anchor.diff:  |HostSubnet
   |network.openshift.io
   |
  -|Not namespaced
  +|Global
   |
   
   |Image
   |config.openshift.io
   |
  -|Not namespaced
  +|Global
   |
   
   |Infrastructure
   |config.openshift.io
   |
  -|Not namespaced
  +|Global
   |
   
   |Ingress
   |config.openshift.io
   |
  -|Not namespaced
  +|Global
   |
   
   |InstallPlan
  
positive.code: |Project
  |config.openshift.io
  |
  |Not namespaced
  |
  
  |Prometheus
  
negative.code: toc::[]
  
  You complete most of the cluster configuration and customization after you
  deploy your {product-title} cluster. A number of
  _configuration resources_
  //and _Custom Resources_
  are available.
  
  You modify the configuration resources to configure the major features of the
  cluster, such as the image registry, networking configuration, image build 
  behavior, and the identity provider.
  
  For current documentation of settings these resources expose, use
  the `oc explain` command, for example `oc explain builds --api-version=config.openshift.io/v1`
  
  [id="configuration-resources_{context}"]
  == Cluster configuration resources
  
  All cluster configuration resources are globally scoped (not namespaced) and named `cluster`.
  ////
  Config changes should not require coordinated changes between config resources, if you find
  yourself struggling to update these docs to explain coordinated changes, please reach out 
  to @api-approvers (github) or #forum-api-review (slack).
  ////
  
  [cols="2a,8a",options="header"]
  |===
  |Resource name
  |Description
  
  |apiserver.config.openshift.io
  |Provides api-server configuration such as xref:../../authentication/certificates/api-server.adoc#api-server-certificates[certificates and certificate authorities].
  
  |authentication.config.openshift.io
  |Controls the xref:../../authentication/understanding-identity-provider.adoc#understanding-identity-provider[identity provider]and authentication configuration for the cluster.
  
  |build.config.openshift.io
  |Controls default and enforced xref:../../builds/build-configuration.adoc#build-configuration[configuration] for all builds on the cluster.
  
  |console.config.openshift.io
  |Configures the behavior of the web console interface, including the xref:../../web-console/configuring-web-console.adoc#configuring-web-console[logout behavior].
  
  |featuregate.config.openshift.io
  |Enables xref:../../nodes/clusters/nodes-cluster-enabling-features.adoc#nodes-cluster-enabling[FeatureGates]
  so that you can use Tech Preview features.
  
  |image.config.openshift.io
  |Configures how specific xref:../../openshift_images/image-configuration.adoc#image-configuration[image registries] should be treated (allowed, disallowed, insecure, CA details).
  
  |ingress.config.openshift.io
  |Configuration details related to xref:../../networking/ingress-operator.adoc#nw-installation-ingress-config-asset_configuring-ingress[routing] such as the default domain for routes.
  
  |oauth.config.openshift.io
  |Configures identity providers and other behavior related to xref:../../authentication/configuring-internal-oauth.adoc#configuring-internal-oauth[internal OAuth server] flows.
  
  |project.config.openshift.io
  |Configures xref:../../applications/projects/configuring-project-creation.adoc#configuring-project-creation[how projects are created] including the project template.
  
  |proxy.config.openshift.io
  |Defines proxies to be used by components needing external network access.  Note: not all components currently consume this value.
  
  |scheduler.config.openshift.io
  |Configures xref:../../nodes/scheduling/nodes-scheduler-default.adoc#nodes-scheduler-default[scheduler] behavior such as policies and default nodeselectors.
  
  |===
  
  [id="operator-configuration-resources_{context}"]
  == Operator configuration resources
  
  These configuration resources are cluster scoped singletons which control behavior of a specific component as
  owned by a particular operator.  All resources are cluster scoped and the instances are named `cluster`.
  
  [cols="2a,8a",options="header"]
  |===
  |Resource name
  |Description
  
  |console.operator.openshift.io
  |Control console appearance such as branding customizations
  
  |config.imageregistry.operator.openshift.io
  |Configure xref:../../registry/configuring-registry-operator.adoc#registry-operator-configuration-resource-overview_configuring-registry-operator[internal image registry settings] such as public routing, log levels, proxy settings, resource constraints, replica counts, and storage type.
  
  |config.samples.operator.openshift.io
  |Configure the
  xref:../../openshift_images/configuring-samples-operator.adoc#configuring-samples-operator[Samples Operator]
  to control which example imagestreams and templates are installed on the cluster.
  |Global
  
  |===
  
  
  [id="additional-configuration-resources_{context}"]
  == Additional configuration resources
  
  These configuration resources represent a single instance of a particular component, in some cases multiple
  instances may be requested by creating multiple instances of the resource.  In other cases only a specific 
  resource instance name in a specific namespace will be consumed by the operator.  Reference the component specific
  documentation for details on how and when additional resource instances can be created.
  
  [cols="2a,2a,2a,8a",options="header"]
  |===
  |Resource name
  |Instance name
  |Namespace
  |Description
  
  |alertmanager.monitoring.coreos.com
  |main
  |openshift-monitoring
  |Controls the xref:../../monitoring/cluster-monitoring/configuring-the-monitoring-stack.adoc#configuring-alertmanager[alertmanager] deployment parameters
  
  |ingresscontroller.operator.openshift.io
  |default
  |openshift-ingress-operator
  |Configure xref:../../networking/ingress-operator.adoc#configuring-ingress[Ingress Operator] behavior such as domain, number of replicas, certificates, and controller placement.
  
  |===
  
  
  [id="informational-resources_{context}"]
  == Informational Resources
  
  These resources should only be read for to retrieve information about the cluster, they should not be edited directly.
  
  [cols="2a,2a,8a",options="header"]
  |===
  |Resource name|Instance name|Description
  
  |clusterversion.config.openshift.io
  |version
  |In {product-title} {product-version}, you must not customize the ClusterVersion
  resource for production clusters. Instead, follow the process to
  xref:../../updating/updating-cluster.adoc#updating-cluster[update a cluster].
  
  |dns.config.openshift.io
  |cluster
  |You cannot modify the DNS settings for your cluster. You can
  xref:../../networking/dns-operator.adoc#dns-operator[view the DNS Operator status].
  
  |infrastructure.config.openshift.io
  |cluster
  |Configuration details allowing the cluster to interact with its cloud provider.
  
  |network.config.openshift.io
  |cluster
  |You cannot modify your cluster networking after installation. If you must
  customize your network, you
  xref:../../installing/installing_aws/installing-aws-network-customizations.adoc#installing-aws-network-customizations[customize networking during installation].
  
  |===
  
  