources.
                enum:
                - ""
                - External
                - Internal
                type: string
            type: object
          osImageStream:
            description: OSImageStream is the global OS Image Stream to be used for
              all machines in the cluster.
            enum:
            - rhel-9
            - rhel-10
            type: string
          platform:
            description: |-
              Platform is the configuration for the specific platform upon which to
              perform the installation.
            properties:
              aws:
                description: AWS is the configuration used when installing on AWS.
                properties:
                  amiID:
                    description: |-
                      The field is deprecated. AMIID is the AMI that should be used to boot
                      machines for the cluster. If set, the AMI should belong to the same
                      region as the cluster.
                    type: string
                  bestEffortDeleteIgnition:
                    description: |-
                      BestEffortDeleteIgnition is an optional field that can be used to ignore errors from S3 deletion of ignition
                      objects during cluster bootstrap. The default behavior is to fail the installation if ignition objects cannot be
                      deleted. Enable this functionality when there are known reasons disallowing their deletion.
                    type: boolean
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on AWS for machine pools which do not define their own
                      platform configuration.
                    properties:
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines, where each ID
                          is presented in the format sg-xxxx.
                        items:
                          type: string
                        maxItems: 10
                        type: array
                      amiID:
                        description: |-
                          AMIID is the AMI that should be used to boot the ec2 instance.
                          If set, the AMI should belong to the same region as the cluster.
                        type: string
                      cpuOptions:
                        description: |-
                          CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
                          When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
                          More info:
                          https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
                          https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
                        minProperties: 1
                        properties:
                          confidentialCompute:
                            description: |-
                              ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
                              and, if so, which confidential computing technology to use.
                              Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
                              When set to Disabled, confidential computing will be disabled for the instance.
                              When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
                              In this case, ensure the following conditions are met:
                              1) The selected instance type supports AMD SEV-SNP.
                              2) The selected AWS region supports AMD SEV-SNP.
                              3) The selected AMI supports AMD SEV-SNP.
                              More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
                              When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
                              which is subject to change without notice. The current default is Disabled.
                            enum:
                            - Disabled
                            - AMDEncryptedVirtualizationNestedPaging
                            type: string
                        type: object
                      hostPlacement:
                        description: |-
                          hostPlacement configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host
                          for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL),
                          and to gain visibility and control over instance placement on a physical server.
                          When omitted, the instance is not constrained to a dedicated host.
                        properties:
                          affinity:
                            description: |-
                              affinity specifies the affinity setting for the instance.
                              Allowed values are AnyAvailable and DedicatedHost.
                              When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set.
                              When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host.
                            enum:
                            - DedicatedHost
                            - AnyAvailable
                            type: string
                          dedicatedHost:
                            description: |-
                              dedicatedHost specifies the exact host that an instance should be restarted on if stopped.
                              dedicatedHost is required when 'affinity' is set to DedicatedHost, and forbidden otherwise.
                            items:
                              description: DedicatedHost represents the configuration
                                for the usage of dedicated host.
                              properties:
                                id:
                                  description: |-
                                    id identifies the AWS Dedicated Host on which the instance must run.
                                    The value must start with "h-" followed by 17 lowercase hexadecimal characters (0-9 and a-f).
                                    Must be exactly 19 characters in length.
                                  maxLength: 19
                                  minLength: 19
                                  type: string
                                  x-kubernetes-validations:
                                  - message: hostID must start with 'h-' followed
                                      by 17 lowercase hexadecimal characters (0-9
                                      and a-f)
                                    rule: self.matches('^h-[0-9a-f]{17}$')
                              required:
                              - id
                              type: object
                            type: array
                        required:
                        - affinity
                        type: object
                        x-kubernetes-validations:
                        - message: dedicatedHost is required when affinity is DedicatedHost,
                            and forbidden otherwise
                          rule: 'has(self.affinity) && self.affinity == ''DedicatedHost''
                            ?  has(self.dedicatedHost) : !has(self.dedicatedHost)'
                      iamProfile:
                        description: |-
                          IAMProfile is the name of the IAM instance profile to use for the machine.
                          Leave unset to have the installer create the IAM Profile on your behalf.
                          Cannot be specified together with iamRole.
                        type: string
                      iamRole:
                        description: |-
                          IAMRole is the name of the IAM Role to use for the instance profile of the machine.
                          Leave unset to have the installer create the IAM Role on your behalf.
                          Cannot be specified together with iamProfile.
                        type: string
                      metadataService:
                        description: EC2MetadataOptions defines metadata service interaction
                          options for EC2 instances in the machine pool.
                        properties:
                          authentication:
                            description: |-
                              Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service.
                              When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service.
                              When omitted, this means the user has no opinion and the value is left to the platform to choose a good
                              default, which is subject to change over time. The current default is optional.
                              At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html
                            enum:
                            - Required
                            - Optional
                            type: string
                        type: object
                      rootVolume:
                        description: EC2RootVolume defines the root volume for EC2
                          instances in the machine pool.
                        properties:
                          iops:
                            description: |-
                              IOPS defines the amount of provisioned IOPS. (KiB/s). IOPS may only be set for
                              io1, io2, & gp3 volume types.
                            minimum: 0
                            type: integer
                          kmsKeyARN:
                            description: |-
                              The KMS key that will be used to encrypt the EBS volume.
                              If no key is provided the default KMS key for the account will be used.
                              https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html
                            type: string
                          size:
                            description: Size defines the size of the volume in gibibytes
                              (GiB).
                            minimum: 0
                            type: integer
                          throughput:
                            description: |-
                              Throughput to provision in MiB/s supported for the volume type. Not applicable to all types.

                              This parameter is valid only for gp3 volumes.
                              Valid Range: Minimum value of 125. Maximum value of 2000.

                              When omitted, this means no opinion, and the platform is left to
                              choose a reasonable default, which is subject to change over time.
                              The current default is 125.
                            format: int32
                            maximum: 2000
                            minimum: 125
                            type: integer
                          type:
                            description: Type defines the type of the volume.
                            type: string
                        required:
                        - size
                        - type
                        type: object
                      type:
                        description: |-
                          InstanceType defines the ec2 instance type.
                          eg. m4-large
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  hostedZone:
                    description: |-
                      HostedZone is the ID of an existing hosted zone into which to add DNS
                      records for the cluster's internal API. An existing hosted zone can
                      only be used when also using existing subnets. The hosted zone must be
                      associated with the VPC containing the subnets.
                      Leave the hosted zone unset to have the installer create the hosted zone
                      on your behalf.
                    type: string
                  hostedZoneRole:
                    description: |-
                      HostedZoneRole is the ARN of an IAM role to be assumed when performing
                      operations on the provided HostedZone. HostedZoneRole can be used
                      in a shared VPC scenario when the private hosted zone belongs to a
                      different account than the rest of the cluster resources.
                      If HostedZoneRole is set, HostedZone must also be set.
                    type: string
                  ipFamily:
                    default: IPv4
                    description: |-
                      IPFamily specifies the IP address family for the cluster network.
                      Use "IPv4" for IPv4-only networking, "DualStackIPv4Primary" for dual-stack networking
                      with IPv4 as the primary address family, or "DualStackIPv6Primary" for dual-stack
                      networking with IPv6 as the primary address family. When using dual-stack, the VPC
                      and subnets must be configured with both IPv4 and IPv6 CIDR blocks.
                    enum:
                    - IPv4
                    - DualStackIPv4Primary
                    - DualStackIPv6Primary
                    type: string
                  lbType:
                    description: |-
                      LBType is an optional field to specify a load balancer type.
                      When this field is specified, all ingresscontrollers (including the
                      default ingresscontroller) will be created using the specified load-balancer
                      type by default.

                      Following are the accepted values:

                      * "Classic": A Classic Load Balancer that makes routing decisions at
                      either the transport layer (TCP/SSL) or the application layer
                      (HTTP/HTTPS). See the following for additional details:
                      https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb

                      * "NLB": A Network Load Balancer that makes routing decisions at the
                      transport layer (TCP/SSL). See the following for additional details:
                      https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb

                      If this field is not set explicitly, the default value depends on the ipFamily field:
                      * "Classic" when ipFamily is not set or set to "IPv4"
                      * "NLB" when ipFamily is set to "DualStackIPv4Primary" or "DualStackIPv6Primary"
                      This default is subject to change over time.
                    enum:
                    - Classic
                    - NLB
                    type: string
                  preserveBootstrapIgnition:
                    description: PreserveBootstrapIgnition is deprecated. Use bestEffortDeleteIgnition
                      instead.
                    type: boolean
                  propagateUserTags:
                    description: |-
                      PropagateUserTags is a flag that directs in-cluster operators
                      to include the specified user tags in the tags of the
                      AWS resources that the operators create.
                    type: boolean
                  publicIpv4Pool:
                    description: |-
                      PublicIpv4Pool is an optional field that can be used to tell the installation process to use
                      Public IPv4 address that you bring to your AWS account with BYOIP.
                    type: string
                  region:
                    description: Region specifies the AWS region where the cluster
                      will be created.
                    type: string
                  serviceEndpoints:
                    description: |-
                      ServiceEndpoints list contains custom endpoints which will override default
                      service endpoint of AWS Services.
                      There must be only one ServiceEndpoint for a service.
                    items:
                      description: |-
                        ServiceEndpoint store the configuration for services to
                        override existing defaults of AWS Services.
                      properties:
                        name:
                          description: |-
                            Name is the name of the AWS service.
                            This must be provided and cannot be empty.
                          type: string
                        url:
                          description: |-
                            URL is fully qualified URI with scheme https, that overrides the default generated
                            endpoint for a client.
                            This must be provided and cannot be empty.
                          pattern: ^https://
                          type: string
                      required:
                      - name
                      - url
                      type: object
                    type: array
                  subnets:
                    description: |-
                      Subnets specifies existing subnets (by ID) where cluster
                      resources will be created.  Leave unset to have the installer
                      create subnets in a new VPC on your behalf.

                      Deprecated: use platform.aws.vpc.subnets
                    items:
                      type: string
                    type: array
                  userProvisionedDNS:
                    default: Disabled
                    description: |-
                      UserProvisionedDNS indicates if the customer is providing their own DNS solution in place of the default
                      provisioned by the Installer.
                    enum:
                    - Enabled
                    - Disabled
                    type: string
                  userTags:
                    additionalProperties:
                      type: string
                    description: |-
                      UserTags additional keys and values that the installer will add
                      as tags to all resources that it creates. Resources created by the
                      cluster itself may not include these tags.
                    type: object
                  vpc:
                    description: VPC specifies the VPC configuration for the cluster.
                    properties:
                      subnets:
                        description: |-
                          Subnets defines the subnets in an existing VPC and can optionally specify their intended roles.
                          If no roles are specified on any subnet, then the subnet roles are decided automatically.
                          In this case, the VPC must not contain any other non-cluster subnets without the kubernetes.io/cluster/<cluster-id> tag.

                          For manually specified subnet role selection, each subnet must have at least one assigned role,
                          and the ClusterNode, BootstrapNode, IngressControllerLB, ControlPlaneExternalLB, and ControlPlaneInternalLB roles must be assigned to at least one subnet.
                          However, if the cluster scope is internal, then ControlPlaneExternalLB is not required.

                          Subnets must contain unique IDs, and can include no more than 10 subnets with the IngressController role.

                          Leave this field unset to have the installer create subnets in a new VPC on your behalf.
                        items:
                          description: Subnet specifies a subnet in an existing VPC
                            and can optionally specify their intended roles.
                          properties:
                            id:
                              description: |-
                                ID specifies the subnet ID of an existing subnet.
                                The subnet ID must start with "subnet-", consist only of alphanumeric characters,
                                and must be exactly 24 characters long.
                              maxLength: 24
                              minLength: 24
                              pattern: ^subnet-[0-9A-Za-z]+$
                              type: string
                            roles:
                              description: |-
                                Roles specifies the roles (aka functions) that the subnet will provide in the cluster.
                                If no roles are specified on any subnet, then the subnet roles are decided automatically.
                                Each role must be unique.
                              items:
                                description: SubnetRole specifies the role (aka function)
                                  that the subnet will provide in the cluster.
                                properties:
                                  type:
                                    description: |-
                                      Type specifies the type of role (aka function) that the subnet will provide in the cluster.
                                      Role types include ClusterNode, EdgeNode, BootstrapNode, IngressControllerLB, ControlPlaneExternalLB, and ControlPlaneInternalLB.
                                    enum:
                                    - ClusterNode
                                    - EdgeNode
                                    - BootstrapNode
                                    - IngressControllerLB
                                    - ControlPlaneExternalLB
                                    - ControlPlaneInternalLB
                                    type: string
                                required:
                                - type
                                type: object
                              maxItems: 5
                              type: array
                          required:
                          - id
                          type: object
                        type: array
                        x-kubernetes-list-type: atomic
                    type: object
                required:
                - region
                type: object
              azure:
                description: Azure is the configuration used when installing on Azure.
                properties:
                  allowSharedKeyAccess:
                    description: |-
                      AllowSharedKeyAccess specifies if shared access key should be enabled for the storage account.
