Gardener

https://gardener.cloud/docs/
Admin
Gardener is a Kubernetes-native system for provisioning, managing, and scaling Kubernetes clusters...
Tokens:65,992
Snippets:636
Trust Score:9.8
Update:4 months ago
Show doc for...
Tokens:
Raw
### Example gardenctl configuration file

Source: https://gardener.cloud/docs/gardenctl

An example YAML configuration for gardenctl, specifying garden clusters with their identities and kubeconfig paths.

```yaml
gardens:
  - identity: landscape-dev # Unique identity of the garden cluster. See cluster-identity ConfigMap in kube-system namespace of the garden cluster
    kubeconfig: ~/relative/path/to/kubeconfig.yaml
# name: my-name # An alternative, unique garden name for targeting
# context: different-context # Overrides the current-context of the garden cluster kubeconfig
# patterns: ~ # List of regex patterns for pattern targeting
```

--------------------------------

### Install gardenctl-v2 using winget

Source: https://gardener.cloud/docs/gardenctl

Installs the latest version of gardenctl-v2 on Windows using winget.

```shell
# winget (Windows)
winget install -e --id Gardener.gardenctl
```

--------------------------------

### GCP Provider Extension Configuration Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-gcp/usage

Example configuration for the GCP provider extension, specifying the main operating zone.

```yaml
provider:
  type: gcp
  gcp:
    zone: "europe-west3-c"
```

--------------------------------

### Install gardenctl-v2 from GitHub Release (macOS)

Source: https://gardener.cloud/docs/gardenctl

Installs gardenctl-v2 from a GitHub release for macOS. This involves downloading the binary, making it executable, and moving it to the system's PATH.

```bash
# Example for macOS

# set operating system and architecture
os=darwin # choose between darwin, linux, windows
arch=arm64 # choose between amd64, arm64

# Get latest version. Alternatively set your desired version
version=$(curl -s https://raw.githubusercontent.com/gardener/gardenctl-v2/master/LATEST)

# Download gardenctl
curl -LO "https://github.com/gardener/gardenctl-v2/releases/download/${version}/gardenctl_v2_${os}_${arch}"

# Make the gardenctl binary executable
chmod +x "./gardenctl_v2_${os}_${arch}"

# Move the binary in to your PATH
sudo mv "./gardenctl_v2_${os}_${arch}" /usr/local/bin/gardenctl
```

--------------------------------

### Install gardenctl-v2 using Homebrew

Source: https://gardener.cloud/docs/gardenctl

Installs the latest version of gardenctl-v2 on macOS and Linux using Homebrew.

```shell
# Homebrew (macOS and Linux)
brew install gardener/tap/gardenctl-v2
```

--------------------------------

### Example Shoot Manifest (Two Availability Zones)

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/usage

A complete example of a Shoot manifest configured for the Alicloud provider across two availability zones. It highlights the configuration for worker distribution and encrypted system disks.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: johndoe-alicloud
  namespace: garden-dev
spec:
  cloudProfile:
    name: alicloud
  region: eu-central-1
  secretBindingName: core-alicloud
  provider:
    type: alicloud
    infrastructureConfig:
      apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
      networks:
        vpc:
          cidr: 10.250.0.0/16
        zones:
        - name: eu-central-1a
          workers: 10.250.0.0/26
        - name: eu-central-1b
          workers: 10.250.0.64/26
    controlPlaneConfig:
      apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
    workers:
    - name: worker-xoluy
      machine:
        type: ecs.sn2ne.large
      minimum: 2
      maximum: 4
      volume:
        size: 50Gi
        type: cloud_efficiency
        encrypted: true
      zones:
      - eu-central-1a
      - eu-central-1b
  networking:
    nodes: 10.250.0.0/16
    type: calico
  kubernetes:
    version: 1.32.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true
```

--------------------------------

### Custom Color Theme Configuration Example

Source: https://gardener.cloud/docs/dashboard/customization

This example demonstrates how to configure custom colors for the light theme in the Gardener Dashboard using the Helm chart. It shows the structure for defining primary, anchor, and other theme-specific colors.

