Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

Google Kubernetes Engine v1 API - Enum LinuxNodeConfig.Types.NodeKernelModuleLoading.Types.Policy (3.36.0)

public enum LinuxNodeConfig.Types.NodeKernelModuleLoading.Types.Policy

Reference documentation and code samples for the Google Kubernetes Engine v1 API enum LinuxNodeConfig.Types.NodeKernelModuleLoading.Types.Policy.

Defines the kernel module loading policy for nodes in the nodepool.

Namespace

Google.Cloud.Container.V1.dll

Fields
Name	Description
`DoNotEnforceSignedModules`	Mirrors existing DEFAULT behavior: For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.
`EnforceSignedModules`	Enforced signature verification: Node pools will use a Container-Optimized OS image configured to allow loading of Google-signed external kernel modules. Loadpin is enabled but configured to exclude modules, and kernel module signature checking is enforced.
`Unspecified`	Default behavior. GKE selects the image based on node type. For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not.