                      Default value is true.
                      Disabling this will require a new permission "Storage Blob Data Contributor" in azure.
                    type: boolean
                  armEndpoint:
                    description: ARMEndpoint is the endpoint for the Azure API when
                      installing on Azure Stack.
                    type: string
                  baseDomainResourceGroupName:
                    description: BaseDomainResourceGroupName specifies the resource
                      group where the Azure DNS zone for the base domain is found.
                      This field is optional when creating a private cluster, otherwise
                      required.
                    type: string
                  cloudName:
                    description: |-
                      cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK
                      with the appropriate Azure API endpoints.
                      If empty, the value is equal to "AzurePublicCloud".
                    enum:
                    - ""
                    - AzurePublicCloud
                    - AzureUSGovernmentCloud
                    - AzureChinaCloud
                    - AzureGermanCloud
                    - AzureStackCloud
                    type: string
                  clusterOSImage:
                    description: ClusterOSImage is the url of a storage blob in the
                      Azure Stack environment containing an RHCOS VHD. This field
                      is required for Azure Stack and not applicable to Azure.
                    type: string
                  computeSubnet:
                    description: |-
                      ComputeSubnet specifies an existing subnet for use by compute nodes

                      Deprecated: use platform.Azure.Subnets section
                    type: string
                  controlPlaneSubnet:
                    description: |-
                      ControlPlaneSubnet specifies an existing subnet for use by the control plane nodes

                      Deprecated: use platform.Azure.Subnets section
                    type: string
                  customerManagedKey:
                    description: CustomerManagedKey has the keys needed to encrypt
                      the storage account.
                    properties:
                      keyVault:
                        description: KeyVault is the keyvault used for the customer
                          created key required for encryption.
                        properties:
                          keyName:
                            description: KeyName is the name of the key vault key.
                            type: string
                          name:
                            description: Name is the name of the key vault.
                            type: string
                          resourceGroup:
                            description: |-
                              ResourceGroup defines the Azure resource group used by the key
                              vault.
                            type: string
                        required:
                        - keyName
                        - name
                        - resourceGroup
                        type: object
                      userAssignedIdentityKey:
                        description: UserAssignedIdentityKey is the name of the user
                          identity that has access to the managed key.
                        type: string
                    type: object
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on Azure for machine pools which do not define their own
                      platform configuration.
                    properties:
                      bootDiagnostics:
                        description: |-
                          BootDiagnostics has the value for the storage account URI where the
                          machine log information of the control plane is sent to.
                          Defaults to managed for control plane if no value is mentioned.
                        properties:
                          resourceGroup:
                            description: |-
                              ResourceGroup specifies the name of the resource group where the
                              storage account to be used for diagnostics storage is present.
                              Only used if the type is set to UserManaged.
                            type: string
                          storageAccountName:
                            description: |-
                              StorageAccountName specifies the storage account where the diagnostics
                              logs need to be stored.
                              Only used if the type is set to UserManaged.
                            type: string
                          type:
                            allOf:
                            - enum:
                              - Managed
                              - UserManaged
                              - Disabled
                            - enum:
                              - Disabled
                              - Managed
                              - UserManaged
                            description: |-
                              Type specifies the boot diagnostics type for the machines created.
                              Defaults as disabled for compute nodes and as managed for control plane
                              nodes.
                              Values allowed are Disabled, Managed and UserManaged.
                            type: string
                        required:
                        - resourceGroup
                        - storageAccountName
                        - type
                        type: object
                      dataDisks:
                        description: DataDisk specifies the parameters that are used
                          to add one or more data disks to the machine.
                        items:
                          description: DataDisk specifies the parameters that are
                            used to add one or more data disks to the machine.
                          properties:
                            cachingType:
                              description: CachingType specifies the caching requirements.
                              enum:
                              - None
                              - ReadOnly
                              - ReadWrite
                              type: string
                            diskSizeGB:
                              description: DiskSizeGB is the size in GB to assign
                                to the data disk.
                              format: int32
                              type: integer
                            lun:
                              description: |-
                                Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM.
                                The value must be between 0 and 63.
                              format: int32
                              type: integer
                            managedDisk:
                              description: ManagedDisk specifies the Managed Disk
                                parameters for the data disk.
                              properties:
                                diskEncryptionSet:
                                  description: DiskEncryptionSet specifies the customer-managed
                                    disk encryption set resource id for the managed
                                    disk.
                                  properties:
                                    id:
                                      description: ID defines resourceID for diskEncryptionSet
                                        resource. It must be in the same subscription
                                      type: string
                                  type: object
                                securityProfile:
                                  description: SecurityProfile specifies the security
                                    profile for the managed disk.
                                  properties:
                                    diskEncryptionSet:
                                      description: |-
                                        DiskEncryptionSet specifies the customer-managed disk encryption set resource id for the
                                        managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                        VMGuest blob.
                                      properties:
                                        id:
                                          description: ID defines resourceID for diskEncryptionSet
                                            resource. It must be in the same subscription
                                          type: string
                                      type: object
                                    securityEncryptionType:
                                      description: |-
                                        SecurityEncryptionType specifies the encryption type of the managed disk.
                                        It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                        blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                        When set to VMGuestStateOnly, VirtualizedTrustedPlatformModule should be set to Enabled.
                                        When set to DiskWithVMGuestState, EncryptionAtHost should be disabled, SecureBoot and
                                        VirtualizedTrustedPlatformModule should be set to Enabled.
                                        It can be set only for Confidential VMs.
                                      enum:
                                      - VMGuestStateOnly
                                      - DiskWithVMGuestState
                                      type: string
                                  type: object
                                storageAccountType:
                                  type: string
                              type: object
                            nameSuffix:
                              description: |-
                                NameSuffix is the suffix to be appended to the machine name to generate the disk name.
                                Each disk name will be in format <machineName>_<nameSuffix>.
                              type: string
                          required:
                          - diskSizeGB
                          - nameSuffix
                          type: object
                        type: array
                      encryptionAtHost:
                        description: EncryptionAtHost enables encryption at the VM
                          host.
                        type: boolean
                      identity:
                        default: UserAssigned
                        description: |-
                          Identity is the type of identity used for the virtual machine.
                          The type 'UserAssigned' is a standalone Azure resource provided by the user
                          and assigned to the VM.
                          The default identity is a user-assigned identity, generated by the installer.
                          This default is expected to change in future releases.
                        properties:
                          type:
                            description: Type specifies the type of identity to be
                              used.
                            enum:
                            - None
                            - UserAssigned
                            type: string
                          userAssignedIdentities:
                            description: |-
                              UserAssignedIdentities is a list of identities to be attached to a node.
                              Only one user-assigned identity may be supplied.
                              Supplying more than one user-assigned identity is an experimental feature
                              which may be enabled with the MachineAPIMigration feature gate.
                            items:
                              description: UserAssignedIdentity contains the fields
                                that comprise a user-assigned identity.
                              properties:
                                name:
                                  description: Name is the name of the user-assigned
                                    identity to be assigned to the node.
                                  type: string
                                resourceGroup:
                                  description: ResourceGroup is the resource group
                                    that contains the user-assigned identity.
                                  type: string
                                subscription:
                                  description: Subscription is the subscription that
                                    contains the user-assigned identity.
                                  type: string
                              required:
                              - name
                              - resourceGroup
                              - subscription
                              type: object
                            type: array
                        required:
                        - type
                        - userAssignedIdentities
                        type: object
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskEncryptionSet:
                            description: DiskEncryptionSet defines a disk encryption
                              set.
                            properties:
                              name:
                                description: Name is the name of the disk encryption
                                  set.
                                type: string
                              resourceGroup:
                                description: |-
                                  ResourceGroup defines the Azure resource group used by the disk
                                  encryption set.
                                type: string
                              subscriptionId:
                                description: |-
                                  SubscriptionID defines the Azure subscription the disk encryption
                                  set is in.
                                  Must be the same subscription ID as the resource group of the installer.
                                type: string
                            required:
                            - name
                            - resourceGroup
                            type: object
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            minimum: 0
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are Premium_LRS and StandardSSD_LRS.
                              Default is Premium_LRS.
                            enum:
                            - Standard_LRS
                            - Premium_LRS
                            - StandardSSD_LRS
                            type: string
                          securityProfile:
                            description: SecurityProfile specifies the security profile
                              for the managed disk.
                            properties:
                              diskEncryptionSet:
                                description: |-
                                  DiskEncryptionSet specifies the customer managed disk encryption set resource id for the
                                  managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and
                                  VMGuestState blob.
                                properties:
                                  name:
                                    description: Name is the name of the disk encryption
                                      set.
                                    type: string
                                  resourceGroup:
                                    description: |-
                                      ResourceGroup defines the Azure resource group used by the disk
                                      encryption set.
                                    type: string
                                  subscriptionId:
                                    description: |-
                                      SubscriptionID defines the Azure subscription the disk encryption
                                      set is in.
                                      Must be the same subscription ID as the resource group of the installer.
                                    type: string
                                required:
                                - name
                                - resourceGroup
                                type: object
                              securityEncryptionType:
                                description: |-
                                  SecurityEncryptionType specifies the encryption type of the managed disk.
                                  It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState
                                  blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only.
                                  When set to VMGuestStateOnly, the VTpmEnabled should be set to true.
                                  When set to DiskWithVMGuestState, both SecureBootEnabled and VTpmEnabled should be set to true.
                                  It can be set only for Confidential VMs.
                                enum:
                                - VMGuestStateOnly
                                - DiskWithVMGuestState
                                type: string
                            type: object
                        required:
                        - diskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines the image to use for the OS.
                        properties:
                          offer:
                            description: Offer is the offer of the image.
                            type: string
                          plan:
                            description: |-
                              Plan is the purchase plan of the image.
                              If omitted, it defaults to "WithPurchasePlan".
                            enum:
                            - WithPurchasePlan
                            - NoPurchasePlan
                            type: string
                          publisher:
                            description: Publisher is the publisher of the image.
                            type: string
                          sku:
                            description: SKU is the SKU of the image.
                            type: string
                          version:
                            description: Version is the version of the image.
                            type: string
                        required:
                        - offer
                        - publisher
                        - sku
                        - version
                        type: object
                      settings:
                        description: |-
                          Settings specify the security type and the UEFI settings of the virtual machine. This field can
                          be set for Confidential VMs and Trusted Launch for VMs.
                        properties:
                          confidentialVM:
                            description: |-
                              ConfidentialVM specifies the security configuration of the virtual machine.
                              For more information regarding Confidential VMs, please refer to:
                              https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                          securityType:
                            description: |-
                              SecurityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to
                              enable secure boot and vTPM. The default behavior is: secure boot and vTPM will not be enabled unless this property is set.
                            enum:
                            - ConfidentialVM
                            - TrustedLaunch
                            type: string
                          trustedLaunch:
                            description: |-
                              TrustedLaunch specifies the security configuration of the virtual machine.
                              For more information regarding TrustedLaunch for VMs, please refer to:
                              https://learn.microsoft.com/azure/virtual-machines/trusted-launch
                            properties:
                              uefiSettings:
                                description: UEFISettings specifies the security settings
                                  like secure boot and vTPM used while creating the
                                  virtual machine.
                                properties:
                                  secureBoot:
                                    description: |-
                                      SecureBoot specifies whether secure boot should be enabled on the virtual machine.
                                      Secure Boot verifies the digital signature of all boot components and halts the boot process if
                                      signature verification fails.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                  virtualizedTrustedPlatformModule:
                                    description: |-
                                      VirtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine.
                                      When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline.
                                      The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed.
                                      This is required to be set to enabled if the SecurityEncryptionType is defined.
                                      If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.
                                    enum:
                                    - Enabled
                                    - Disabled
                                    type: string
                                type: object
                            required:
                            - uefiSettings
                            type: object
                        required:
                        - securityType
                        type: object
                      type:
                        description: |-
                          InstanceType defines the azure instance type.
                          eg. Standard_DS_V2
                        type: string
                      ultraSSDCapability:
                        description: ultraSSDCapability defines if the instance should
                          use Ultra SSD disks.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      vmNetworkingType:
                        description: |-
                          VMNetworkingType specifies whether to enable accelerated networking.
                          Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its
                          networking performance.
                          eg. values: "Accelerated", "Basic"
                        enum:
                        - Accelerated
                        - Basic
                        type: string
                      zones:
                        description: |-
                          Zones is list of availability zones that can be used.
                          eg. ["1", "2", "3"]
                        items:
                          type: string
                        type: array
                    type: object
                  ipFamily:
                    default: IPv4
                    description: |-
                      IPFamily specifies the IP address family for the cluster network.