```yaml
frontendConfig:
  themes:
    light:
      primary: "#1976D2"
      anchor: "#FF6F00"
      main-background: "#FFFFFF"
      main-navigation-title: "#333333"
      toolbar-background: "#F5F5F5"
      toolbar-title: "#333333"
      action-button: "#1976D2"
      info: "#2196F3"
      success: "#4CAF50"
      warning: "#FB8C00"
      error: "#F44336"
      unknown: "#9E9E9E"
```

--------------------------------

### Example Alicloud CloudProfile Manifest (Legacy Format)

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/operations

An example `CloudProfile` manifest for Alicloud using the legacy flat machine image mapping format, suitable when `spec.machineCapabilities` is not defined.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: CloudProfile
metadata:
  name: alicloud
spec:
  type: alicloud
  kubernetes:
    versions:
    - version: 1.32.0
    - version: 1.31.1
      expirationDate: "2026-03-31T23:59:59Z"
  machineImages:
  - name: coreos
    versions:
    - version: 2023.4.0
  machineTypes:
  - name: ecs.sn2ne.large
    cpu: "2"
    gpu: "0"
    memory: 8Gi
  volumeTypes:
  - name: cloud_efficiency
    class: standard
  - name: cloud_essd
    class: premium
  regions:
  - name: eu-central-1
    zones:
    - name: eu-central-1a
    - name: eu-central-1b
  providerConfig:
    apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
    kind: CloudProfileConfig
    machineImages:
    - name: coreos
      versions:
      - version: 2023.4.0
        regions:
        - name: eu-central-1
          id: coreos_2023_4_0_64_30G_alibase_20190319.vhd
```

--------------------------------

### CloudProfileConfig Example with Comments

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-stackit/cloudprovider

An example of the CloudProfileConfig with comments explaining various fields like machine images, storage classes, and DNS servers.

```yaml
providerConfig:
  # image mappings used for bastion and workers
  machineImages:
    - name: ubuntu
      versions:
        - version: "22.04"
          regions:
            - name: eu01
              # provider-specific image ID
              id: <image-id>
              architecture: amd64
  # rescan block devices after resize
  rescanBlockStorageOnResize: true
  # list of IPs of DNS servers used while creating subnets
  dnsServers:
    - 1.1.1.1
  # shoot storage classes
  storageClasses:
    - name: default
      default: true
      parameters:
        type: "storage_premium_perf4"
      provisioner: block-storage.csi.stackit.cloud
```

--------------------------------

### Example Shoot Manifest (One Availability Zone)

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/usage

A complete example of a Shoot manifest configured for the Alicloud provider in a single availability zone. It includes infrastructure, control plane, worker, and networking configurations.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: johndoe-alicloud
  namespace: garden-dev
spec:
  cloudProfile:
    name: alicloud
  region: eu-central-1
  secretBindingName: core-alicloud
  provider:
    type: alicloud
    infrastructureConfig:
      apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
      networks:
        vpc:
          cidr: 10.250.0.0/16
        zones:
        - name: eu-central-1a
          workers: 10.250.0.0/19
    controlPlaneConfig:
      apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
    workers:
    - name: worker-xoluy
      machine:
        type: ecs.sn2ne.large
      minimum: 2
      maximum: 2
      volume:
        size: 50Gi
        type: cloud_efficiency
      zones:
      - eu-central-1a
  networking:
    nodes: 10.250.0.0/16
    type: calico
  kubernetes:
    version: 1.32.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true
```

--------------------------------

### Example Shoot Manifest for OpenStack

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-openstack/usage

This is an example Shoot manifest for an OpenStack environment with a single availability zone. It demonstrates the configuration of infrastructure, control plane, and worker settings.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: johndoe-openstack
  namespace: garden-dev
spec:
  cloudProfile:
    name: openstack
  region: europe-1
  secretBindingName: core-openstack
  provider:
    type: openstack
    infrastructureConfig:
      apiVersion: openstack.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
      floatingPoolName: MY-FLOATING-POOL
      networks:
        workers: 10.250.0.0/19
    controlPlaneConfig:
      apiVersion: openstack.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
      loadBalancerProvider: haproxy
  workers:
  - name: worker-xoluy
    machine:
      type: medium_4_8
    minimum: 2
    maximum: 2
    zones:
    - europe-1a
  networking:
    nodes: 10.250.0.0/16
    type: calico
  kubernetes:
    version: 1.33.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true

