hashicorp · gwkunze · Feb 19, 2026
@@ -313,10 +313,23 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--persistent_volume_source--local"></a>

@@ -1794,14 +1794,27 @@ Read-Only:
 
 Read-Only:
 
+- `chap_auth_discovery` (Boolean)
+- `chap_auth_session` (Boolean)
 - `fs_type` (String)
+- `initiator_name` (String)
 - `iqn` (String)
 - `iscsi_interface` (String)
 - `lun` (Number)
+- `portals` (List of String)
 - `read_only` (Boolean)
+- `secret_ref` (List of Object) (see [below for nested schema](#nestedobjatt--spec--volume--iscsi--secret_ref))
 - `target_portal` (String)
 
 
+<a id="nestedobjatt--spec--volume--iscsi--secret_ref"></a>
+### Nested Schema for `spec.volume.iscsi.secret_ref`
+
+Read-Only:
+
+- `name` (String)
+
+
 <a id="nestedobjatt--spec--volume--local"></a>
 ### Nested Schema for `spec.volume.local`
 

@@ -868,7 +868,7 @@ Read-Only:
 - `tty` (Boolean)
 - `volume_mount` (List of Object) (see [below for nested schema](#nestedobjatt--spec--init_container--volume_mount))
 - `working_dir` (String)
-- `restart_policy` (String) 
+- `restart_policy` (String)
 
 <a id="nestedobjatt--spec--init_container--env"></a>
 ### Nested Schema for `spec.init_container.env`
@@ -1795,14 +1795,27 @@ Read-Only:
 
 Read-Only:
 
+- `chap_auth_discovery` (Boolean)
+- `chap_auth_session` (Boolean)
 - `fs_type` (String)
+- `initiator_name` (String)
 - `iqn` (String)
 - `iscsi_interface` (String)
 - `lun` (Number)
+- `portals` (List of String)
 - `read_only` (Boolean)
+- `secret_ref` (List of Object) (see [below for nested schema](#nestedobjatt--spec--volume--iscsi--secret_ref))
 - `target_portal` (String)
 
 
+<a id="nestedobjatt--spec--volume--iscsi--secret_ref"></a>
+### Nested Schema for `spec.volume.iscsi.secret_ref`
+
+Read-Only:
+
+- `name` (String)
+
+
 <a id="nestedobjatt--spec--volume--local"></a>
 ### Nested Schema for `spec.volume.local`
 

@@ -487,12 +487,21 @@ Terraform will perform the following actions:
                         }
 
                       + iscsi {
-                          + fs_type         = (known after apply)
-                          + iqn             = (known after apply)
-                          + iscsi_interface = (known after apply)
-                          + lun             = (known after apply)
-                          + read_only       = (known after apply)
-                          + target_portal   = (known after apply)
+                          + chap_auth_discovery = (known after apply)
+                          + chap_auth_session   = (known after apply)
+                          + fs_type             = (known after apply)
+                          + initiator_name      = (known after apply)
+                          + iqn                 = (known after apply)
+                          + iscsi_interface     = (known after apply)
+                          + lun                 = (known after apply)
+                          + portals             = (known after apply)
+                          + read_only           = (known after apply)
+
+                          + secret_ref {
+                              + name =      (known after apply)
+                            }
+
+                          + target_portal = (known after apply)
                         }
 
                       + local {

@@ -5,7 +5,7 @@ description: |-
     A Cron Job creates Jobs on a time-based schedule. One CronJob object is like one line of a crontab (cron table) file.
 ---
 
-# kubernetes_cron_job 
+# kubernetes_cron_job
 
 A Cron Job creates Jobs on a time-based schedule.
 