                      Use "IPv4" for IPv4-only networking, "DualStackIPv4Primary" for dual-stack networking
                      with IPv4 as the primary address family, or "DualStackIPv6Primary" for dual-stack
                      networking with IPv6 as the primary address family. When using dual-stack, the VNet
                      and subnets must be configured with both IPv4 and IPv6 CIDR blocks.
                    enum:
                    - IPv4
                    - DualStackIPv4Primary
                    - DualStackIPv6Primary
                    type: string
                  networkResourceGroupName:
                    description: NetworkResourceGroupName specifies the network resource
                      group that contains an existing VNet
                    type: string
                  outboundType:
                    default: Loadbalancer
                    description: OutboundType is a strategy for how egress from cluster
                      is achieved. When not specified default is "Loadbalancer".
                    enum:
                    - ""
                    - Loadbalancer
                    - NATGatewaySingleZone
                    - NATGatewayMultiZone
                    - UserDefinedRouting
                    type: string
                  region:
                    description: Region specifies the Azure region where the cluster
                      will be created.
                    type: string
                  resourceGroupName:
                    description: |-
                      ResourceGroupName is the name of an already existing resource group where the cluster should be installed.
                      This resource group should only be used for this specific cluster and the cluster components will assume
                      ownership of all resources in the resource group. Destroying the cluster using installer will delete this
                      resource group.
                      This resource group must be empty with no other resources when trying to use it for creating a cluster.
                      If empty, a new resource group will created for the cluster.
                    type: string
                  subnets:
                    description: Subnets is the list of subnets the user can bring
                      into the cluster to be used.
                    items:
                      description: SubnetSpec specifies the properties the subnet
                        needs to be used in the cluster.
                      properties:
                        name:
                          description: Name of the subnet.
                          type: string
                        role:
                          description: Role specifies the actual role which the subnet
                            should be used in.
                          enum:
                          - node
                          - control-plane
                          type: string
                      required:
                      - name
                      - role
                      type: object
                    type: array
                  userProvisionedDNS:
                    default: Disabled
                    description: |-
                      UserProvisionedDNS indicates if the customer is providing their own DNS solution in place of the default
                      provisioned by the Installer.
                    enum:
                    - Enabled
                    - Disabled
                    type: string
                  userTags:
                    additionalProperties:
                      type: string
                    description: |-
                      UserTags has additional keys and values that the installer will add
                      as tags to all resources that it creates on AzurePublicCloud alone.
                      Resources created by the cluster itself may not include these tags.
                    type: object
                  virtualNetwork:
                    description: VirtualNetwork specifies the name of an existing
                      VNet for the installer to use
                    type: string
                required:
                - region
                type: object
              baremetal:
                description: BareMetal is the configuration used when installing on
                  bare metal.
                properties:
                  additionalNTPServers:
                    description: |-
                      AdditionalNTPServers defines a list of additional NTP servers
                      to use for provisioning
                    items:
                      type: string
                    type: array
                  apiVIP:
                    description: |-
                      DeprecatedAPIVIP is the VIP to use for internal API communication
                      Deprecated: Use APIVIPs
                    format: ip
                    type: string
                  apiVIPs:
                    description: |-
                      APIVIPs contains the VIP(s) to use for internal API communication. In
                      dual stack clusters it contains an IPv4 and IPv6 address, otherwise only
                      one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  bmcVerifyCA:
                    type: string
                  bootstrapExternalStaticDNS:
                    description: |-
                      BootstrapExternalStaticDNS is the static network DNS of the bootstrap node.
                      This can be useful in environments without a DHCP server.
                    format: ip
                    type: string
                  bootstrapExternalStaticGateway:
                    description: |-
                      BootstrapExternalStaticGateway is the static network gateway of the bootstrap node.
                      This can be useful in environments without a DHCP server.
                    format: ip
                    type: string
                  bootstrapExternalStaticIP:
                    description: |-
                      BootstrapExternalStaticIP is the static IP address of the bootstrap node.
                      This can be useful in environments without a DHCP server.
                    format: ip
                    type: string
                  bootstrapOSImage:
                    description: |-
                      BootstrapOSImage is a URL to override the default OS image
                      for the bootstrap node. The URL must contain a sha256 hash of the image
                      e.g https://mirror.example.com/images/qemu.qcow2.gz?sha256=a07bd...
                      Deprecated: This is no longer used.
                    type: string
                  bootstrapProvisioningIP:
                    description: |-
                      BootstrapProvisioningIP is the IP used on the bootstrap VM to
                      bring up provisioning services that are used to create the
                      control-plane machines
                    format: ip
                    type: string
                  clusterOSImage:
                    description: |-
                      ClusterOSImage is a URL to override the default OS image
                      for cluster nodes. The URL must contain a sha256 hash of the image
                      e.g https://mirror.example.com/images/metal.qcow2.gz?sha256=3b5a8...
                      Deprecated: This is no longer required, the OS image is now part of the
                      OpenShift release.
                    type: string
                  clusterProvisioningIP:
                    description: |-
                      ClusterProvisioningIP is the IP on the dedicated provisioning network
                      where the baremetal-operator pod runs provisioning services,
                      and an http server to cache some downloaded content e.g RHCOS/IPA images
                    type: string
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on bare metal for machine pools which do not define their own
                      platform configuration.
                    type: object
                  dnsRecordsType:
                    description: |-
                      dnsRecordsType determines whether records for api, api-int, and ingress
                      are provided by the internal DNS service or externally.
                      Allowed values are `Internal`, `External`, and omitted.
                      When set to `Internal`, records are provided by the internal infrastructure and
                      no additional user configuration is required for the cluster to function.
                      When set to `External`, records are not provided by the internal infrastructure
                      and must be configured by the user on a DNS server outside the cluster.
                      Cluster nodes must use this external server for their upstream DNS requests.
                      This value may only be set when loadBalancer.type is set to UserManaged.
                      When omitted, this means the user has no opinion and the platform is left
                      to choose reasonable defaults. These defaults are subject to change over time.
                      The current default is `Internal`.
                    enum:
                    - Internal
                    - External
                    type: string
                  externalBridge:
                    description: External bridge is used for external communication.
                    type: string
                  externalMACAddress:
                    description: |-
                      ExternalMACAddress is used to allow setting a static unicast MAC
                      address for the bootstrap host on the external network. Consider
                      using the QEMU vendor prefix `52:54:00`. If left blank, libvirt will
                      generate one for you.
                    type: string
                  hosts:
                    description: Hosts is the information needed to create the objects
                      in Ironic.
                    items:
                      description: Host stores all the configuration data for a baremetal
                        host.
                      properties:
                        bmc:
                          description: BMC stores the information about a baremetal
                            host's management controller.
                          properties:
                            address:
                              type: string
                            disableCertificateVerification:
                              type: boolean
                            password:
                              type: string
                            username:
                              type: string
                          required:
                          - address
                          - disableCertificateVerification
                          - password
                          - username
                          type: object
                        bootMACAddress:
                          type: string
                        bootMode:
                          description: |-
                            BootMode puts the server in legacy (BIOS), UEFI secure boot or UEFI mode for
                            booting. Secure boot is only enabled during the final instance boot.
                            The default is UEFI.
                          enum:
                          - ""
                          - UEFI
                          - UEFISecureBoot
                          - legacy
                          type: string
                        hardwareProfile:
                          type: string
                        name:
                          type: string
                        networkConfig:
                          x-kubernetes-preserve-unknown-fields: true
                        role:
                          type: string
                        rootDeviceHints:
                          description: |-
                            RootDeviceHints holds the hints for specifying the storage location
                            for the root filesystem for the image.
                          properties:
                            deviceName:
                              description: |-
                                A Linux device name like "/dev/vda". The hint must match the
                                actual value exactly.
                              type: string
                            hctl:
                              description: |-
                                A SCSI bus address like 0:0:0:0. The hint must match the actual
                                value exactly.
                              type: string
                            minSizeGigabytes:
                              description: The minimum size of the device in Gigabytes.
                              minimum: 0
                              type: integer
                            model:
                              description: |-
                                A vendor-specific device identifier. The hint can be a
                                substring of the actual value.
                              type: string
                            rotational:
                              description: True if the device should use spinning
                                media, false otherwise.
                              type: boolean
                            serialNumber:
                              description: |-
                                Device serial number. The hint must match the actual value
                                exactly.
                              type: string
                            vendor:
                              description: |-
                                The name of the vendor or manufacturer of the device. The hint
                                can be a substring of the actual value.
                              type: string
                            wwn:
                              description: |-
                                Unique storage identifier. The hint must match the actual value
                                exactly.
                              type: string
                            wwnVendorExtension:
                              description: |-
                                Unique vendor storage identifier. The hint must match the
                                actual value exactly.
                              type: string
                            wwnWithExtension:
                              description: |-
                                Unique storage identifier with the vendor extension
                                appended. The hint must match the actual value exactly.
                              type: string
                          type: object
                      required:
                      - bmc
                      - bootMACAddress
                      - hardwareProfile
                      - role
                      type: object
                    type: array
                  ingressVIP:
                    description: |-
                      DeprecatedIngressVIP is the VIP to use for ingress traffic
                      Deprecated: Use IngressVIPs
                    format: ip
                    type: string
                  ingressVIPs:
                    description: |-
                      IngressVIPs contains the VIP(s) to use for ingress traffic. In dual stack
                      clusters it contains an IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  libvirtURI:
                    default: qemu:///system
                    description: |-
                      LibvirtURI is the identifier for the libvirtd connection.  It must be
                      reachable from the host where the installer is run.
                      Default is qemu:///system
                    type: string
                  loadBalancer:
                    description: |-
                      LoadBalancer defines how the load balancer used by the cluster is configured.
                      LoadBalancer is available in TechPreview.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on BareMetal platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                  provisioningBridge:
                    description: |-
                      Provisioning bridge is used for provisioning nodes, on the host that
                      will run the bootstrap VM.
                    type: string
                  provisioningDHCPExternal:
                    description: |-
                      DeprecatedProvisioningDHCPExternal indicates that DHCP is provided by an external service. This parameter is
                      replaced by ProvisioningNetwork being set to "Unmanaged".
                    type: boolean
                  provisioningDHCPRange:
                    description: |-
                      ProvisioningDHCPRange is used to provide DHCP services to hosts
                      for provisioning.
                    type: string
                  provisioningHostIP:
                    description: |-
                      DeprecatedProvisioningHostIP is the deprecated version of clusterProvisioningIP. When the
                      baremetal platform was initially added to the installer, the JSON field for ClusterProvisioningIP
                      was incorrectly set to "provisioningHostIP."  This field is here to allow backwards-compatibility.
                    type: string
                  provisioningMACAddress:
                    description: |-
                      ProvisioningMACAddress is used to allow setting a static unicast MAC
                      address for the bootstrap host on the provisioning network. Consider
                      using the QEMU vendor prefix `52:54:00`. If left blank, libvirt will
                      generate one for you.
                    type: string
                  provisioningNetwork:
                    default: Managed
                    description: ProvisioningNetwork is used to indicate if we will
                      have a provisioning network, and how it will be managed.
                    enum:
                    - ""
                    - Managed
                    - Unmanaged
                    - Disabled
                    type: string
                  provisioningNetworkCIDR:
                    description: ProvisioningNetworkCIDR defines the network to use
                      for provisioning.
                    type: string
                  provisioningNetworkGateway:
                    description: |-
                      ProvisioningNetworkGateway is the IP address of the default gateway
                      for the provisioning network. This gateway is provided to baremetal
                      hosts via DHCP to enable routing to external networks during
                      introspection and provisioning. This field is only honored when
                      provisioningNetwork is set to Managed (installer-managed DHCP).
                      It is ignored when provisioningNetwork is Unmanaged or Disabled.
                    format: ip
                    type: string
                  provisioningNetworkInterface:
                    description: |-
                      ProvisioningNetworkInterface is the name of the network interface on a control plane
                      baremetal host that is connected to the provisioning network.
                    type: string
                required:
                - hosts
                type: object
              external:
                description: |-
                  External is the configuration used when installing on
                  an external cloud provider.
                properties:
                  cloudControllerManager:
                    default: ""
                    description: CloudControllerManager when set to external, this
                      property will enable an external cloud provider.
                    enum:
                    - ""
                    - External
                    type: string
                  platformName:
                    default: Unknown
                    description: |-
                      PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time.
                      This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
                    type: string
                    x-kubernetes-validations:
                    - message: platform name cannot be changed once set
                      rule: oldSelf == 'Unknown' || self == oldSelf
                type: object
              gcp:
                description: GCP is the configuration used when installing on Google
                  Cloud Platform.
                properties:
                  computeSubnet:
                    description: |-
                      ComputeSubnet is an existing subnet where the compute nodes will be deployed.
                      The value should be the name of the subnet.
                    type: string
                  controlPlaneSubnet:
                    description: |-
                      ControlPlaneSubnet is an existing subnet where the control plane will be deployed.
                      The value should be the name of the subnet.
                    type: string
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on GCP for machine pools which do not define their own
                      platform configuration.
                    properties:
                      confidentialCompute:
                        default: Disabled
                        description: |-
                          confidentialCompute is an optional field defining whether the instance should have
                          Confidential Computing enabled or not, and the Confidential Computing technology of choice.
                              With Disabled, Confidential Computing is disabled.