```

--------------------------------

### Example Shoot Manifest with Calico Networking

Source: https://gardener.cloud/docs/extensions/network-extensions/gardener-extension-networking-calico/usage

An example Shoot manifest demonstrating the integration of Calico networking configurations, including provider-specific settings and network definitions.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: johndoe-azure
  namespace: garden-dev
spec:
  cloudProfileName: azure
  region: westeurope
  secretBindingName: core-azure
  provider:
    type: azure
    infrastructureConfig:
      apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
      networks:
        vnet:
          cidr: 10.250.0.0/16
        workers: 10.250.0.0/19
      zoned: true
    controlPlaneConfig:
      apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
    workers:
    - name: worker-xoluy
      machine:
        type: Standard_D4_v3
      minimum: 2
      maximum: 2
      volume:
        size: 50Gi
        type: Standard_LRS
      zones:
      - "1"
      - "2"
  networking:
    type: calico
    nodes: 10.250.0.0/16
    providerConfig:
      apiVersion: calico.networking.extensions.gardener.cloud/v1alpha1
      kind: NetworkConfig
      ipam:
        type: host-local
      vethMTU: "1440"
      overlay:
        enabled: true
      typha:
        enabled: false
  kubernetes:
    version: 1.32.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true
```

--------------------------------

### AWS ControlPlaneConfig Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/usage

Example configuration for the AWS extension's control plane. Omit `cloudControllerManager` if no specific configuration is needed.

```yaml
apiVersion: aws.provider.extensions.gardener.cloud/v1alpha1
kind: ControlPlaneConfig
cloudControllerManager:
# featureGates:
#   SomeKubernetesFeature: true
  useCustomRouteController: true
# loadBalancerController:
#   enabled: true
#   ingressClassName: alb
# ipamController:
#   enabled: true
storage:
  managedDefaultClass: false
```

--------------------------------

### Install gardenctl-v2 using Chocolatey

Source: https://gardener.cloud/docs/gardenctl

Installs the latest version of gardenctl-v2 on Windows using Chocolatey. The default location is C:\\ProgramData\\chocolatey\\bin\\gardenctl-v2.exe.

```shell
# Chocolatey (Windows)
# default location C:\\ProgramData\\chocolatey\\bin\\gardenctl-v2.exe
choco install gardenctl-v2
```

--------------------------------

### GCP WorkerConfig Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-gcp/usage

An example WorkerConfig for GCP, demonstrating volume interface, encryption, data volumes, service accounts, GPU configuration, and node templates.

```yaml
apiVersion: gcp.provider.extensions.gardener.cloud/v1alpha1
kind: WorkerConfig
volume:
  interface: NVME
  encryption:
    kmsKeyName: "projects/projectId/locations/<zoneName>/keyRings/<keyRingName>/cryptoKeys/alpha"
    kmsKeyServiceAccount: "user@projectId.iam.gserviceaccount.com"
dataVolumes:
  - name: test
    sourceImage: projects/sap-se-gcp-gardenlinux/global/images/gardenlinux-gcp-gardener-prod-amd64-1443-3-c261f887
    provisionedIops: 3000
    provisionedThroughput: 140
serviceAccount:
  email: foo@bar.com
  scopes:
  - https://www.googleapis.com/auth/cloud-platform
gpu:
  acceleratorType: nvidia-tesla-t4
  count: 1
nodeTemplate: # (to be specified only if the node capacity would be different from cloudprofile info during runtime)
  capacity:
    cpu: 2
    gpu: 1
    memory: 50Gi

```

--------------------------------

### Alicloud ControlPlaneConfig Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/usage

Configures Alicloud-specific control plane components, including enabling the AD controller for CSI.

```yaml
apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
kind: ControlPlaneConfig
csi:
  enableADController: true
# cloudControllerManager:
#   featureGates:
```

--------------------------------

### Azure Infrastructure Configuration Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-azure/usage

Example of an InfrastructureConfig for the Azure extension, specifying network configurations like Virtual Network CIDR and worker network CIDR. This prepares resources for creating shoot worker nodes.

