imports.yaml

runtimeCluster:
  apiVersion: landscaper.gardener.cloud/v1alpha1
  kind: Target
  spec:
    type: landscaper.gardener.cloud/kubernetes-cluster
    config:
      kubeconfig: |
      #       ... <please insert your kubeconfig here>

runtimeClusterSettings:
  namespace: garden
  infrastructureProvider: gcp

virtualGarden:
  deleteNamespace: true
  etcd:
    storageClassName: my-virtual-garden-storage-class
    handleETCDPersistentVolumes: true

### backup settings for OSS (alicloud)
#    backup:
#      deleteBackupBucketOnDeletion: false
#      infrastructureProvider: alicloud
#      region: oss-eu-central-1.aliyuncs.com
#      bucketName: testvirtualgarden
#      credentials:
#        data:
#          accessKeyID:     "your access key id (not base64 encoded)"
#          accessKeySecret: "your access key secret (not base64 encoded)"

### backup settings for GCS
#    backup:
#      deleteBackupBucketOnDeletion: false
#      infrastructureProvider: gcp
#      region: europe-west4
#      bucketName: testvirtualgarden
#      credentials:
#        data:
#          serviceaccount.json: |
#            {
#              "type": "service_account",
#              "project_id": "...",
#              "private_key_id": "...",
#              ...
#            }

### backup settings for S3
#    backup:
#      deleteBackupBucketOnDeletion: false
#      infrastructureProvider: aws
#      region: eu-central-1
#      bucketName: testvirtualgarden
#      credentials:
#        data:
#          accessKeyID:     "your access key id (not base64 encoded)"
#          secretAccessKey: "your secret access key (not base64 encoded)"

  kubeAPIServer:
    replicas: 1
    dnsAccessDomain: ""
    gardenerControlplane:
      validatingWebhook:
        kubeconfig: |
          apiVersion: v1
          kind: Config
          users:
          - name: '*'
            user:
              tokenFile: /var/run/secrets/admission-tokens/validating-webhook-token
        token:
          enabled: true
          audience: validating-webhook
          expirationSeconds: 3600
      mutatingWebhook:
        kubeconfig: |
          apiVersion: v1
          kind: Config
          users:
          - name: '*'
            user:
              tokenFile: /var/run/secrets/admission-tokens/mutating-webhook-token
        token:
          enabled: true
          audience: mutating-webhook
          expirationSeconds: 3600
    oidcWebhookAuthenticator:
      enabled: true