                              With Enabled, Confidential Computing is enabled with no preference on the
                          Confidential Computing technology. The platform chooses a default i.e. AMD SEV,
                          which is subject to change over time.
                              With AMDEncryptedVirtualization, Confidential Computing is enabled with
                          AMD Secure Encrypted Virtualization (AMD SEV).
                              With AMDEncryptedVirtualizationNestedPaging, Confidential Computing is
                          enabled with AMD Secure Encrypted Virtualization Secure Nested Paging
                          (AMD SEV-SNP).
                              With IntelTrustedDomainExtensions, Confidential Computing is enabled with
                          Intel Trusted Domain Extensions (Intel TDX).
                              If any value other than Disabled is set, a machine type and region that supports
                          Confidential Computing must be specified. Machine series and regions supporting
                          Confidential Computing technologies can be checked at
                          https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#machine-type-cpu-zone
                              If any value other than Disabled is set, onHostMaintenance is required to be set
                          to "Terminate".
                        enum:
                        - ""
                        - Enabled
                        - Disabled
                        - AMDEncryptedVirtualization
                        - AMDEncryptedVirtualizationNestedPaging
                        - IntelTrustedDomainExtensions
                        type: string
                      onHostMaintenance:
                        default: Migrate
                        description: |-
                          OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot.
                          Allowed values are "Migrate" and "Terminate".
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is "Migrate".
                        enum:
                        - Migrate
                        - Terminate
                        type: string
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          DiskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int64
                            maximum: 65536
                            minimum: 16
                            type: integer
                          diskType:
                            description: |-
                              DiskType defines the type of disk.
                              For control plane nodes, the valid values are pd-balanced, pd-ssd, and hyperdisk-balanced.
                            enum:
                            - pd-balanced
                            - pd-ssd
                            - pd-standard
                            - hyperdisk-balanced
                            type: string
                          encryptionKey:
                            description: EncryptionKey defines the KMS key to be used
                              to encrypt the disk.
                            properties:
                              kmsKey:
                                description: KMSKey is a reference to a KMS Key to
                                  use for the encryption.
                                properties:
                                  keyRing:
                                    description: KeyRing is the name of the KMS Key
                                      Ring which the KMS Key belongs to.
                                    type: string
                                  location:
                                    description: Location is the GCP location in which
                                      the Key Ring exists.
                                    type: string
                                  name:
                                    description: Name is the name of the customer
                                      managed encryption key to be used for the disk
                                      encryption.
                                    type: string
                                  projectID:
                                    description: |-
                                      ProjectID is the ID of the Project in which the KMS Key Ring exists.
                                      Defaults to the VM ProjectID if not set.
                                    type: string
                                required:
                                - keyRing
                                - location
                                - name
                                type: object
                              kmsKeyServiceAccount:
                                description: |-
                                  KMSKeyServiceAccount is the service account being used for the
                                  encryption request for the given KMS key. If absent, the Compute
                                  Engine default service account is used.
                                  See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account
                                  for details on the default service account.
                                type: string
                            type: object
                        required:
                        - DiskSizeGB
                        type: object
                      osImage:
                        description: OSImage defines a custom image for instance.
                        properties:
                          name:
                            description: Name defines the name of the image.
                            type: string
                          project:
                            description: Project defines the name of the project containing
                              the image.
                            type: string
                        required:
                        - name
                        - project
                        type: object
                      secureBoot:
                        description: |-
                          SecureBoot Defines whether the instance should have secure boot enabled.
                          secure boot Verify the digital signature of all boot components, and halt the boot process if signature verification fails.
                          If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.
                        enum:
                        - Enabled
                        - Disabled
                        type: string
                      serviceAccount:
                        description: |-
                          ServiceAccount is the email of a gcp service account to be used during installations.
                          The provided service account can be attached to both control-plane nodes
                          and worker nodes in order to provide the permissions required by the cloud provider.
                        type: string
                      tags:
                        description: Tags defines a set of network tags which will
                          be added to instances in the machineset
                        items:
                          type: string
                        type: array
                      type:
                        description: |-
                          InstanceType defines the GCP instance type.
                          eg. n1-standard-4
                        type: string
                      zones:
                        description: Zones is list of availability zones that can
                          be used.
                        items:
                          type: string
                        type: array
                    type: object
                  dns:
                    description: |-
                      DNS contains the dns zone information for the cluster. The DNS information can
                      only be supplied during Shared VPC (XPN) installs.
                    properties:
                      privateZone:
                        description: |-
                          PrivateZone contains the information for a private DNS zone. The Private DNS Zone can
                          only be supplied during Shared VPC (XPN) installs. The PrivateZone can exist or be
                          created in a second service project; a project other than the one matching projectID
                          or networkProjectID.
                        properties:
                          name:
                            description: Name is the name of the dns-managed zone.
                            type: string
                          projectID:
                            description: ProjectID is the project where the zone resides.
                            type: string
                        required:
                        - name
                        type: object
                    type: object
                  endpoint:
                    description: Endpoint is the private service connect endpoint.
                    properties:
                      clusterUseOnly:
                        description: |-
                          ClusterUseOnly should be set to true when the installer should use
                          the public api endpoints and all cluster operators should use the
                          api endpoint overrides. The value should be false when the installer
                          and cluster operators should use the api endpoint overrides; that is,
                          the installer is being run in the same network as the cluster.
                        type: boolean
                      name:
                        description: Name contains the name of the private service
                          connect endpoint.
                        type: string
                    required:
                    - name
                    type: object
                  firewallRulesManagement:
                    description: |-
                      FirewallRulesManagement specifies the management policy for the cluster. "Managed" indicates that
                      the firewall rules will be created and destroyed by the cluster. "Unmanaged" indicates that the
                      user should create and destroy the firewall rules. For Shared VPC installation, if the installer
                      credential doesn't have firewall rules management permissions, the "firewallRulesManagement" settings
                      can be absent or set to "Unmanaged" explicitly. For non-Shared VPC installation, if the installer
                      credential doesn't have firewall rules management permissions, the "firewallRulesManagement" settings
                      must be set to "Unmanaged" explicitly. And in this case, the user needs to pre-configure the VPC network
                      and the firewall rules before the installation.
                    enum:
                    - Managed
                    - Unmanaged
                    type: string
                  network:
                    description: |-
                      Network specifies an existing VPC where the cluster should be created
                      rather than provisioning a new one.
                    type: string
                  networkProjectID:
                    description: |-
                      NetworkProjectID specifies which project the network and subnets exist in when
                      they are not in the main ProjectID.
                    type: string
                  projectID:
                    description: ProjectID is the the project that will be used for
                      the cluster.
                    type: string
                  region:
                    description: Region specifies the GCP region where the cluster
                      will be created.
                    type: string
                  userLabels:
                    description: |-
                      userLabels has additional keys and values that the installer will add as
                      labels to all resources that it creates on GCP. Resources created by the
                      cluster itself may not include these labels.
                    items:
                      description: UserLabel is a label to apply to GCP resources
                        created for the cluster.
                      properties:
                        key:
                          description: |-
                            key is the key part of the label. A label key can have a maximum of 63 characters
                            and cannot be empty. Label must begin with a lowercase letter, and must contain
                            only lowercase letters, numeric characters, and the following special characters `_-`.
                          type: string
                        value:
                          description: |-
                            value is the value part of the label. A label value can have a maximum of 63 characters
                            and cannot be empty. Value must contain only lowercase letters, numeric characters, and
                            the following special characters `_-`.
                          type: string
                      required:
                      - key
                      - value
                      type: object
                    type: array
                  userProvisionedDNS:
                    default: Disabled
                    description: |-
                      UserProvisionedDNS indicates if the customer is providing their own DNS solution in place of the default
                      provisioned by the Installer.
                    enum:
                    - Enabled
                    - Disabled
                    type: string
                  userTags:
                    description: |-
                      userTags has additional keys and values that the installer will add as
                      tags to all resources that it creates on GCP. Resources created by the
                      cluster itself may not include these tags. Tag key and tag value should
                      be the shortnames of the tag key and tag value resource.
                    items:
                      description: UserTag is a tag to apply to GCP resources created
                        for the cluster.
                      properties:
                        key:
                          description: |-
                            key is the key part of the tag. A tag key can have a maximum of 63 characters and
                            cannot be empty. Tag key must begin and end with an alphanumeric character, and
                            must contain only uppercase, lowercase alphanumeric characters, and the following
                            special characters `._-`.
                          type: string
                        parentID:
                          description: |-
                            parentID is the ID of the hierarchical resource where the tags are defined,
                            e.g. at the Organization or the Project level. To find the Organization ID or Project ID refer to the following pages:
                            https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
                            https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
                            An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
                            A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters,
                            numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.
                          type: string
                        value:
                          description: |-
                            value is the value part of the tag. A tag value can have a maximum of 63 characters
                            and cannot be empty. Tag value must begin and end with an alphanumeric character, and
                            must contain only uppercase, lowercase alphanumeric characters, and the following
                            special characters `_-.@%=+:,*#&(){}[]` and spaces.
                          type: string
                      required:
                      - key
                      - parentID
                      - value
                      type: object
                    type: array
                required:
                - projectID
                - region
                type: object
              ibmcloud:
                description: IBMCloud is the configuration used when installing on
                  IBM Cloud.
                properties:
                  computeSubnets:
                    description: |-
                      ComputeSubnets are the names of already existing subnets where the cluster
                      compute nodes should be created.
                    items:
                      type: string
                    type: array
                  controlPlaneSubnets:
                    description: |-
                      ControlPlaneSubnets are the names of already existing subnets where the
                      cluster control plane nodes should be created.
                    items:
                      type: string
                    type: array
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when installing
                      on IBM Cloud for machine pools which do not define their own platform
                      configuration.
                    properties:
                      bootVolume:
                        description: BootVolume is the configuration for the machine's
                          boot volume.
                        properties:
                          encryptionKey:
                            description: |-
                              EncryptionKey is the CRN referencing a Key Protect or Hyper Protect
                              Crypto Services key to use for volume encryption. If not specified, a
                              provider managed encryption key will be used.
                            type: string
                        type: object
                      dedicatedHosts:
                        description: DedicatedHosts is the configuration for the machine's
                          dedicated host and profile.
                        items:
                          description: DedicatedHost stores the configuration for
                            the machine's dedicated host platform.
                          properties:
                            name:
                              description: |-
                                Name is the name of the dedicated host to provision the machine on. If
                                specified, machines will be created on pre-existing dedicated host.
                              type: string
                            profile:
                              description: |-
                                Profile is the profile ID for the dedicated host. If specified, new
                                dedicated host will be created for machines.
                              type: string
                          type: object
                        type: array
                      type:
                        description: InstanceType is the VSI machine profile.
                        type: string
                      zones:
                        description: Zones is the list of availability zones used
                          for machines in the pool.
                        items:
                          type: string
                        type: array
                    type: object
                  networkResourceGroupName:
                    description: |-
                      NetworkResourceGroupName is the name of an already existing resource group
                      where an existing VPC and set of Subnets exist, to be used during cluster
                      creation.
                    type: string
                  region:
                    description: |-
                      Region specifies the IBM Cloud region where the cluster will be
                      created.
                    type: string
                  resourceGroupName:
                    description: |-
                      ResourceGroupName is the name of an already existing resource group where the
                      cluster should be installed. If empty, a new resource group will be created
                      for the cluster.
                    type: string
                  serviceEndpoints:
                    description: |-
                      ServiceEndpoints is a list which contains custom endpoints to override default
                      service endpoints of IBM Cloud Services.
                      There must only be one ServiceEndpoint for a service (no duplicates).
                    items:
                      description: |-
                        IBMCloudServiceEndpoint stores the configuration of a custom url to
                        override existing defaults of IBM Cloud Services.
                      properties:
                        name:
                          description: |-
                            name is the name of the IBM Cloud service.
                            Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC.
                            For example, the IBM Cloud Private IAM service could be configured with the
                            service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com`
                            Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured
                            with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`
                          enum:
                          - CIS
                          - COS
                          - COSConfig
                          - DNSServices
                          - GlobalCatalog
                          - GlobalSearch
                          - GlobalTagging
                          - HyperProtect
                          - IAM
                          - KeyProtect
                          - ResourceController
                          - ResourceManager
                          - VPC
                          type: string
                        url:
                          description: |-
                            url is fully qualified URI with scheme https, that overrides the default generated
                            endpoint for a client.
                            This must be provided and cannot be empty. The path must follow the pattern
                            /v[0,9]+ or /api/v[0,9]+
                          maxLength: 300
                          type: string
                          x-kubernetes-validations:
                          - message: url must be a valid absolute URL
                            rule: isURL(self)
                      required:
                      - name
                      - url
                      type: object
                    type: array
                  vpcName:
                    description: |-
                      VPCName is the name of an already existing VPC to be used during cluster
                      creation.
                    type: string
                required:
                - region
                type: object
              none:
                description: |-
                  None is the empty configuration used when installing on an unsupported
                  platform.
                type: object
              nutanix:
                description: Nutanix is the configuration used when installing on
                  Nutanix.
                properties:
                  apiVIP:
                    description: |-
                      DeprecatedAPIVIP is the virtual IP address for the api endpoint
                      Deprecated: use APIVIPs
                    type: string
                  apiVIPs:
                    description: |-
                      APIVIPs contains the VIP(s) for the api endpoint. In dual stack clusters
                      it contains an IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  clusterOSImage:
                    description: ClusterOSImage overrides the url provided in rhcos.json
                      to download the RHCOS Image.
                    type: string
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on Nutanix for machine pools which do not define their own
                      platform configuration.
                    properties:
                      bootType:
                        description: |-
                          BootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot.