```yaml
apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
kind: InfrastructureConfig
networks:
  vnet: # specify either 'name' and 'resourceGroup' or 'cidr'. If none of them are set, the value of networks.workers will be used.
#    name: my-vnet
#    resourceGroup: my-vnet-resource-group
    cidr: 10.250.0.0/16
#    ddosProtectionPlanID: /subscriptions/test/resourceGroups/test/providers/Microsoft.Network/ddosProtectionPlans/test-ddos-protection-plan
  workers: 10.250.0.0/19
#  # natGateway can only be set together with networks.workers
#  natGateway:
#    enabled: true
#    idleConnectionTimeoutMinutes: 4
#    zone: 1
#    ipAddresses:
#    - name: my-public-ip-name
#      resourceGroup: my-public-ip-resource-group
#      zone: 1
#  # serviceEndpoints can only be set together with networks.workers
#  serviceEndpoints:
#  - Microsoft.Test
zoned: false
#identity:
#  name: my-identity-name
#  resourceGroup: my-identity-resource-group
```

--------------------------------

### Example CloudProfileConfig for Equinix Metal Extension

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-equinix-metal/operations

An example `CloudProfileConfig` for the Equinix Metal extension, mapping machine image versions to Equinix Metal IDs or iPXE script URLs.

```yaml
apiVersion: equinixmetal.provider.extensions.gardener.cloud/v1alpha1
kind: CloudProfileConfig
machineImages:
- name: flatcar
  versions:
  - version: 0.0.0-stable
    id: flatcar_stable
  - version: 3510.2.2
    ipxeScriptUrl: https://stable.release.flatcar-linux.net/amd64-usr/3510.2.2/flatcar_production_packet.ipxe
```

--------------------------------

### Get Project Details

Source: https://gardener.cloud/docs/dashboard/project-operations

Retrieve detailed information about a specific project, such as its status, owner, and creator. Replace 'flowering' with your project's name.

```bash
kubectl get project flowering
```

--------------------------------

### AWS Worker Configuration Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/usage

An example of the `WorkerConfig` for the AWS provider extension, demonstrating configurations for volumes, data volumes, IAM instance profiles, and instance metadata options.

```yaml
spec:
  provider:
    workers:
      - name: cpu-worker
        ...
        providerConfig:
            apiVersion: aws.provider.extensions.gardener.cloud/v1alpha1
            kind: WorkerConfig
            volume:
              iops: 10000
              throughput: 200
            dataVolumes:
            - name: kubelet-dir
              iops: 12345
              throughput: 150
              snapshotID: snap-1234
            iamInstanceProfile: # (specify either ARN or name)
              name: my-profile
            instanceMetadataOptions:
              httpTokens: required
              httpPutResponseHopLimit: 2
            # arn: my-instance-profile-arn
            nodeTemplate: # (to be specified only if the node capacity would be different from cloudprofile info during runtime)
              capacity:
                cpu: 2 # inherited from pool's machine type if un-specified
                gpu: 0 # inherited from pool's machine type if un-specified
                memory: 50Gi # inherited from pool's machine type if un-specified
                ephemeral-storage: 10Gi # override to specify explicit ephemeral-storage for scale fro zero
                resource.com/dongle: 4 # Example of a custom, extended resource.
              virtualCapacity:
                subdomain.domain.com/resource-name: 1234567 # should hot update node capacity without rollout
```

--------------------------------

### OpenStack CloudProfile Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-openstack/operations

Illustrates the configuration of network IDs, floating network IDs, and load balancer providers for an OpenStack environment within a CloudProfile.

```yaml
floatingNetworkID: "4567"
subnetID: "7890"
loadBalancerProviders:
- name: haproxy
# - name: f5
#   region: asia
# - name: haproxy
#   region: asia
```

--------------------------------

### Example Shoot Manifest for Equinix Metal

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-equinix-metal/usage

A comprehensive example of a Shoot manifest configured for the Equinix Metal provider. It includes cloud profile, region, secret binding, infrastructure, control plane, and worker configurations.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: my-shoot
  namespace: garden-dev
spec:
  cloudProfileName: equinix-metal
  region: ny # Corresponds to a metro
  secretBindingName: my-secret
  provider:
    type: equinixmetal
    infrastructureConfig:
      apiVersion: equinixmetal.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
    controlPlaneConfig:
      apiVersion: equinixmetal.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
    workers:
    - name: worker-pool1
      machine:
        type: t1.small
      minimum: 2
      maximum: 2
      volume:
        size: 50Gi
        type: storage_1
      zones: # Optional list of facilities, all of which MUST be in the metro; if not provided, then random facilities within the metro will be chosen for each machine.
      - ewr1
      - ny5
    - name: reserved-pool
      machine:
        type: t1.small
      minimum: 1
      maximum: 2
      providerConfig:
        apiVersion: equinixmetal.provider.extensions.gardener.cloud/v1alpha1
        kind: WorkerConfig
        reservationIDs:
        - reserved-device1
        - reserved-device2
        reservedDevicesOnly: true
      volume:
        size: 50Gi
        type: storage_1
  networking:
    type: calico
  kubernetes:
    version: 1.31.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true
```