@@ -2034,10 +2034,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--job_template--spec--template--spec--volume--local"></a>
@@ -2387,7 +2399,7 @@ resource "kubernetes_cron_job" "demo" {
 ```
 
 
-## Import 
+## Import
 
 ```
 $ terraform import kubernetes_cron_job_v1/example default/example

@@ -2029,10 +2029,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--job_template--spec--template--spec--volume--local"></a>

@@ -978,8 +978,8 @@ Optional:
 - `volume_mount` (Block List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedblock--spec--template--spec--init_container--volume_mount))
 - `volume_device` (Block List) Raw volume devices to attach into the container's filesystem as raw block devices. Cannot be updated. More info: https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#volumes-1 (see [below for nested schema](#nestedblock--spec--template--spec--init_container--volume_device))
 - `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-- `restart_policy` (String) Restart policy for designating init container as a sidecar. Can only be `Always`. More info: https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/#pod-sidecar-containers. 
- 
+- `restart_policy` (String) Restart policy for designating init container as a sidecar. Can only be `Always`. More info: https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/#pod-sidecar-containers.
+
 
 <a id="nestedblock--spec--template--spec--init_container--env"></a>
 ### Nested Schema for `spec.template.spec.init_container.env`
@@ -1981,10 +1981,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--template--spec--volume--local"></a>
@@ -2278,7 +2290,7 @@ Optional:
 - `update` (String)
 
 
- 
+
 
 ## Example Usage
 

@@ -5,7 +5,7 @@ description: |-
   A DaemonSet ensures that all (or some) Nodes run a copy of a Pod. As nodes are added to the cluster, Pods are added to them. As nodes are removed from the cluster, those Pods are garbage collected. Deleting a DaemonSet will clean up the Pods it created.
 ---
 
-# kubernetes_daemonset 
+# kubernetes_daemonset
 
 A DaemonSet ensures that all (or some) Nodes run a copy of a Pod. As nodes are added to the cluster, Pods are added to them. As nodes are removed from the cluster, those Pods are garbage collected. Deleting a DaemonSet will clean up the Pods it created.
 
@@ -1979,10 +1979,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--template--spec--volume--local"></a>

@@ -1979,10 +1979,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--template--spec--volume--local"></a>

@@ -986,7 +986,7 @@ Optional:
 - `volume_mount` (Block List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedblock--spec--template--spec--init_container--volume_mount))
 - `volume_device` (Block List) Raw volume devices to attach into the container's filesystem as raw block devices. Cannot be updated. More info: https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#volumes-1 (see [below for nested schema](#nestedblock--spec--template--spec--init_container--volume_device))
 - `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-- `restart_policy` (String) Restart policy for designating init container as a sidecar. Can only be `Always`. More info: https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/#pod-sidecar-containers.  
+- `restart_policy` (String) Restart policy for designating init container as a sidecar. Can only be `Always`. More info: https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/#pod-sidecar-containers.
 
 
 <a id="nestedblock--spec--template--spec--init_container--env"></a>
@@ -1989,10 +1989,22 @@ Required:
 
 Optional:
 
+- `chap_auth_discovery` (Boolean) Whether target supports iSCSI Discovery CHAP authentication.
+- `chap_auth_session` (Boolean) Whether target supports iSCSI Session CHAP authentication.
 - `fs_type` (String) Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+- `initiator_name` (String) The custom iSCSI Initiator Name. If initiator_name is specified with iscsi_interface simultaneously, new iSCSI interface `target portal:volume name` will be created for the connection.
 - `iscsi_interface` (String) iSCSI interface name that uses an iSCSI transport. Defaults to 'default' (tcp).
 - `lun` (Number) iSCSI target lun number.
+- `portals` (List of String) The iSCSI Target Portal List. The Portal is either an IP or `ip_addr:port` if the port is other than default (typically TCP ports 860 and 3260).
 - `read_only` (Boolean) Whether to force the read-only setting in VolumeMounts. Defaults to false.
+- `secret_ref` (Block List, Max: 1) The CHAP Secret for iSCSI target and initiator authentication. Default is nil. More info: https://github.com/kubernetes/examples/tree/master/_archived/volumes/iscsi (see [below for nested schema](#nestedblock--spec--persistent_volume_source--iscsi--secret_ref))
+
+<a id="nestedblock--spec--persistent_volume_source--iscsi--secret_ref"></a>
+### Nested Schema for `spec.persistent_volume_source.iscsi.secret_ref`
+
+Optional:
+
+- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
 
 <a id="nestedblock--spec--template--spec--volume--local"></a>