                          If this field is empty or omitted, the VM will use the default boot type "Legacy" to boot.
                          "SecureBoot" depends on "UEFI" boot, i.e., enabling "SecureBoot" means that "UEFI" boot is also enabled.
                        enum:
                        - ""
                        - Legacy
                        - UEFI
                        - SecureBoot
                        type: string
                      categories:
                        description: |-
                          Categories optionally adds one or more prism categories (each with key and value) for
                          the Machine's VM to associate with. All the category key and value pairs specified must
                          already exist in the prism central.
                        items:
                          description: NutanixCategory identifies a pair of prism
                            category key and value
                          properties:
                            key:
                              description: key is the prism category key name
                              maxLength: 64
                              minLength: 1
                              type: string
                            value:
                              description: value is the prism category value associated
                                with the key
                              maxLength: 64
                              minLength: 1
                              type: string
                          required:
                          - key
                          - value
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - key
                        x-kubernetes-list-type: map
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs times NumCoresPerSocket.
                          For example: 4 CPUs and 4 Cores per socket will result in 16 VPUs.
                          The AHV scheduler treats socket and core allocation exactly the same
                          so there is no benefit to configuring cores over CPUs.
                        format: int64
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int64
                        type: integer
                      dataDisks:
                        description: DataDisks holds information of the data disks
                          to attach to the Machine's VM
                        items:
                          description: DataDisk defines a data disk for a Machine
                            VM.
                          properties:
                            dataSourceImage:
                              description: dataSource refers to a data source image
                                for the VM disk.
                              properties:
                                name:
                                  description: Name is the name of the storage container
                                    resource in the Prism Element.
                                  type: string
                                referenceName:
                                  description: ReferenceName is the identifier of
                                    the storage resource configured in the FailureDomain.
                                  type: string
                                uuid:
                                  description: UUID is the UUID of the storage container
                                    resource in the Prism Element.
                                  type: string
                              required:
                              - uuid
                              type: object
                            deviceProperties:
                              description: deviceProperties are the properties of
                                the disk device.
                              properties:
                                adapterType:
                                  description: |-
                                    adapterType is the adapter type of the disk address.
                                    If the deviceType is "Disk", the valid adapterType can be "SCSI", "IDE", "PCI", "SATA" or "SPAPR".
                                    If the deviceType is "CDRom", the valid adapterType can be "IDE" or "SATA".
                                  enum:
                                  - SCSI
                                  - IDE
                                  - PCI
                                  - SATA
                                  - SPAPR
                                  type: string
                                deviceIndex:
                                  default: 0
                                  description: |-
                                    deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0.
                                    For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should
                                    start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0
                                    and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE,
                                    the deviceIndex should start from 1.
                                  format: int32
                                  minimum: 0
                                  type: integer
                                deviceType:
                                  default: Disk
                                  description: |-
                                    deviceType specifies the disk device type.
                                    The valid values are "Disk" and "CDRom", and the default is "Disk".
                                  enum:
                                  - Disk
                                  - CDRom
                                  type: string
                              required:
                              - adapterType
                              - deviceIndex
                              - deviceType
                              type: object
                            diskSize:
                              anyOf:
                              - type: integer
                              - type: string
                              description: |-
                                diskSize is size (in Quantity format) of the disk to attach to the VM.
                                See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation.
                                The minimum diskSize is 1GB.
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            storageConfig:
                              description: storageConfig are the storage configuration
                                parameters of the VM disks.
                              properties:
                                diskMode:
                                  allOf:
                                  - enum:
                                    - Standard
                                    - Flash
                                  - enum:
                                    - Standard
                                    - Flash
                                  default: Standard
                                  description: |-
                                    diskMode specifies the disk mode.
                                    The valid values are Standard and Flash, and the default is Standard.
                                  type: string
                                storageContainer:
                                  description: storageContainer refers to the storage_container
                                    used by the VM disk.
                                  properties:
                                    name:
                                      description: Name is the name of the storage
                                        container resource in the Prism Element.
                                      type: string
                                    referenceName:
                                      description: ReferenceName is the identifier
                                        of the storage resource configured in the
                                        FailureDomain.
                                      type: string
                                    uuid:
                                      description: UUID is the UUID of the storage
                                        container resource in the Prism Element.
                                      type: string
                                  required:
                                  - uuid
                                  type: object
                              required:
                              - diskMode
                              type: object
                          required:
                          - diskSize
                          type: object
                        type: array
                        x-kubernetes-list-type: set
                      failureDomains:
                        description: |-
                          FailureDomains optionally configures a list of failure domain names
                          that will be applied to the MachinePool
                        items:
                          type: string
                        type: array
                        x-kubernetes-list-type: set
                      gpus:
                        description: GPUs is a list of GPU devices to attach to the
                          machine's VM.
                        items:
                          description: NutanixGPU holds the identity of a Nutanix
                            GPU resource in the Prism Central
                          properties:
                            deviceID:
                              description: deviceID is the GPU device ID with the
                                integer value.
                              format: int32
                              type: integer
                            name:
                              description: name is the GPU device name
                              type: string
                            type:
                              description: |-
                                type is the identifier type of the GPU device.
                                Valid values are Name and DeviceID.
                              enum:
                              - Name
                              - DeviceID
                              type: string
                          required:
                          - type
                          type: object
                          x-kubernetes-validations:
                          - message: deviceID configuration is required when type
                              is DeviceID, and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''DeviceID'' ?  has(self.deviceID)
                              : !has(self.deviceID)'
                          - message: name configuration is required when type is Name,
                              and forbidden otherwise
                            rule: 'has(self.type) && self.type == ''Name'' ?  has(self.name)
                              : !has(self.name)'
                        type: array
                        x-kubernetes-list-type: set
                      memoryMiB:
                        description: Memory is the size of a VM's memory in MiB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGiB:
                            description: DiskSizeGiB defines the size of disk in GiB.
                            format: int64
                            type: integer
                        type: object
                      project:
                        description: Project optionally identifies a Prism project
                          for the Machine's VM to associate with.
                        properties:
                          name:
                            description: name is the resource name in the PC
                            type: string
                          type:
                            description: type is the identifier type to use for this
                              resource.
                            enum:
                            - uuid
                            - name
                            type: string
                          uuid:
                            description: uuid is the UUID of the resource in the PC.
                            type: string
                        required:
                        - type
                        type: object
                    type: object
                  dnsRecordsType:
                    description: |-
                      dnsRecordsType determines whether records for api, api-int, and ingress
                      are provided by the internal DNS service or externally.
                      Allowed values are `Internal`, `External`, and omitted.
                      When set to `Internal`, records are provided by the internal infrastructure and
                      no additional user configuration is required for the cluster to function.
                      When set to `External`, records are not provided by the internal infrastructure
                      and must be configured by the user on a DNS server outside the cluster.
                      Cluster nodes must use this external server for their upstream DNS requests.
                      This value may only be set when loadBalancer.type is set to UserManaged.
                      When omitted, this means the user has no opinion and the platform is left
                      to choose reasonable defaults. These defaults are subject to change over time.
                      The current default is `Internal`.
                    enum:
                    - Internal
                    - External
                    type: string
                  failureDomains:
                    description: FailureDomains configures failure domains for the
                      Nutanix platform.
                    items:
                      description: FailureDomain configures failure domain information
                        for the Nutanix platform.
                      properties:
                        dataSourceImages:
                          description: DataSourceImages identifies the datasource
                            images in the Prism Element.
                          items:
                            description: StorageResourceReference holds reference
                              information of a storage resource (storage container,
                              data source image, etc.)
                            properties:
                              name:
                                description: Name is the name of the storage container
                                  resource in the Prism Element.
                                type: string
                              referenceName:
                                description: ReferenceName is the identifier of the
                                  storage resource configured in the FailureDomain.
                                type: string
                              uuid:
                                description: UUID is the UUID of the storage container
                                  resource in the Prism Element.
                                type: string
                            required:
                            - uuid
                            type: object
                          type: array
                        name:
                          description: Name defines the unique name of a failure domain.
                          maxLength: 64
                          minLength: 1
                          pattern: ^[0-9A-Za-z_.-@/]+$
                          type: string
                        prismElement:
                          description: |-
                            prismElement holds the identification (name, uuid) and the optional endpoint address and port of the Nutanix Prism Element.
                            When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
                            Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
                            proxy spec.noProxy list.
                          properties:
                            endpoint:
                              description: Endpoint holds the address and port of
                                the Prism Element
                              properties:
                                address:
                                  description: address is the endpoint address (DNS
                                    name or IP address) of the Nutanix Prism Central
                                    or Element (cluster)
                                  type: string
                                port:
                                  description: port is the port number to access the
                                    Nutanix Prism Central or Element (cluster)
                                  format: int32
                                  type: integer
                              required:
                              - address
                              - port
                              type: object
                            name:
                              description: Name is prism endpoint Name
                              type: string
                            uuid:
                              description: UUID is the UUID of the Prism Element (cluster)
                              type: string
                          required:
                          - uuid
                          type: object
                        storageContainers:
                          description: StorageContainers identifies the storage containers
                            in the Prism Element.
                          items:
                            description: StorageResourceReference holds reference
                              information of a storage resource (storage container,
                              data source image, etc.)
                            properties:
                              name:
                                description: Name is the name of the storage container
                                  resource in the Prism Element.
                                type: string
                              referenceName:
                                description: ReferenceName is the identifier of the
                                  storage resource configured in the FailureDomain.
                                type: string
                              uuid:
                                description: UUID is the UUID of the storage container
                                  resource in the Prism Element.
                                type: string
                            required:
                            - uuid
                            type: object
                          type: array
                        subnetUUIDs:
                          description: |-
                            SubnetUUIDs identifies the network subnets of the Prism Element.
                            Currently we only support one subnet for a failure domain.
                          items:
                            type: string
                          minItems: 1
                          type: array
                          x-kubernetes-list-type: set
                      required:
                      - name
                      - prismElement
                      - subnetUUIDs
                      type: object
                    type: array
                  ingressVIP:
                    description: |-
                      DeprecatedIngressVIP is the virtual IP address for ingress
                      Deprecated: use IngressVIPs
                    type: string
                  ingressVIPs:
                    description: |-
                      IngressVIPs contains the VIP(s) for ingress. In dual stack clusters
                      it contains an IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  loadBalancer:
                    description: |-
                      LoadBalancer defines how the load balancer used by the cluster is configured.
                      LoadBalancer is available in TechPreview.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on Nutanix platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                  preloadedOSImageName:
                    description: |-
                      PreloadedOSImageName uses the named preloaded RHCOS image from PC/PE,
                      instead of create and upload a new image for each cluster.
                    type: string
                  prismAPICallTimeout:
                    description: |-
                      PrismAPICallTimeout sets the timeout (in minutes) for the prism-api calls.
                      If not configured, the default value of 10 minutes will be used as the prism-api call timeout.
                    type: integer
                  prismCentral:
                    description: |-
                      PrismCentral is the endpoint (address and port) and credentials to
                      connect to the Prism Central.
                      This serves as the default Prism-Central.
                    properties:
                      endpoint:
                        description: Endpoint holds the address and port of the Prism
                          Central
                        properties:
                          address:
                            description: address is the endpoint address (DNS name
                              or IP address) of the Nutanix Prism Central or Element
                              (cluster)
                            type: string
                          port:
                            description: port is the port number to access the Nutanix
                              Prism Central or Element (cluster)
                            format: int32
                            type: integer
                        required:
                        - address
                        - port
                        type: object
                      password:
                        description: Password is the password for the user to connect
                          to the Prism Central
                        type: string
                      username:
                        description: Username is the name of the user to connect to
                          the Prism Central
                        type: string
                    required:
                    - endpoint
                    - password
                    - username
                    type: object
                  prismElements:
                    description: |-
                      PrismElements holds a list of Prism Elements (clusters). A Prism Element encompasses all Nutanix resources (VMs, subnets, etc.)
                      used to host the OpenShift cluster. Currently only a single Prism Element may be defined.
                      This serves as the default Prism-Element.
                    items:
                      description: PrismElement holds the uuid, endpoint of the Prism
                        Element (cluster)
                      properties:
                        endpoint:
                          description: Endpoint holds the address and port of the
                            Prism Element
                          properties:
                            address:
                              description: address is the endpoint address (DNS name
                                or IP address) of the Nutanix Prism Central or Element
                                (cluster)
                              type: string
                            port:
                              description: port is the port number to access the Nutanix
                                Prism Central or Element (cluster)
                              format: int32
                              type: integer
                          required:
                          - address
                          - port
                          type: object
                        name:
                          description: Name is prism endpoint Name
                          type: string
                        uuid:
                          description: UUID is the UUID of the Prism Element (cluster)
                          type: string
                      required:
                      - uuid
                      type: object
                    type: array
                  subnetUUIDs:
                    description: |-
                      SubnetUUIDs identifies the network subnets to be used by the cluster.