--------------------------------

### Example CloudProfile Manifest with Machine Capabilities (AWS)

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/operations

An example `CloudProfile` manifest for AWS, demonstrating the configuration of machine capabilities, machine images with capability flavors, machine types, and volume types.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: CloudProfile
metadata:
  name: aws
spec:
  machineCapabilities:
  - name: architecture
    values: [ amd64, arm64 ]
#  - name: otherCapability
#    values:
#    - otherValue
#    - anotherValue
#    - yetAnotherValue
  type: aws
  kubernetes:
    versions:
    - version: 1.34.1
    - version: 1.33.4
      expirationDate: "2023-10-31T23:59:59Z"
  machineImages:
  - name: coreos
    versions:
    - version: 2135.6.0
      capabilityFlavors:
      - architecture: [amd64]
      # otherCapability: [otherValue, ...] 
      - architecture: [arm64]
      # otherCapability: [otherValue, ...] 
  machineTypes:
  - name: m5.large
    cpu: "2"
    gpu: "0"
    memory: 8Gi
    usable: true
    capabilities:
      architecture: [amd64]
      # otherCapability: [otherValue, ...] 
  volumeTypes:
  - name: gp2
    class: standard
    usable: true
  - name: io1
    class: premium
    usable: true
  regions:
  - name: eu-central-1
    zones:
    - name: eu-central-1a
    - name: eu-central-1b
    - name: eu-central-1c
  providerConfig:
    apiVersion: aws.provider.extensions.gardener.cloud/v1alpha1
    kind: CloudProfileConfig
    machineImages:
    - name: coreos
      versions:
      - version: 2135.6.0
        capabilityFlavors:
        - capabilities:
            architecture: [amd64]
          # otherCapability: [otherValue, ...] # optional
          regions:
          - name: eu-central-1
            ami: ami-034fd8c3f4026eb39
        - capabilities:
            architecture: [arm64]
          # otherCapability: [otherValue, ...] # optional
          regions:
          - name: eu-central-1
            ami: ami-034fd8c3f4026eb38
```

--------------------------------

### Favicon Example

Source: https://gardener.cloud/docs/dashboard/customization

This snippet shows the content of a favicon.ico file, typically used for browser tab icons.

```icon
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
```

--------------------------------

### Logo Example

Source: https://gardener.cloud/docs/dashboard/customization

This snippet contains the SVG code for a logo, commonly used in web applications.

```svg
PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCI+PHBhdGggZmlsbD0iIzBCODA2MiIgZD0iTTIsMjJWMjBDMiwyMCA3LDE4IDEyLDE4QzE3LDE4IDIyLDIwIDIyLDIwVjIySDJNMTEuMyw5LjFDMTAuMSw1LjIgNCw2LjEgNCw2LjFDNCw2LjEgNC4yLDEzLjkgOS45LDEyLjdDOS41LDkuOCA4LDkgOCw5QzEwLjgsOSAxMSwxMi40IDExLDEyLjRWMTdDMTEuMywxNyAxMS43LDE3IDEyLDE3QzEyLjMsMTcgMTIuNywxNyAxMywxN1YxMi44QzEzLDEyLjggMTMsOC45IDE2LDcuOUMxNiw3LjkgMTQsMTAuOSAxNCwxMi45QzIxLDEzLjYgMjEsNCAyMSw0QzIxLDQgMTIuMSwzIDExLjMsOS4xWiIgLz48L3N2Zz4=
```

--------------------------------

### Generated ContainerRuntime Resource

Source: https://gardener.cloud/docs/extensions/container-runtime-extensions/gardener-extension-runtime-gvisor/index

An example of the ContainerRuntime resource that is created based on the configuration in the shoot manifest, specifying gVisor with specific configuration flags.

