| advertiseAddresses | list of string matching [A-Za-z0-9][A-Za-z0-9.:-]* | Addresses advertised to EdgeCore nodes. |
| config | attribute set of attribute set of any value | Desired values for the package's declared config artifacts. |
| credentials | attribute set of submodule | Opaque references for the package's declared credentials. |
| enable | boolean | Enable the package-owned KubeEdge CloudCore service. |
| https.address | string matching [A-Za-z0-9][A-Za-z0-9.:-]* | Address on which CloudHub accepts HTTPS enrollment requests. |
| https.enable | boolean | Enable CloudHub's HTTPS enrollment listener. |
| https.port | TCP/UDP port number (1-65535) | Signed HTTPS port admitted by the CloudCore expose firewall contract. |
| kubeApi.burst | signed integer | Kubernetes API request burst limit. |
| kubeApi.kubeconfig | submodule | Opaque credential reference for CloudCore's Kubernetes API kubeconfig. |
| kubeApi.qps | signed integer | Kubernetes API request rate. |
| monitorAddress | string matching [^
]+ | CloudCore metrics listener address. |
| nodeLimit | signed integer | Maximum simultaneously connected edge nodes. |
| tls.caCertificate | submodule | Opaque credential reference for the CloudHub certificate authority certificate. |
| tls.caPrivateKey | submodule | Opaque credential reference for the CloudHub certificate authority private key. |
| tls.serverCertificate | submodule | Opaque credential reference for the CloudHub server certificate. |
| tls.serverPrivateKey | submodule | Opaque credential reference for the CloudHub server private key. |
| websocket.address | string matching [A-Za-z0-9][A-Za-z0-9.:-]* | Address on which CloudHub accepts WebSocket connections from edge nodes. |
| websocket.enable | boolean | Enable CloudHub's WebSocket listener for connected edge nodes. |
| websocket.port | TCP/UDP port number (1-65535) | Signed WebSocket port admitted by the CloudCore expose firewall contract. |