                      Currently we only support one subnet for an OpenShift cluster.
                    items:
                      type: string
                    type: array
                required:
                - prismCentral
                - prismElements
                - subnetUUIDs
                type: object
              openstack:
                description: OpenStack is the configuration used when installing on
                  OpenStack.
                properties:
                  apiFloatingIP:
                    description: |-
                      APIFloatingIP is the IP address of an available floating IP in your OpenStack cluster
                      to associate with the OpenShift API load balancer.
                    type: string
                  apiVIP:
                    description: |-
                      DeprecatedAPIVIP is the static IP on the nodes subnet that the api port for openshift will be assigned
                      Default: will be set to the 5 on the first entry in the machineNetwork CIDR
                      Deprecated: Use APIVIPs
                    format: ip
                    type: string
                  apiVIPs:
                    description: |-
                      APIVIPs contains the VIP(s) on the nodes subnet that the api port for
                      openshift will be assigned. In dual stack clusters it contains an IPv4
                      and IPv6 address, otherwise only one VIP
                      Default: will be set to the 5 on the first entry in the machineNetwork
                      CIDR
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  cloud:
                    description: Cloud is the name of OpenStack cloud to use from
                      clouds.yaml.
                    type: string
                  clusterOSImage:
                    description: |-
                      ClusterOSImage is either a URL with `http(s)` or `file` scheme to override
                      the default OS image for cluster nodes, or an existing Glance image name.
                    type: string
                  clusterOSImageProperties:
                    additionalProperties:
                      type: string
                    description: |-
                      ClusterOSImageProperties is a list of properties to be added to the metadata of the uploaded Glance ClusterOSImage.
                      Default: the default is to not set any properties.
                    type: object
                  computeFlavor:
                    description: |-
                      DeprecatedFlavorName is the name of the flavor to use for instances in this cluster.
                      Deprecated: use FlavorName in DefaultMachinePlatform to define default flavor.
                    type: string
                  controlPlanePort:
                    description: |-
                      ControlPlanePort contains details of the network attached to the control plane port, with the network either containing one openstack
                      subnet for IPv4 or two openstack subnets for dualstack clusters. Providing this configuration will prevent OpenShift from managing
                      or updating this network and its subnets. The network and its subnets will be used during creation of all nodes.
                    properties:
                      fixedIPs:
                        description: Specify subnets of the network where control
                          plane port will be discovered.
                        items:
                          description: FixedIP identifies a subnet defined by a subnet
                            filter.
                          properties:
                            subnet:
                              description: SubnetFilter defines a subnet by ID and/or
                                name.
                              properties:
                                id:
                                  type: string
                                name:
                                  type: string
                              type: object
                          required:
                          - subnet
                          type: object
                        type: array
                      network:
                        description: |-
                          Network is a query for an openstack network that the port will be discovered on.
                          This will fail if the query returns more than one network.
                        properties:
                          id:
                            type: string
                          name:
                            type: string
                        type: object
                    required:
                    - fixedIPs
                    type: object
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on OpenStack for machine pools which do not define their own
                      platform configuration.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  dnsRecordsType:
                    description: |-
                      dnsRecordsType determines whether records for api, api-int, and ingress
                      are provided by the internal DNS service or externally.
                      Allowed values are `Internal`, `External`, and omitted.
                      When set to `Internal`, records are provided by the internal infrastructure and
                      no additional user configuration is required for the cluster to function.
                      When set to `External`, records are not provided by the internal infrastructure
                      and must be configured by the user on a DNS server outside the cluster.
                      Cluster nodes must use this external server for their upstream DNS requests.
                      This value may only be set when loadBalancer.type is set to UserManaged.
                      When omitted, this means the user has no opinion and the platform is left
                      to choose reasonable defaults. These defaults are subject to change over time.
                      The current default is `Internal`.
                    enum:
                    - Internal
                    - External
                    type: string
                  externalDNS:
                    description: |-
                      ExternalDNS holds the IP addresses of dns servers that will
                      be added to the dns resolution of all instances in the cluster.
                    items:
                      type: string
                    type: array
                  externalNetwork:
                    description: ExternalNetwork is name of the external network in
                      your OpenStack cluster.
                    type: string
                  ingressFloatingIP:
                    description: |-
                      IngressFloatingIP is the ID of an available floating IP in your OpenStack cluster
                      that will be associated with the OpenShift ingress port
                    type: string
                  ingressVIP:
                    description: |-
                      DeprecatedIngressVIP is the static IP on the nodes subnet that the apps port for openshift will be assigned
                      Default: will be set to the 7 on the first entry in the machineNetwork CIDR
                      Deprecated: Use IngressVIPs
                    format: ip
                    type: string
                  ingressVIPs:
                    description: |-
                      IngressVIPs contains the VIP(s) on the nodes subnet that the apps port
                      for openshift will be assigned. In dual stack clusters it contains an
                      IPv4 and IPv6 address, otherwise only one VIP
                      Default: will be set to the 7 on the first entry in the machineNetwork
                      CIDR
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  lbFloatingIP:
                    description: |-
                      LbFloatingIP is the IP address of an available floating IP in your OpenStack cluster
                      to associate with the OpenShift load balancer.
                      Deprecated: this value has been renamed to apiFloatingIP.
                    type: string
                  loadBalancer:
                    description: LoadBalancer defines how the load balancer used by
                      the cluster is configured.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on OpenStack platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                  machinesSubnet:
                    description: |-
                      DeprecatedMachinesSubnet is a string of the UUIDv4 of an openstack subnet. This subnet will be used by all nodes created by the installer.
                      By setting this, the installer will no longer create a network and subnet.
                      The subnet and network specified in MachinesSubnet will not be deleted or modified by the installer.
                      Deprecated: Use ControlPlanePort
                    type: string
                  octaviaSupport:
                    description: |-
                      OctaviaSupport holds a `0` or `1` value that indicates whether your OpenStack
                      cluster supports Octavia Loadbalancing.
                      Deprecated: this value is set by the installer automatically.
                    type: string
                  region:
                    description: |-
                      Region specifies the OpenStack region where the cluster will be created.
                      Deprecated: this value is not used by the installer.
                    type: string
                  trunkSupport:
                    description: |-
                      TrunkSupport holds a `0` or `1` value that indicates whether or not to use trunk ports
                      in your OpenShift cluster.
                      Deprecated: the machine manifest should be used to specify that trunk should be used.
                    type: string
                required:
                - cloud
                type: object
              ovirt:
                description: Ovirt is the configuration used when installing on oVirt.
                properties:
                  affinityGroups:
                    description: AffinityGroups contains the RHV affinity groups that
                      the installer will create.
                    items:
                      description: AffinityGroup defines the affinity group that the
                        installer will create
                      properties:
                        description:
                          description: Description of the affinity group
                          type: string
                        enforcing:
                          description: Enforcing whether to create a hard affinity
                            rule, default is false
                          type: boolean
                        name:
                          description: Name name of the affinity group
                          type: string
                        priority:
                          description: Priority of the affinity group, needs to be
                            between 1 (lowest) - 5 (highest)
                          type: integer
                      required:
                      - name
                      - priority
                      type: object
                    type: array
                  api_vip:
                    description: |-
                      DeprecatedAPIVIP is an IP which will be served by bootstrap and then pivoted masters, using keepalived
                      Deprecated: Use APIVIPs
                    format: ip
                    type: string
                  api_vips:
                    description: |-
                      APIVIPs contains the VIP(s) which will be served by bootstrap and then
                      pivoted masters, using keepalived. In dual stack clusters it contains an
                      IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on ovirt for machine pools which do not define their
                      own platform configuration.
                      Default will set the image field to the latest RHCOS image.
                    properties:
                      affinityGroupsNames:
                        description: |-
                          AffinityGroupsNames contains a list of oVirt affinity group names that the newly created machines will join.
                          The affinity groups should exist on the oVirt cluster or created by the OpenShift installer.
                        items:
                          type: string
                        type: array
                      autoPinningPolicy:
                        description: |-
                          AutoPinningPolicy defines the policy to automatically set the CPU
                          and NUMA including pinning to the host for the instance.
                          When the field is omitted the default will be "none".
                        enum:
                        - none
                        - resize_and_pin
                        type: string
                      clone:
                        description: |-
                          Clone makes sure that the disks are cloned from the template and are not linked.
                          Defaults to true for high performance and server VM types, false for desktop types.

                          Note: this option is not documented in the OpenShift documentation. This is intentional as it has sane defaults
                          that shouldn't be changed unless needed for debugging or resolving issues in cooperation with Red Hat support.
                        type: boolean
                      cpu:
                        description: CPU defines the VM CPU.
                        properties:
                          cores:
                            description: |-
                              Cores is the number of cores per socket.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          sockets:
                            description: |-
                              Sockets is the number of sockets for a VM.
                              Total CPUs is (Sockets * Cores)
                            format: int32
                            type: integer
                          threads:
                            description: Threads is the number of CPU threads.
                            format: int32
                            type: integer
                        required:
                        - cores
                        - sockets
                        - threads
                        type: object
                      format:
                        description: |-
                          Format is the disk format that the disks are in. Can be "cow" or "raw". "raw" disables several features that
                          may be needed, such as incremental backups.
                        enum:
                        - ""
                        - raw
                        - cow
                        type: string
                      hugepages:
                        description: Hugepages is the size of a VM's hugepages to
                          use in KiBs.
                        enum:
                        - 2048
                        - 1048576
                        format: int32
                        type: integer
                      instanceTypeID:
                        description: |-
                          InstanceTypeID defines the VM instance type and overrides
                          the hardware parameters of the created VM, including cpu and memory.
                          If InstanceTypeID is passed, all memory and cpu variables will be ignored.
                        type: string
                      memoryMB:
                        description: MemoryMB is the size of a VM's memory in MiBs.
                        format: int32
                        type: integer
                      osDisk:
                        description: OSDisk is the the root disk of the node.
                        properties:
                          sizeGB:
                            description: SizeGB size of the bootable disk in GiB.
                            format: int64
                            type: integer
                        required:
                        - sizeGB
                        type: object
                      sparse:
                        description: Sparse indicates that sparse provisioning should
                          be used and disks should be not preallocated.
                        type: boolean
                      vmType:
                        description: VMType defines the workload type of the VM.
                        enum:
                        - ""
                        - desktop
                        - server
                        - high_performance
                        type: string
                    type: object
                  ingress_vip:
                    description: |-
                      IngressIP is an external IP which routes to the default ingress controller.
                      The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
                      Deprecated: Use IngressVIPs
                    format: ip
                    type: string
                  ingress_vips:
                    description: |-
                      IngressVIPs are external IP(s) which route to the default ingress
                      controller. The VIPs are suitable targets of wildcard DNS records used to
                      resolve default route host names. In dual stack clusters it contains an
                      IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  loadBalancer:
                    description: |-
                      LoadBalancer defines how the load balancer used by the cluster is configured.
                      LoadBalancer is available in TechPreview.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on Ovirt platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                  ovirt_cluster_id:
                    description: The target cluster under which all VMs will run
                    type: string
                  ovirt_network_name:
                    description: |-
                      NetworkName is the target network of all the network interfaces of the nodes.
                      When no ovirt_network_name is provided it defaults to `ovirtmgmt` network, which is a default network for every ovirt cluster.
                    type: string
                  ovirt_storage_domain_id:
                    description: The target storage domain under which all VM disk
                      would be created.
                    type: string
                  vnicProfileID:
                    description: |-
                      VNICProfileID defines the VNIC profile ID to use the the VM network interfaces.
                      When no vnicProfileID is provided it will be set to the profile of the network. If there are multiple
                      profiles for the network, the installer requires you to explicitly set the vnicProfileID.
                    type: string
                required:
                - ovirt_cluster_id
                - ovirt_storage_domain_id
                type: object
              powervc:
                description: PowerVC is the configuration used when installing on
                  Power VC.
                properties:
                  apiFloatingIP:
                    description: |-
                      APIFloatingIP is the IP address of an available floating IP in your OpenStack cluster
                      to associate with the OpenShift API load balancer.
                    type: string
                  apiVIPs:
                    description: |-
                      APIVIPs contains the VIP(s) on the nodes subnet that the api port for
                      openshift will be assigned. In dual stack clusters it contains an IPv4
                      and IPv6 address, otherwise only one VIP
                      Default: will be set to the 5 on the first entry in the machineNetwork
                      CIDR
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                    uniqueItems: true
                  cloud:
                    description: Cloud is the name of OpenStack cloud to use from
                      clouds.yaml.
                    type: string
                  clusterOSImage:
                    description: |-
                      ClusterOSImage is either a URL with `http(s)` or `file` scheme to override
                      the default OS image for cluster nodes, or an existing Glance image name.
                    type: string
                  clusterOSImageProperties:
                    additionalProperties:
                      type: string
                    description: |-
                      ClusterOSImageProperties is a list of properties to be added to the metadata of the uploaded Glance ClusterOSImage.