```yaml
---
apiVersion: extensions.gardener.cloud/v1alpha1
kind: ContainerRuntime
metadata:
  name: my-container-runtime
spec:
  binaryPath: /var/bin/containerruntimes
  type: gvisor
  providerConfig:
    apiVersion: gvisor.runtime.extensions.config.gardener.cloud/v1alpha1
    configFlags:
      net-raw: "true"
    kind: GVisorConfiguration
  workerPool:
    name: worker-ubuntu
    selector:
      matchLabels:
        worker.gardener.cloud/pool: worker-xyz

```

--------------------------------

### AWS InfrastructureConfig Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/usage

Defines the network layout for creating shoot worker nodes, including VPC CIDR, zone-specific subnets, and ignore tags.

```yaml
apiVersion: aws.provider.extensions.gardener.cloud/v1alpha1
kind: InfrastructureConfig
enableECRAccess: true
enableMTUCustomizer: true
dualStack:
  enabled: false
networks:
  vpc: # specify either 'id' or 'cidr'
  # id: vpc-123456
    cidr: 10.250.0.0/16
  # gatewayEndpoints:
  # - s3
  zones:
  - name: eu-west-1a
    internal: 10.250.112.0/22
    public: 10.250.96.0/22
    workers: 10.250.0.0/19
  # elasticIPAllocationID: eipalloc-123456
ignoreTags:
  keys: # individual ignored tag keys
  - SomeCustomKey
  - AnotherCustomKey
  keyPrefixes: # ignored tag key prefixes
  - user.specific/prefix/
```

--------------------------------

### Configure BackupBucket with S3 Object Lock

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/operations

Example of configuring a BackupBucket resource to use AWS S3 object lock with immutability settings.

```yaml
apiVersion: extensions.gardener.cloud/v1alpha1
kind: BackupBucket
metadata:
  name: my-backup-bucket
spec:
  type: aws
  region: eu-west-1
  secretRef:
    name: my-aws-secret
    namespace: my-namespace
  providerConfig:
    apiVersion: aws.provider.extensions.gardener.cloud/v1alpha1
    kind: BackupBucketConfig
    immutability:
      retentionType: bucket
      retentionPeriod: 24h
      mode: compliance
```

--------------------------------

### Example Calico NetworkConfig Manifest

Source: https://gardener.cloud/docs/extensions/network-extensions/gardener-extension-networking-calico/usage

A sample NetworkConfig manifest for the Calico extension, specifying IPAM, MTU, Typha, overlay network, and autoscaling mode.

```yaml
apiVersion: calico.networking.extensions.gardener.cloud/v1alpha1
kind: NetworkConfig
ipam:
  type: host-local
  cidr: usePodCIDR
vethMTU: "1440"
typha:
  enabled: true
overlay:
  enabled: true
autoScaling:
  mode: "vpa"
```

--------------------------------

### Get Namespaces using kubectl

Source: https://gardener.cloud/docs/dashboard/connect-kubectl

Connect to your cluster using the downloaded kubeconfig file and list its namespaces. Replace `<path-to-gardenlogin-kubeconfig>` with the actual path to your kubeconfig file.

```bash
$ kubectl --kubeconfig=<path-to-gardenlogin-kubeconfig> get namespaces

```

--------------------------------

### CloudProvider Secret Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-stackit/cloudprovider

This is an example of the cloudprovider secret configuration. It requires a project ID and service account credentials in JSON format.

```yaml
apiVersion: v1
kind: Secret
metadata:
  name: cloudprovider
  namespace: shoot--<project>--<cluster>
type: Opaque
stringData:
  project-id: <project-id>
  serviceaccount.json: <sa-json>
```

--------------------------------

### GCP Control Plane Configuration Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-gcp/usage

An example of the ControlPlaneConfig for the GCP provider extension, including zone and cloud controller manager settings.

```yaml
apiVersion: gcp.provider.extensions.gardener.cloud/v1alpha1
kind: ControlPlaneConfig
zone: europe-west1-b
cloudControllerManager:
# featureGates:
#   SomeKubernetesFeature: true
storage:
  managedDefaultStorageClass: true
  managedDefaultVolumeSnapshotClass: true
#  csiFilestore:
```

--------------------------------

### Enable NVProxy for GPU Support

Source: https://gardener.cloud/docs/extensions/container-runtime-extensions/gardener-extension-runtime-gvisor/index

Example demonstrating how to enable the 'nvproxy' config flag in the gVisor providerConfig to allow gVisor to be used with NVIDIA GPUs.

