---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_gkemulticloud_attached_cluster{% #gcp_gkemulticloud_attached_cluster %}

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `annotations`{% #annotations %}

**Type**: `MAP_STRING_STRING`**Provider name**: `annotations`**Description**: Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between.

## `authorization`{% #authorization %}

**Type**: `STRUCT`**Provider name**: `authorization`**Description**: Optional. Configuration related to the cluster RBAC settings.

- `admin_groups`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `adminGroups`**Description**: Optional. Groups of users that can perform operations as a cluster admin. A managed ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole to the groups. Up to ten admin groups can be provided. For more info on RBAC, see [https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles)
  - `group`**Type**: `STRING`**Provider name**: `group`**Description**: Required. The name of the group, e.g. `my-group@domain.com`.
- `admin_users`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `adminUsers`**Description**: Optional. Users that can perform operations as a cluster admin. A managed ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole to the users. Up to ten admin users can be provided. For more info on RBAC, see [https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles)
  - `username`**Type**: `STRING`**Provider name**: `username`**Description**: Required. The name of the user, e.g. `my-gcp-id@gmail.com`.

## `binary_authorization`{% #binary_authorization %}

**Type**: `STRUCT`**Provider name**: `binaryAuthorization`**Description**: Optional. Binary Authorization configuration for this cluster.

- `evaluation_mode`**Type**: `STRING`**Provider name**: `evaluationMode`**Description**: Mode of operation for binauthz policy evaluation. If unspecified, defaults to DISABLED.**Possible values**:
  - `EVALUATION_MODE_UNSPECIFIED` - Default value
  - `DISABLED` - Disable BinaryAuthorization
  - `PROJECT_SINGLETON_POLICY_ENFORCE` - Enforce Kubernetes admission requests with BinaryAuthorization using the project's singleton policy.

## `cluster_region`{% #cluster_region %}

**Type**: `STRING`**Provider name**: `clusterRegion`**Description**: Output only. The region where this cluster runs. For EKS clusters, this is a AWS region. For AKS clusters, this is an Azure region.

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. The time at which this cluster was registered.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `description`**Description**: Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes.

## `distribution`{% #distribution %}

**Type**: `STRING`**Provider name**: `distribution`**Description**: Required. The Kubernetes distribution of the underlying attached cluster. Supported values: ["eks", "aks", "generic"].

## `errors`{% #errors %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `errors`**Description**: Output only. A set of errors found in the cluster.

- `message`**Type**: `STRING`**Provider name**: `message`**Description**: Human-friendly description of the error.

## `etag`{% #etag %}

**Type**: `STRING`**Provider name**: `etag`**Description**: Allows clients to perform consistent read-modify-writes through optimistic concurrency control. Can be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

## `fleet`{% #fleet %}

**Type**: `STRUCT`**Provider name**: `fleet`**Description**: Required. Fleet configuration.

- `membership`**Type**: `STRING`**Provider name**: `membership`**Description**: Output only. The name of the managed Hub Membership resource associated to this cluster. Membership names are formatted as `projects//locations/global/membership/`.
- `project`**Type**: `STRING`**Provider name**: `project`**Description**: Required. The name of the Fleet host project where this cluster will be registered. Project names are formatted as `projects/`.

## `kubernetes_version`{% #kubernetes_version %}

**Type**: `STRING`**Provider name**: `kubernetesVersion`**Description**: Output only. The Kubernetes version of the cluster.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `logging_config`{% #logging_config %}

**Type**: `STRUCT`**Provider name**: `loggingConfig`**Description**: Optional. Logging configuration for this cluster.

- `component_config`**Type**: `STRUCT`**Provider name**: `componentConfig`**Description**: The configuration of the logging components;
  - `enable_components`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `enableComponents`**Description**: The components to be enabled.

## `monitoring_config`{% #monitoring_config %}

**Type**: `STRUCT`**Provider name**: `monitoringConfig`**Description**: Optional. Monitoring configuration for this cluster.

- `cloud_monitoring_config`**Type**: `STRUCT`**Provider name**: `cloudMonitoringConfig`**Description**: Optionally enable GKE metrics. Only for Attached Clusters.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Enable GKE-native logging and metrics. Only for Attached Clusters.
- `managed_prometheus_config`**Type**: `STRUCT`**Provider name**: `managedPrometheusConfig`**Description**: Enable Google Cloud Managed Service for Prometheus in the cluster.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Enable Managed Collection.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: The name of this resource. Cluster names are formatted as `projects//locations//attachedClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names.

## `oidc_config`{% #oidc_config %}

**Type**: `STRUCT`**Provider name**: `oidcConfig`**Description**: Required. OpenID Connect (OIDC) configuration for the cluster.

- `issuer_url`**Type**: `STRING`**Provider name**: `issuerUrl`**Description**: A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://`.

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `platform_version`{% #platform_version %}

**Type**: `STRING`**Provider name**: `platformVersion`**Description**: Required. The platform version for the cluster (e.g. `1.19.0-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAttachedServerConfig.