                      Default: the default is to not set any properties.
                    type: object
                  controlPlanePort:
                    description: |-
                      ControlPlanePort contains details of the network attached to the control plane port, with the network either containing one openstack
                      subnet for IPv4 or two openstack subnets for dualstack clusters. Providing this configuration will prevent OpenShift from managing
                      or updating this network and its subnets. The network and its subnets will be used during creation of all nodes.
                    properties:
                      fixedIPs:
                        description: Specify subnets of the network where control
                          plane port will be discovered.
                        items:
                          description: FixedIP identifies a subnet defined by a subnet
                            filter.
                          properties:
                            subnet:
                              description: SubnetFilter defines a subnet by ID and/or
                                name.
                              properties:
                                id:
                                  type: string
                                name:
                                  type: string
                              type: object
                          required:
                          - subnet
                          type: object
                        type: array
                      network:
                        description: |-
                          Network is a query for an openstack network that the port will be discovered on.
                          This will fail if the query returns more than one network.
                        properties:
                          id:
                            type: string
                          name:
                            type: string
                        type: object
                    required:
                    - fixedIPs
                    type: object
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on OpenStack for machine pools which do not define their own
                      platform configuration.
                    properties:
                      additionalNetworkIDs:
                        description: |-
                          AdditionalNetworkIDs contains IDs of additional networks for machines,
                          where each ID is presented in UUID v4 format.
                          Allowed address pairs won't be created for the additional networks.
                        items:
                          type: string
                        type: array
                      additionalSecurityGroupIDs:
                        description: |-
                          AdditionalSecurityGroupIDs contains IDs of additional security groups for machines,
                          where each ID is presented in UUID v4 format.
                        items:
                          type: string
                        type: array
                      rootVolume:
                        description: |-
                          RootVolume defines the root volume for instances in the machine pool.
                          The instances use ephemeral disks if not set.
                        properties:
                          size:
                            description: |-
                              Size defines the size of the volume in gibibytes (GiB).
                              Required
                            type: integer
                          type:
                            description: |-
                              Type defines the type of the volume.
                              Deprecated: Use Types instead.
                            type: string
                          types:
                            description: |-
                              Types is the list of the volume types of the root volumes.
                              This is mutually exclusive with Type.
                            items:
                              type: string
                            type: array
                          zones:
                            description: |-
                              Zones is the list of availability zones where the root volumes should be deployed.
                              If no zones are provided, all instances will be deployed on OpenStack Cinder default availability zone
                            items:
                              type: string
                            type: array
                        required:
                        - size
                        - types
                        type: object
                      serverGroupPolicy:
                        description: |-
                          ServerGroupPolicy will be used to create the Server Group that will contain all the machines of this MachinePool.
                          Defaults to "soft-anti-affinity".
                        enum:
                        - ""
                        - affinity
                        - soft-affinity
                        - anti-affinity
                        - soft-anti-affinity
                        type: string
                      type:
                        description: |-
                          FlavorName defines the OpenStack Nova flavor.
                          eg. m1.large
                        type: string
                      zones:
                        description: |-
                          Zones is the list of availability zones where the instances should be deployed.
                          If no zones are provided, all instances will be deployed on OpenStack Nova default availability zone
                        items:
                          type: string
                        type: array
                    required:
                    - type
                    type: object
                  externalDNS:
                    description: |-
                      ExternalDNS holds the IP addresses of dns servers that will
                      be added to the dns resolution of all instances in the cluster.
                    items:
                      type: string
                    type: array
                  externalNetwork:
                    description: ExternalNetwork is name of the external network in
                      your OpenStack cluster.
                    type: string
                  imageName:
                    type: string
                  ingressFloatingIP:
                    description: |-
                      IngressFloatingIP is the ID of an available floating IP in your OpenStack cluster
                      that will be associated with the OpenShift ingress port
                    type: string
                  ingressVIPs:
                    description: |-
                      IngressVIPs contains the VIP(s) on the nodes subnet that the apps port
                      for openshift will be assigned. In dual stack clusters it contains an
                      IPv4 and IPv6 address, otherwise only one VIP
                      Default: will be set to the 7 on the first entry in the machineNetwork
                      CIDR
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                    uniqueItems: true
                  loadBalancer:
                    description: LoadBalancer defines how the load balancer used by
                      the cluster is configured.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on OpenStack platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                required:
                - cloud
                type: object
              powervs:
                description: PowerVS is the configuration used when installing on
                  Power VS.
                properties:
                  clusterOSImage:
                    description: |-
                      ClusterOSImage is a pre-created Power VS boot image that overrides the
                      default image for cluster nodes.
                    type: string
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on Power VS for machine pools which do not define their own
                      platform configuration.
                    properties:
                      memoryGiB:
                        description: memoryGiB is the size of a virtual machine's
                          memory, in GiB.
                        format: int32
                        type: integer
                      procType:
                        description: |-
                          ProcType defines the processor sharing model for the instance.
                          Must be one of {Capped, Dedicated, Shared}.
                        enum:
                        - Dedicated
                        - Shared
                        - Capped
                        - ""
                        type: string
                      processors:
                        anyOf:
                        - type: integer
                        - type: string
                        description: Processors defines the processing units for the
                          instance.
                        x-kubernetes-int-or-string: true
                      smtLevel:
                        description: SMTLevel specifies the level of SMT to set the
                          control plane and worker nodes to.
                        type: string
                      sysType:
                        description: SysType defines the system type for instance.
                        type: string
                      volumeIDs:
                        description: VolumeIDs is the list of volumes attached to
                          the instance.
                        items:
                          type: string
                        type: array
                    type: object
                  powervsResourceGroup:
                    description: PowerVSResourceGroup is the resource group in which
                      Power VS resources will be created.
                    type: string
                  region:
                    description: Region specifies the IBM Cloud colo region where
                      the cluster will be created.
                    type: string
                  serviceEndpoints:
                    description: |-
                      ServiceEndpoints is a list which contains custom endpoints to override default
                      service endpoints of IBM Cloud Services.
                      There must only be one ServiceEndpoint for a service (no duplicates).
                    items:
                      description: |-
                        PowervsServiceEndpoint stores the configuration of a custom url to
                        override existing defaults of PowerVS Services.
                      properties:
                        name:
                          description: |-
                            name is the name of the Power VS service.
                            Few of the services are
                            IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
                            ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
                            Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
                          enum:
                          - CIS
                          - COS
                          - COSConfig
                          - DNSServices
                          - GlobalCatalog
                          - GlobalSearch
                          - GlobalTagging
                          - HyperProtect
                          - IAM
                          - KeyProtect
                          - Power
                          - ResourceController
                          - ResourceManager
                          - VPC
                          type: string
                        url:
                          description: |-
                            url is fully qualified URI with scheme https, that overrides the default generated
                            endpoint for a client.
                            This must be provided and cannot be empty.
                          format: uri
                          pattern: ^https://
                          type: string
                      required:
                      - name
                      - url
                      type: object
                    type: array
                  serviceInstanceGUID:
                    description: |-
                      ServiceInstanceGUID is the GUID of the Power IAAS instance created from the IBM Cloud Catalog
                      before the cluster is completed.  Leave unset to allow the installer to create a service
                      instance during cluster creation.
                    type: string
                  tgName:
                    description: tgName is the name or id of a pre-created TransitGateway
                      inside IBM Cloud.
                    type: string
                  userID:
                    description: UserID is the login for the user's IBM Cloud account.
                    type: string
                  vpcName:
                    description: vpcName is the name or id of a pre-created VPC inside
                      IBM Cloud.
                    type: string
                  vpcRegion:
                    description: |-
                      VPCRegion specifies the IBM Cloud region in which to create VPC resources.
                      Leave unset to allow installer to select the closest VPC region.
                    type: string
                  vpcSubnets:
                    description: |-
                      VPCSubnets specifies existing subnets (by ID) where cluster
                      resources will be created.  Leave unset to have the installer
                      create subnets in a new VPC on your behalf.
                    items:
                      type: string
                    type: array
                  zone:
                    description: |-
                      Zone specifies the IBM Cloud colo region where the cluster will be created.
                      At this time, only single-zone clusters are supported.
                    type: string
                required:
                - powervsResourceGroup
                - userID
                - zone
                type: object
              vsphere:
                description: VSphere is the configuration used when installing on
                  vSphere.
                properties:
                  apiVIP:
                    description: |-
                      DeprecatedAPIVIP is the virtual IP address for the api endpoint
                      Deprecated: Use APIVIPs
                    type: string
                  apiVIPs:
                    description: |-
                      APIVIPs contains the VIP(s) for the api endpoint. In dual stack clusters
                      it contains an IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  cluster:
                    description: |-
                      Cluster is the name of the cluster virtual machines will be cloned into.
                      Deprecated: Use FailureDomains.Topology.Cluster
                    type: string
                  clusterOSImage:
                    description: ClusterOSImage overrides the url provided in rhcos.json
                      to download the RHCOS OVA
                    type: string
                  datacenter:
                    description: |-
                      Datacenter is the name of the datacenter to use in the vCenter.
                      Deprecated: Use FailureDomains.Topology.Datacenter
                    type: string
                  defaultDatastore:
                    description: |-
                      DefaultDatastore is the default datastore to use for provisioning volumes.
                      Deprecated: Use FailureDomains.Topology.Datastore
                    type: string
                  defaultMachinePlatform:
                    description: |-
                      DefaultMachinePlatform is the default configuration used when
                      installing on VSphere for machine pools which do not define their own
                      platform configuration.
                    properties:
                      coresPerSocket:
                        description: |-
                          NumCoresPerSocket is the number of cores per socket in a vm. The number
                          of vCPUs on the vm will be NumCPUs/NumCoresPerSocket.
                        format: int32
                        type: integer
                      cpus:
                        description: NumCPUs is the total number of virtual processor
                          cores to assign a vm.
                        format: int32
                        type: integer
                      dataDisks:
                        description: DataDisks are additional disks to add to the
                          VM that are not part of the VM's OVA template.
                        items:
                          description: DataDisk defines a data disk to add to the
                            VM that is not part of the VM OVA template.
                          properties:
                            name:
                              description: |-
                                name is used to identify the disk definition. name is required needs to be unique so that it can be used to
                                clearly identify purpose of the disk.
                              example: images_1
                              maxLength: 80
                              pattern: ^[a-zA-Z0-9]([-_a-zA-Z0-9]*[a-zA-Z0-9])?$
                              type: string
                            provisioningMode:
                              description: |-
                                provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk.
                                Allowed values are "Thin", "Thick", "EagerlyZeroed", and omitted.
                                When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space.
                                When set to Thick, the full disk size will be allocated when disk is created.
                                When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats.
                                When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.
                              enum:
                              - Thin
                              - Thick
                              - EagerlyZeroed
                              type: string
                            sizeGiB:
                              description: |-
                                sizeGiB is the size of the disk in GiB.
                                The maximum supported size is 16384 GiB.
                              format: int32
                              maximum: 16384
                              minimum: 1
                              type: integer
                          required:
                          - name
                          - sizeGiB
                          type: object
                        maxItems: 29
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      memoryMB:
                        description: Memory is the size of a VM's memory in MB.
                        format: int64
                        type: integer
                      osDisk:
                        description: OSDisk defines the storage for instance.
                        properties:
                          diskSizeGB:
                            description: DiskSizeGB defines the size of disk in GB.
                            format: int32
                            type: integer
                        type: object
                      zones:
                        description: |-
                          Zones defines available zones
                          Zones is available in TechPreview.
                        items:
                          type: string
                        type: array
                    type: object
                  diskType:
                    description: |-
                      DiskType is the name of the disk provisioning type,
                      valid values are thin, thick, and eagerZeroedThick. When not
                      specified, it will be set according to the default storage policy
                      of vsphere.
                    enum:
                    - ""
                    - thin
                    - thick
                    - eagerZeroedThick
                    type: string
                  dnsRecordsType:
                    description: |-
                      dnsRecordsType determines whether records for api, api-int, and ingress
                      are provided by the internal DNS service or externally.
                      Allowed values are `Internal`, `External`, and omitted.
                      When set to `Internal`, records are provided by the internal infrastructure and
                      no additional user configuration is required for the cluster to function.
                      When set to `External`, records are not provided by the internal infrastructure
                      and must be configured by the user on a DNS server outside the cluster.
                      Cluster nodes must use this external server for their upstream DNS requests.
                      This value may only be set when loadBalancer.type is set to UserManaged.
                      When omitted, this means the user has no opinion and the platform is left
                      to choose reasonable defaults. These defaults are subject to change over time.
                      The current default is `Internal`.
                    enum:
                    - Internal
                    - External
                    type: string
                  failureDomains:
                    description: |-
                      FailureDomains holds the VSpherePlatformFailureDomainSpec which contains
                      the definition of region, zone and the vCenter topology.