```yaml
...
            - type: gvisor
              providerConfig:
                apiVersion: gvisor.runtime.extensions.config.gardener.cloud/v1alpha1
                kind: GVisorConfiguration
                configFlags:
                  nvproxy: "true"
                  ...
...

```

--------------------------------

### Get Namespaces from a Shoot Cluster

Source: https://gardener.cloud/docs/dashboard/connect-kubectl

After targeting a Shoot cluster with `gardenctl`, you can use `kubectl get namespaces` to verify the connection and list the namespaces within the cluster.

```bash
$ kubectl get namespaces
```

--------------------------------

### Run Controller Locally

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/index

Execute this command to run the controller locally on your machine. Ensure you have the necessary build tools and Go environment set up.

```bash
make start
```

--------------------------------

### Alicloud InfrastructureConfig Example

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/usage

Defines network layout for shoot worker nodes, including VPC and zone subnets. Use 'id' for existing VPC or 'cidr' for a new one. Optionally manage NAT Gateway and Elastic IPs.

```yaml
apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
kind: InfrastructureConfig
networks:
  vpc: # specify either 'id' or 'cidr'
  # id: my-vpc
    cidr: 10.250.0.0/16
  # gardenerManagedNATGateway: true
  zones:
  - name: eu-central-1a
    workers: 10.250.1.0/24
  # natGateway:
    # eipAllocationID: eip-ufxsdg122elmszcg
```

--------------------------------

### Apply Cluster Manifest

Source: https://gardener.cloud/docs/dashboard/project-operations

Create a new cluster by applying the prepared YAML manifest. Use `--wait=false` to return immediately after initiating the creation process.

```bash
kubectl apply -f daffodil.yaml --wait=false
```

```bash
shoot.core.gardener.cloud/daffodil created
```

--------------------------------

### Alicloud CloudProfileConfig with Mixed Machine Image Formats

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-alicloud/operations

Example `CloudProfileConfig` demonstrating mixed mode for machine image mapping. Allows newer versions to use `capabilityFlavors` while older versions retain the legacy flat `regions[]` format during migration.

```yaml
apiVersion: alicloud.provider.extensions.gardener.cloud/v1alpha1
kind: CloudProfileConfig
machineImages:
- name: gardenlinux
  versions:
  - version: 1877.13.0          # new version: uses capabilityFlavors
    capabilityFlavors:
    - capabilities:
        architecture:
        - amd64
      regions:
      - name: cn-shanghai
        id: m-uf6hvbrxclop1jtat17m
  - version: 1877.10.0          # old version: still uses legacy flat format
    regions:
    - name: cn-shanghai
      id: m-uf63n3zty62esx53qolr
    - name: cn-hangzhou
      id: m-bp196lsdf3k91xp2wtco
```

--------------------------------

### List Namespaces using kubectl

Source: https://gardener.cloud/docs/dashboard/using-terminal

This snippet demonstrates how to list namespaces in a Kubernetes cluster using the `kubectl` command-line tool, aliased as `k`, within the Gardener Dashboard terminal.

```bash
k get ns
```

--------------------------------

### Example Shoot Manifest (Non-Zoned Azure Cluster)

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-azure/usage

This is a complete example of a Shoot manifest for a non-zoned Azure cluster. It specifies cloud profile, region, credentials, infrastructure configuration, control plane configuration, worker settings, networking details, Kubernetes version, maintenance settings, and add-ons.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Shoot
metadata:
  name: johndoe-azure
  namespace: garden-dev
spec:
  cloudProfile:
    name: azure
  region: westeurope
  credentialsBindingName: core-azure
  provider:
    type: azure
    infrastructureConfig:
      apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
      kind: InfrastructureConfig
      networks:
        vnet:
          cidr: 10.250.0.0/16
        workers: 10.250.0.0/19
      zoned: false
    controlPlaneConfig:
      apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
      kind: ControlPlaneConfig
    workers:
    - name: worker-xoluy
      machine:
        type: Standard_D4_v3
      minimum: 2
      maximum: 2
      volume:
        size: 50Gi
        type: Standard_LRS
#      providerConfig:
#        apiVersion: azure.provider.extensions.gardener.cloud/v1alpha1
#        kind: WorkerConfig
#        nodeTemplate: # (to be specified only if the node capacity would be different from cloudprofile info during runtime)
#          capacity:
#            cpu: 2
#            gpu: 1
#            memory: 50Gi
  networking:
    type: calico
    pods: 100.96.0.0/11
    nodes: 10.250.0.0/16
    services: 100.64.0.0/13
  kubernetes:
    version: 1.32.0
  maintenance:
    autoUpdate:
      kubernetesVersion: true
      machineImageVersion: true
  addons:
    kubernetesDashboard:
      enabled: true
    nginxIngress:
      enabled: true

