Available in editions: CE, BE, SE, SE+, EE
The module lifecycle stage: General Availability
The module has 40 alerts.
The module is enabled by default in the Default bundle.
The module is disabled by default in the following bundles: Managed, Minimal.
Conversions
The module is configured using the ModuleConfig resource, the schema of which contains a version number. When you apply an old version of the ModuleConfig schema in a cluster, automatic transformations are performed. To manually update the ModuleConfig schema version, the following steps must be completed sequentially for each version :
- Updates from version 1 to 2:
Delete
allowedKubernetesVersionsandallowedBundles. - Updates from version 2 to 3:
Delete
earlyOomEnabled.
Parameters
Schema version: 3
- objectsettings
- booleansettings.capiEmergencyBrake
Set to ‘true’ to disable CAPI in case of potentially cluster-damaging changes.
Warning. Use this flag only if you fully understand the consequences.
Default:
falseExample:
capiEmergencyBrake: false - stringsettings.defaultCRI
The container runtime type used on cluster nodes (NodeGroups) by default.
Used for NodeGroups that don’t set
spec.cri.typeexplicitly.If the value
NotManagedis used, then Deckhouse does not manage the container runtime (and doesn’t install it). In this case, it is necessary to use images for NodeGroups on which the container runtime is already installed.If
ContainerdV2is set,CgroupsV2will be used (providing improved security and resource management). To useContainerdV2as the container runtime, cluster nodes must meet the following requirements:- Support for
CgroupsV2. - Linux kernel version 5.8 or newer, except for the ranges 6.12.0–6.12.28 or 6.14.0–6.14.6 (these versions are affected by CVE-2025-37999 in EROFS).
- Systemd version
244or newer. - Support for
erofskernel module.
If parameter not set, the value from
ClusterConfiguration.defaultCRIis used (defaults toContainerd).Default:
ContainerdAllowed values:
Containerd,ContainerdV2,NotManagedExample:
defaultCRI: ContainerdV2 - Support for
- stringsettings.instancePrefix
The prefix to use when creating instances via the corresponding cloud provider module.
The default value can be calculated based on the
ClusterConfigurationstruct if the cluster is installed via the Deckhouse installer.Example:
instancePrefix: kube - booleansettings.mcmEmergencyBrake
Available in editions: CE, BE, SE, SE+, EE
Set to ‘true’ to disable machine-controller-manager in case of potentially cluster-damaging changes.
Warning. Use this flag only if you fully understand the consequences.
Default:
falseExample:
mcmEmergencyBrake: false

