App Runner

5 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

AppRunnerAutoScaling # GA

AppRunnerAutoScaling is the Schema for managing AWS App Runner auto scaling configurations.

kubectl get apprunnerautoscalings · example on GitHub

Example

# AppRunnerAutoScaling — App Runner
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/apprunner.html#apprunnerautoscaling
apiVersion: aws.konfig.io/v1alpha1
kind: AppRunnerAutoScaling
metadata:
  name: example-apprunnerautoscaling
  namespace: default
spec:
  maxConcurrency: 1
  maxSize: 1
  minSize: 1
  name: example-apprunnerautoscaling
  providerRef:
    name: example-apprunnerautoscaling
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`maxConcurrency`	integer	—	MaxConcurrency is the maximum concurrent requests per instance.
`maxSize`	integer	—	MaxSize is the maximum number of instances.
`minSize`	integer	—	MinSize is the minimum number of provisioned instances.
`name`	string	yes	Name of the auto scaling configuration.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`autoScalingConfigurationArn`	string	—	AutoScalingConfigurationARN is the ARN of the configuration revision.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`revision`	integer	—	Revision is the created configuration revision.

AppRunnerObservabilityConfiguration # CLOUD CONTROL · AWS::AppRunner::ObservabilityConfiguration

AppRunnerObservabilityConfiguration manages AWS::AppRunner::ObservabilityConfiguration through the AWS Cloud Control API.

kubectl get apprunnerobservabilityconfigurations · example on GitHub

Example

# AppRunnerObservabilityConfiguration — App Runner
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/apprunner.html#apprunnerobservabilityconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: AppRunnerObservabilityConfiguration
metadata:
  name: example-apprunnerobservabilityconfiguration
  namespace: default
spec:
  observabilityConfigurationName: example-apprunnerobservabilityco
  providerRef:
    name: example-apprunnerobservabilityconfiguration
    region: us-east-1
  tags:
  - key: example
    value: example
  traceConfiguration:
    vendor: AWSXRAY

Spec

Field	Type	Required	Description
`observabilityConfigurationName`	string	—	A name for the observability configuration.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	array<object>	—	A list of metadata items that you can associate with your observability configuration resource.
`tags[].key`	string	yes
`tags[].value`	string	yes
`traceConfiguration`	object	—	The configuration of the tracing feature within this observability configuration.
`traceConfiguration.vendor`	enum	yes	The implementation provider chosen for tracing App Runner services. Allowed: `AWSXRAY`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`latest`	boolean	—	It's set to true for the configuration with the highest Revision among all configurations that share the same Name.
`observabilityConfigurationArn`	string	—	The Amazon Resource Name (ARN) of this ObservabilityConfiguration Read-only: reported by AWS after creation.
`observabilityConfigurationRevision`	integer	—	The revision of this observability configuration.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

AppRunnerService # GA

AppRunnerService is the Schema for managing AWS App Runner services.

kubectl get apprunnerservices · example on GitHub

Example

# AppRunnerService — App Runner
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/apprunner.html#apprunnerservice
apiVersion: aws.konfig.io/v1alpha1
kind: AppRunnerService
metadata:
  name: example-apprunnerservice
  namespace: default
spec:
  healthCheckConfiguration:
    healthyThreshold: 1
    interval: 1
    path: example
    protocol: TCP
    timeout: 1
    unhealthyThreshold: 1
  instanceConfiguration:
    cpu: example
    instanceRoleArn: arn:aws:iam::123456789012:role/example-role
    instanceRoleRef:
      name: example-instancerole
    memory: example
  providerRef:
    name: example-apprunnerservice
    region: us-east-1
  serviceName: example-apprunnerservice
  sourceConfiguration:
    authenticationConfiguration:
      accessRoleArn: arn:aws:iam::123456789012:role/example-role
      accessRoleRef:
        name: example-accessrole
    autoDeploymentsEnabled: true
    imageRepository:
      imageConfiguration:
        port: example
        startCommand: example
      imageIdentifier: example
      imageRepositoryType: ECR
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`healthCheckConfiguration`	object	—	HealthCheckConfiguration configures the service health check.
`healthCheckConfiguration.healthyThreshold`	integer	—	HealthyThreshold is consecutive successes before healthy.
`healthCheckConfiguration.interval`	integer	—	Interval between health checks in seconds.
`healthCheckConfiguration.path`	string	—	Path health check requests are sent to (HTTP only).
`healthCheckConfiguration.protocol`	enum	—	Protocol used for health checks (TCP or HTTP). Allowed: `TCP, HTTP`
`healthCheckConfiguration.timeout`	integer	—	Timeout for a health check response in seconds.
`healthCheckConfiguration.unhealthyThreshold`	integer	—	UnhealthyThreshold is consecutive failures before unhealthy.
`instanceConfiguration`	object	—	InstanceConfiguration configures service instances.
`instanceConfiguration.cpu`	string	—	CPU units reserved for each instance (e.g.
`instanceConfiguration.instanceRoleArn`	string	—	InstanceRoleArn is a direct IAM role ARN the service instances assume.
`instanceConfiguration.instanceRoleRef`	object	—	InstanceRoleRef references an IAMRole CR for the instance role.
`instanceConfiguration.instanceRoleRef.arn`	string	—	ARN is a direct AWS IAM role ARN.
`instanceConfiguration.instanceRoleRef.name`	string	—	Name of an IAMRole CR in the same namespace.
`instanceConfiguration.instanceRoleRef.namespace`	string	—	Namespace of the IAMRole CR.
`instanceConfiguration.memory`	string	—	Memory reserved for each instance (e.g.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceName`	string	yes	ServiceName is the name of the service.
`sourceConfiguration`	object	yes	SourceConfiguration describes the source deployed to the service.
`sourceConfiguration.authenticationConfiguration`	object	—	AuthenticationConfiguration configures source access.
`sourceConfiguration.authenticationConfiguration.accessRoleArn`	string	—	AccessRoleArn is a direct IAM role ARN granting App Runner access to the ECR image (required for private ECR).
`sourceConfiguration.authenticationConfiguration.accessRoleRef`	object	—	AccessRoleRef references an IAMRole CR for the access role.
`sourceConfiguration.authenticationConfiguration.accessRoleRef.arn`	string	—	ARN is a direct AWS IAM role ARN.
`sourceConfiguration.authenticationConfiguration.accessRoleRef.name`	string	—	Name of an IAMRole CR in the same namespace.
`sourceConfiguration.authenticationConfiguration.accessRoleRef.namespace`	string	—	Namespace of the IAMRole CR.
`sourceConfiguration.autoDeploymentsEnabled`	boolean	—	AutoDeploymentsEnabled starts a deployment on each image change.
`sourceConfiguration.imageRepository`	object	yes	ImageRepository describes the source image repository.
`sourceConfiguration.imageRepository.imageConfiguration`	object	—	ImageConfiguration configures how the image runs.
`sourceConfiguration.imageRepository.imageConfiguration.port`	string	—	Port the application listens on in the container.
`sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentVariables`	map<string>	—	RuntimeEnvironmentVariables available to the running service.
`sourceConfiguration.imageRepository.imageConfiguration.startCommand`	string	—	StartCommand overrides the image's default start command.
`sourceConfiguration.imageRepository.imageIdentifier`	string	yes	ImageIdentifier is the image name (ECR) or full URI (ECR Public).
`sourceConfiguration.imageRepository.imageRepositoryType`	enum	yes	ImageRepositoryType is the repository provider. Allowed: `ECR, ECR_PUBLIC`
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`serviceArn`	string	—	ServiceARN is the ARN of the App Runner service.
`serviceId`	string	—	ServiceID is the App Runner generated ID of the service.
`serviceUrl`	string	—	ServiceURL is the subdomain URL of the running service.
`status`	string	—	Status is the current service state (e.g.