```

--------------------------------

### Example Project YAML with Custom Shoot Fields

Source: https://gardener.cloud/docs/dashboard/custom-fields

This YAML defines custom shoot fields for a project, specifying their display properties for the cluster list and details pages.

```yaml
apiVersion: core.gardener.cloud/v1beta1
kind: Project
metadata:
  annotations:
    dashboard.gardener.cloud/shootCustomFields: |
      {
        "shootStatus": {
          "name": "Shoot Status",
          "path": "metadata.labels[\"shoot.gardener.cloud/status\"]",
          "icon": "mdi-heart-pulse",
          "tooltip": "Indicates the health status of the cluster",
          "defaultValue": "unknown",
          "showColumn": true,
          "columnSelectedByDefault": true,
          "weight": 950,
          "searchable": true,
          "sortable": true,
          "showDetails": true
        },
        "networking": {
          "name": "Networking Type",
          "path": "spec.networking.type",
          "icon": "mdi-table-network",
          "showColumn": false
        }
      }
```

--------------------------------

### Get Shell Completion Help for Bash

Source: https://gardener.cloud/docs/gardenctl

Displays help information for configuring bash shell completion with gardenctl. This command assists users in setting up auto-completion for gardenctl commands in bash.

```bash
gardenctl completion bash --help
```

--------------------------------

### Calico Network Status Output

Source: https://gardener.cloud/docs/extensions/network-extensions/gardener-extension-networking-calico/index

Example of the expected status output after successful reconciliation of a Calico network resource.

```yaml
  status:
    lastOperation:
      description: Successfully reconciled network
      lastUpdateTime: "..."
      progress: 100
      state: Succeeded
      type: Reconcile
    observedGeneration: 1
    providerStatus:
      apiVersion: calico.networking.extensions.gardener.cloud/v1alpha1
      kind: NetworkStatus

```

--------------------------------

### Run Static Code Checks and Tests

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-aws/index

Execute this command to run static code checks and tests. This ensures code quality and adherence to project standards using Go modules and Ginkgo/Gomega.

```bash
make verify
```

--------------------------------

### Registering the Azure Extension Controller

Source: https://gardener.cloud/docs/extensions/infrastructure-extensions/gardener-extension-provider-azure/index

An example of a ControllerRegistration resource used to register the Azure extension controller with Gardener.

```yaml
apiVersion: extensions.gardener.cloud/v1beta1
kind: ControllerRegistration
metadata:
  name: azure-extensions
spec:
  resources:
  - type: provider.azure.extensions.gardener.cloud
    kind: ControllerDeployment
    deployment:
      type: "charts"
      chart:
        name: azure-extension
        ref: "master"
        source: "https://github.com/gardener/gardener-extension-provider-azure"
    protect: false
    reconcile: false
```

--------------------------------

### Configure gVisor with Additional Flags

Source: https://gardener.cloud/docs/extensions/container-runtime-extensions/gardener-extension-runtime-gvisor/index

Example of how to set additional configuration flags for gVisor, such as debug, net-raw, and nvproxy, within the providerConfig of a shoot manifest.

```yaml
...
            - type: gvisor
              providerConfig:
                apiVersion: gvisor.runtime.extensions.config.gardener.cloud/v1alpha1
                kind: GVisorConfiguration
                configFlags:
                  debug: "true"
                  net-raw: "true"
                  nvproxy: "true"
                  ...
...

```
Tokens:
Raw