ACM PCA

# ACMPCACertificate — ACM PCA
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/acmpca.html#acmpcacertificate
apiVersion: aws.konfig.io/v1alpha1
kind: ACMPCACertificate
metadata:
  name: example-acmpcacertificate
  namespace: default
spec:
  apiPassthrough:
    extensions:
      certificatePolicies:
      - certPolicyId: example-id
        policyQualifiers:
        - policyQualifierId: example-id
          qualifier:
            cpsUri: example
      customExtensions:
      - critical: false
        objectIdentifier: example
        value: example
      extendedKeyUsage:
      - extendedKeyUsageObjectIdentifier: example
        extendedKeyUsageType: example
      keyUsage:
        crlSign: false
        dataEncipherment: false
        decipherOnly: false
        digitalSignature: false
        encipherOnly: false
        keyAgreement: false
        keyCertSign: false
        keyEncipherment: false
        nonRepudiation: false
      subjectAlternativeNames:
      - dnsName: example-acmpcacertificate
        ipAddress: example
        rfc822Name: example-acmpcacertificate
        uniformResourceIdentifier: example
    subject:
      commonName: example-acmpcacertificate
      country: example
      customAttributes:
      - objectIdentifier: example
        value: example
      distinguishedNameQualifier: example
      generationQualifier: example
      givenName: example-acmpcacertificate
      initials: example
      locality: example
      organization: example
      organizationalUnit: example
      pseudonym: example
      serialNumber: example
      state: example
      surname: example-acmpcacertificate
      title: example
  certificateAuthorityArn: arn:aws:iam::123456789012:role/example-role
  certificateSigningRequest: example
  providerRef:
    name: example-acmpcacertificate
    region: us-east-1
  signingAlgorithm: example
  templateArn: arn:aws:iam::123456789012:role/example-role
  validity:
    type: example
    value: 1
  validityNotBefore:
    type: example
    value: 1

# ACMPCACertificateAuthorityActivation — ACM PCA
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/acmpca.html#acmpcacertificateauthorityactivation
apiVersion: aws.konfig.io/v1alpha1
kind: ACMPCACertificateAuthorityActivation
metadata:
  name: example-acmpcacertificateauthorityactivation
  namespace: default
spec:
  certificate: example
  certificateAuthorityArn: arn:aws:iam::123456789012:role/example-role
  certificateChain: example
  providerRef:
    name: example-acmpcacertificateauthorityactivation
    region: us-east-1
  status: example

# ACMPCAPermission — ACM PCA
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/acmpca.html#acmpcapermission
apiVersion: aws.konfig.io/v1alpha1
kind: ACMPCAPermission
metadata:
  name: example-acmpcapermission
  namespace: default
spec:
  actions:
  - example
  certificateAuthorityArn: arn:aws:iam::123456789012:role/example-role
  principal: example
  providerRef:
    name: example-acmpcapermission
    region: us-east-1
  sourceAccount: example

# PrivateCA — ACM PCA
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/acmpca.html#privateca
apiVersion: aws.konfig.io/v1alpha1
kind: PrivateCA
metadata:
  name: example-privateca
  namespace: default
spec:
  keyAlgorithm: RSA_2048
  permanentDeletionTimeInDays: 7
  providerRef:
    name: example-privateca
    region: us-east-1
  revocationConfiguration:
    crl:
      enabled: true
      expirationInDays: 1
      s3BucketName: example-privateca
  signingAlgorithm: SHA256WITHRSA
  subject:
    commonName: example-privateca
    country: example
    locality: example
    organization: example
    organizationalUnit: example
    state: example
  tags:
    environment: dev
    team: platform
  type: ROOT
  usageMode: GENERAL_PURPOSE