AppRunnerVpcConnector # CLOUD CONTROL · AWS::AppRunner::VpcConnector

AppRunnerVpcConnector manages AWS::AppRunner::VpcConnector through the AWS Cloud Control API.

kubectl get apprunnervpcconnectors · example on GitHub

Example

# AppRunnerVpcConnector — App Runner
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/apprunner.html#apprunnervpcconnector
apiVersion: aws.konfig.io/v1alpha1
kind: AppRunnerVpcConnector
metadata:
  name: example-apprunnervpcconnector
  namespace: default
spec:
  providerRef:
    name: example-apprunnervpcconnector
    region: us-east-1
  securityGroups:
  - example
  subnets:
  - example
  tags:
  - key: example
    value: example
  vpcConnectorName: example-apprunnervpcconnector

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`securityGroups`	array<string>	—	A list of IDs of security groups that App Runner should use for access to AWS resources under the specified subnets.
`subnets`	array<string>	yes	A list of IDs of subnets that App Runner should use when it associates your service with a custom Amazon VPC.
`tags`	array<object>	—	A list of metadata items that you can associate with your VPC connector resource.
`tags[].key`	string	yes
`tags[].value`	string	yes
`vpcConnectorName`	string	—	A name for the VPC connector.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`vpcConnectorArn`	string	—	The Amazon Resource Name (ARN) of this VPC connector.
`vpcConnectorRevision`	integer	—	The revision of this VPC connector.

AppRunnerVpcIngressConnection # CLOUD CONTROL · AWS::AppRunner::VpcIngressConnection

AppRunnerVpcIngressConnection manages AWS::AppRunner::VpcIngressConnection through the AWS Cloud Control API.

kubectl get apprunnervpcingressconnections · example on GitHub

Example

# AppRunnerVpcIngressConnection — App Runner
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/apprunner.html#apprunnervpcingressconnection
apiVersion: aws.konfig.io/v1alpha1
kind: AppRunnerVpcIngressConnection
metadata:
  name: example-apprunnervpcingressconnection
  namespace: default
spec:
  ingressVpcConfiguration:
    vpcEndpointId: example-id
    vpcId: vpc-0abc12def3456789
  providerRef:
    name: example-apprunnervpcingressconnection
    region: us-east-1
  serviceArn: arn:aws:iam::123456789012:role/example-role
  tags:
  - key: example
    value: example
  vpcIngressConnectionName: example-apprunnervpcingressconnection

Spec

Field	Type	Required	Description
`ingressVpcConfiguration`	object	yes	AppRunnerVpcIngressConnectionIngressVpcConfiguration is a nested property type of AWS::AppRunner::VpcIngressConnection.
`ingressVpcConfiguration.vpcEndpointId`	string	yes	The ID of the VPC endpoint that your App Runner service connects to.
`ingressVpcConfiguration.vpcId`	string	yes	The ID of the VPC that the VPC endpoint is used in.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceArn`	string	yes	The Amazon Resource Name (ARN) of the service.
`tags`	array<object>	—	Create-only in AWS: changing it requires replacing the resource.
`tags[].key`	string	yes
`tags[].value`	string	yes
`vpcIngressConnectionName`	string	—	The customer-provided Vpc Ingress Connection name.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`domainName`	string	—	The Domain name associated with the VPC Ingress Connection.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	The current status of the VpcIngressConnection. Allowed: `AVAILABLE, PENDING_CREATION, PENDING_UPDATE, PENDING_DELETION, FAILED_CREATION, FAILED_UPDATE, FAILED_DELETION, DELETED`
`vpcIngressConnectionArn`	string	—	The Amazon Resource Name (ARN) of the VpcIngressConnection.