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `proxy_config`{% #proxy_config %}

**Type**: `STRUCT`**Provider name**: `proxyConfig`**Description**: Optional. Proxy configuration for outbound HTTP(S) traffic.

- `kubernetes_secret`**Type**: `STRUCT`**Provider name**: `kubernetesSecret`**Description**: The Kubernetes Secret resource that contains the HTTP(S) proxy configuration. The secret must be a JSON encoded proxy configuration as described in [https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/eks/how-to/use-a-proxy#configure-proxy-support](https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/eks/how-to/use-a-proxy#configure-proxy-support) for EKS clusters and [https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/aks/how-to/use-a-proxy#configure-proxy-support](https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/aks/how-to/use-a-proxy#configure-proxy-support) for AKS clusters.
  - `name`**Type**: `STRING`**Provider name**: `name`**Description**: Name of the kubernetes secret.
  - `namespace`**Type**: `STRING`**Provider name**: `namespace`**Description**: Namespace in which the kubernetes secret is stored.

## `reconciling`{% #reconciling %}

**Type**: `BOOLEAN`**Provider name**: `reconciling`**Description**: Output only. If set, there are currently changes in flight to the cluster.

## `region_id`{% #region_id %}

**Type**: `STRING`

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `security_posture_config`{% #security_posture_config %}

**Type**: `STRUCT`**Provider name**: `securityPostureConfig`**Description**: Optional. Security Posture configuration for this cluster.

- `vulnerability_mode`**Type**: `STRING`**Provider name**: `vulnerabilityMode`**Description**: Sets which mode to use for vulnerability scanning.**Possible values**:
  - `VULNERABILITY_MODE_UNSPECIFIED` - Default value not specified.
  - `VULNERABILITY_DISABLED` - Disables vulnerability scanning on the cluster.
  - `VULNERABILITY_ENTERPRISE` - Applies the Security Posture's vulnerability on cluster Enterprise level features.

## `state`{% #state %}

**Type**: `STRING`**Provider name**: `state`**Description**: Output only. The current state of the cluster.**Possible values**:

- `STATE_UNSPECIFIED` - Not set.
- `PROVISIONING` - The PROVISIONING state indicates the cluster is being registered.
- `RUNNING` - The RUNNING state indicates the cluster has been register and is fully usable.
- `RECONCILING` - The RECONCILING state indicates that some work is actively being done on the cluster, such as upgrading software components.
- `STOPPING` - The STOPPING state indicates the cluster is being de-registered.
- `ERROR` - The ERROR state indicates the cluster is in a broken unrecoverable state.
- `DEGRADED` - The DEGRADED state indicates the cluster requires user action to restore full functionality.

## `system_components_config`{% #system_components_config %}

**Type**: `STRUCT`**Provider name**: `systemComponentsConfig`**Description**: Optional. Kubernetes configurationss for auto-installed components on the cluster.

- `tolerations`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `tolerations`**Description**: Sets custom tolerations for pods created by auto-installed components.
  - `effect`**Type**: `STRING`**Provider name**: `effect`**Description**: Effect indicates the taint effect to match e.g. 'NoSchedule'**Possible values**:
    - `EFFECT_UNSPECIFIED` - Effect is not specified.
    - `EFFECT_NO_SCHEDULE` - Effect maps to 'NoSchedule'.
    - `EFFECT_PREFER_NO_SCHEDULE` - Effect maps to 'PreferNoSchedule'.
    - `EFFECT_NO_EXECUTE` - Effect maps to 'NoExecute'.
  - `key`**Type**: `STRING`**Provider name**: `key`**Description**: Key is the taint key that the toleration applies to.
  - `key_operator`**Type**: `STRING`**Provider name**: `keyOperator`**Description**: KeyOperator represents a key's relationship to the value e.g. 'Exist'.**Possible values**:
    - `KEY_OPERATOR_UNSPECIFIED` - Operator is not specified.
    - `KEY_OPERATOR_EQUAL` - Operator maps to 'Equal'.
    - `KEY_OPERATOR_EXISTS` - Operator maps to 'Exists'.
  - `value`**Type**: `STRING`**Provider name**: `value`**Description**: Value is the taint value that the toleration applies to.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `uid`{% #uid %}

**Type**: `STRING`**Provider name**: `uid`**Description**: Output only. A globally unique identifier for the cluster.

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. The time at which this cluster was last updated.

## `workload_identity_config`{% #workload_identity_config %}

**Type**: `STRUCT`**Provider name**: `workloadIdentityConfig`**Description**: Output only. Workload Identity settings.

- `identity_provider`**Type**: `STRING`**Provider name**: `identityProvider`**Description**: The ID of the OIDC Identity Provider (IdP) associated to the Workload Identity Pool.
- `issuer_uri`**Type**: `STRING`**Provider name**: `issuerUri`**Description**: The OIDC issuer URL for this cluster.
- `workload_pool`**Type**: `STRING`**Provider name**: `workloadPool`**Description**: The Workload Identity Pool associated to the cluster.

## `zone_id`{% #zone_id %}

**Type**: `STRING`