                      If this is omitted failure domains (regions and zones) will not be used.
                    items:
                      description: |-
                        FailureDomain holds the region and zone failure domain and
                        the vCenter topology of that failure domain.
                      properties:
                        name:
                          description: |-
                            name defines the name of the FailureDomain
                            This name is arbitrary but will be used
                            in VSpherePlatformDeploymentZone for association.
                          maxLength: 256
                          minLength: 1
                          type: string
                        region:
                          description: |-
                            The region is the name of the tag in vCenter that is associated with the
                            tag category `openshift-region`. The region name must match the tag name
                            and must exist prior to installation. When the regionType is Datacenter
                            the tag must be attached to the toplogy.datacenter object in vCenter.
                            When the regionType is ComputeCluster the tag must be attached to the topology.computeCluster
                            object in vCenter.
                          type: string
                        regionType:
                          allOf:
                          - enum:
                            - HostGroup
                            - Datacenter
                            - ComputeCluster
                          - enum:
                            - Datacenter
                            - ComputeCluster
                          description: |-
                            regionType is the type of failure domain region, the current values are "Datacenter" and "ComputeCluster"
                            When regionType is Datacenter the zoneType must be ComputeCluster.
                            When regionType is ComputeCluster the zoneType must be HostGroup
                          type: string
                        server:
                          description: server is the fully-qualified domain name or
                            the IP address of the vCenter server.
                          maxLength: 255
                          minLength: 1
                          type: string
                        topology:
                          description: Topology describes a given failure domain using
                            vSphere constructs
                          properties:
                            computeCluster:
                              description: |-
                                computeCluster as the failure domain
                                This is required to be a path
                              maxLength: 2048
                              minLength: 1
                              type: string
                            datacenter:
                              description: |-
                                datacenter is the vCenter datacenter in which virtual machines will be located
                                and defined as the failure domain.
                              maxLength: 80
                              minLength: 1
                              type: string
                            datastore:
                              description: |-
                                datastore is the name or inventory path of the datastore in which the
                                virtual machine is created/located.
                              maxLength: 2048
                              minLength: 1
                              type: string
                            folder:
                              description: |-
                                folder is the inventory path of the folder in which the
                                virtual machine is created/located.
                              maxLength: 2048
                              minLength: 1
                              pattern: ^/.*?/vm/.*?
                              type: string
                            hostGroup:
                              description: |-
                                hostGroup is the name of the vm-host group of type host within vCenter for this failure domain.
                                hostGroup is limited to 80 characters.
                                This field is required when the ZoneType is HostGroup
                              maxLength: 80
                              type: string
                            networks:
                              description: networks is the list of networks within
                                this failure domain
                              items:
                                type: string
                              maxItems: 10
                              minItems: 1
                              type: array
                            resourcePool:
                              description: |-
                                resourcePool is the absolute path of the resource pool where virtual machines will be
                                created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
                              maxLength: 2048
                              minLength: 1
                              pattern: ^/.*?/host/.*?/Resources.*
                              type: string
                            tagIDs:
                              description: |-
                                tagIDs is an optional set of tags to add to an instance. Specified tagIDs
                                must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.
                              example: urn:vmomi:InventoryServiceTag:5736bf56-49f5-4667-b38c-b97e09dc9578:GLOBAL
                              items:
                                type: string
                              type: array
                            template:
                              description: |-
                                template is the inventory path of the virtual machine or template
                                that will be used for cloning.
                              maxLength: 2048
                              minLength: 1
                              pattern: ^/.*?/vm/.*?
                              type: string
                          required:
                          - computeCluster
                          - datacenter
                          - datastore
                          - networks
                          type: object
                        zone:
                          description: |-
                            The zone is the name of the tag in vCenter that is associated with
                            the tag category `openshift-zone`. The zone name must match the tag name
                            and must exist prior to installation. When zoneType is HostGroup the
                            ESXi hosts defined in the provided in the topology.hostGroup field must be tagged.
                            When the zoneType is ComputeCluster the tag must be attached to the topology.computeCluster
                            object in vCenter.
                          type: string
                        zoneType:
                          allOf:
                          - enum:
                            - HostGroup
                            - Datacenter
                            - ComputeCluster
                          - enum:
                            - ComputeCluster
                            - HostGroup
                          description: |-
                            When zoneType is ComputeCluster the regionType must be Datacenter
                            When zoneType is HostGroup the regionType must be ComputeCluster
                            If the zoneType is HostGroup topology.hostGroup must be defined and exist in vCenter
                            prior to installation.
                          type: string
                      required:
                      - name
                      - region
                      - server
                      - topology
                      - zone
                      type: object
                    type: array
                  folder:
                    description: |-
                      Folder is the absolute path of the folder that will be used and/or created for
                      virtual machines. The absolute path is of the form /<datacenter>/vm/<folder>/<subfolder>.
                      Deprecated: Use FailureDomains.Topology.Folder
                    pattern: ^/.*?/vm/.*?
                    type: string
                  hosts:
                    description: Hosts defines network configurations to be applied
                      by the installer. Hosts is available in TechPreview.
                    items:
                      description: Host defines host VMs to generate as part of the
                        installation.
                      properties:
                        failureDomain:
                          description: FailureDomain refers to the name of a FailureDomain
                            as described in https://github.com/openshift/enhancements/blob/master/enhancements/installer/vsphere-ipi-zonal.md
                          type: string
                        networkDevice:
                          description: NetworkDeviceSpec to be applied to the host
                          properties:
                            gateway:
                              description: |-
                                gateway is an IPv4 or IPv6 address which represents the subnet gateway,
                                for example, 192.168.1.1.
                              format: ipv6
                              type: string
                            ipAddrs:
                              description: |-
                                ipAddrs is a list of one or more IPv4 and/or IPv6 addresses and CIDR to assign to
                                this device, for example, 192.168.1.100/24. IP addresses provided via ipAddrs are
                                intended to allow explicit assignment of a machine's IP address.
                              example: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64
                              format: ipv6
                              items:
                                type: string
                              type: array
                            nameservers:
                              description: |-
                                nameservers is a list of IPv4 and/or IPv6 addresses used as DNS nameservers, for example,
                                8.8.8.8. a nameserver is not provided by a fulfilled IPAddressClaim. If DHCP is not the
                                source of IP addresses for this network device, nameservers should include a valid nameserver.
                              example: 8.8.8.8
                              format: ipv6
                              items:
                                type: string
                              type: array
                          required:
                          - ipAddrs
                          type: object
                        role:
                          description: Role defines the role of the node
                          enum:
                          - ""
                          - bootstrap
                          - control-plane
                          - compute
                          type: string
                      required:
                      - networkDevice
                      - role
                      type: object
                    type: array
                  ingressVIP:
                    description: |-
                      DeprecatedIngressVIP is the virtual IP address for ingress
                      Deprecated: Use IngressVIPs
                    type: string
                  ingressVIPs:
                    description: |-
                      IngressVIPs contains the VIP(s) for ingress. In dual stack clusters it
                      contains an IPv4 and IPv6 address, otherwise only one VIP
                    format: ip
                    items:
                      type: string
                    maxItems: 2
                    type: array
                  loadBalancer:
                    description: |-
                      LoadBalancer defines how the load balancer used by the cluster is configured.
                      LoadBalancer is available in TechPreview.
                    properties:
                      type:
                        default: OpenShiftManagedDefault
                        description: |-
                          type defines the type of load balancer used by the cluster on VSphere platform
                          which can be a user-managed or openshift-managed load balancer
                          that is to be used for the OpenShift API and Ingress endpoints.
                          When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
                          defined in the machine config operator will be deployed.
                          When set to UserManaged these static pods will not be deployed and it is expected that
                          the load balancer is configured out of band by the deployer.
                          When omitted, this means no opinion and the platform is left to choose a reasonable default.
                          The default value is OpenShiftManagedDefault.
                        enum:
                        - OpenShiftManagedDefault
                        - UserManaged
                        type: string
                        x-kubernetes-validations:
                        - message: type is immutable once set
                          rule: oldSelf == '' || self == oldSelf
                    type: object
                  network:
                    description: |-
                      Network specifies the name of the network to be used by the cluster.
                      Deprecated: Use FailureDomains.Topology.Network
                    type: string
                  nodeNetworking:
                    description: |-
                      nodeNetworking contains the definition of internal and external network constraints for
                      assigning the node's networking.
                      If this field is omitted, networking defaults to the legacy
                      address selection behavior which is to only support a single address and
                      return the first one found.
                    properties:
                      external:
                        description: external represents the network configuration
                          of the node that is externally routable.
                        properties:
                          excludeNetworkSubnetCidr:
                            description: |-
                              excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
                              the IP address from the VirtualMachine's VM for use in the status.addresses fields.
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          network:
                            description: |-
                              network VirtualMachine's VM Network names that will be used to when searching
                              for status.addresses fields. Note that if internal.networkSubnetCIDR and
                              external.networkSubnetCIDR are not set, then the vNIC associated to this network must
                              only have a single IP address assigned to it.
                              The available networks (port groups) can be listed using
                              `govc ls 'network/*'`
                            type: string
                          networkSubnetCidr:
                            description: |-
                              networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
                              that will be used in respective status.addresses fields.
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: set
                        type: object
                      internal:
                        description: internal represents the network configuration
                          of the node that is routable only within the cluster.
                        properties:
                          excludeNetworkSubnetCidr:
                            description: |-
                              excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
                              the IP address from the VirtualMachine's VM for use in the status.addresses fields.
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          network:
                            description: |-
                              network VirtualMachine's VM Network names that will be used to when searching
                              for status.addresses fields. Note that if internal.networkSubnetCIDR and
                              external.networkSubnetCIDR are not set, then the vNIC associated to this network must
                              only have a single IP address assigned to it.
                              The available networks (port groups) can be listed using
                              `govc ls 'network/*'`
                            type: string
                          networkSubnetCidr:
                            description: |-
                              networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
                              that will be used in respective status.addresses fields.
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: set
                        type: object
                    type: object
                  password:
                    description: |-
                      Password is the password for the user to use to connect to the vCenter.
                      Deprecated: Use VCenters.Password
                    type: string
                  resourcePool:
                    description: |-
                      ResourcePool is the absolute path of the resource pool where virtual machines will be
                      created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
                      Deprecated: Use FailureDomains.Topology.ResourcePool
                    type: string
                  username:
                    description: |-
                      Username is the name of the user to use to connect to the vCenter.
                      Deprecated: Use VCenters.Username
                    type: string
                  vCenter:
                    description: |-
                      VCenter is the domain name or IP address of the vCenter.
                      Deprecated: Use VCenters.Server
                    type: string
                  vcenters:
                    description: VCenters holds the connection details for services
                      to communicate with vCenter.
                    items:
                      description: |-
                        VCenter stores the vCenter connection fields
                        https://github.com/kubernetes/cloud-provider-vsphere/blob/master/pkg/common/config/types_yaml.go
                      properties:
                        datacenters:
                          description: Datacenter in which VMs are located.
                          items:
                            type: string
                          minItems: 1
                          type: array
                        password:
                          description: Password is the password for the user to use
                            to connect to the vCenter.
                          type: string
                        port:
                          default: 443
                          description: |-
                            port is the TCP port that will be used to communicate to
                            the vCenter endpoint. This is typically unchanged from
                            the default of HTTPS TCP/443.
                          format: int32
                          maximum: 32767
                          minimum: 1
                          type: integer
                        server:
                          description: server is the fully-qualified domain name or
                            the IP address of the vCenter server.
                          maxLength: 255
                          type: string
                        user:
                          description: Username is the username that will be used
                            to connect to vCenter
                          type: string
                      required:
                      - datacenters
                      - password
                      - server
                      - user
                      type: object
                    maxItems: 3
                    minItems: 1
                    type: array
                type: object
            type: object
          proxy:
            description: |-
              Proxy defines the proxy settings for the cluster.
              If unset, the cluster will not be configured to use a proxy.
            properties:
              httpProxy:
                description: HTTPProxy is the URL of the proxy for HTTP requests.
                type: string
              httpsProxy:
                description: HTTPSProxy is the URL of the proxy for HTTPS requests.
                type: string
              noProxy:
                description: NoProxy is a comma-separated list of domains and CIDRs
                  for which the proxy should not be used.
                type: string
            type: object
          publish:
            default: External
            description: |-
              Publish controls how the user facing endpoints of the cluster like the Kubernetes API, OpenShift routes etc. are exposed.
              A "Mixed" strategy only applies to the "azure" platform, and requires "operatorPublishingStrategy" to be configured.
              When no strategy is specified, the strategy is "External".
            enum:
            - ""
            - External
            - Internal
            - Mixed
            type: string
          pullSecret:
            description: PullSecret is the secret to use when pulling images.
            type: string
          sshKey:
            description: SSHKey is the public Secure Shell (SSH) key to provide access
              to instances.
            type: string
        required:
        - baseDomain
        - metadata
        - platform
        - pullSecret
        type: object
    served: true
    storage: true