Cloud Control API

1 resource kind. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

CloudControlResource # GA

CloudControlResource manages any AWS Cloud Control API resource type.

kubectl get cloudcontrolresources · example on GitHub

Example

# CloudControlResource — Cloud Control API
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudcontrol.html#cloudcontrolresource
apiVersion: aws.konfig.io/v1alpha1
kind: CloudControlResource
metadata:
  name: example-cloudcontrolresource
  namespace: default
spec:
  identifier: example
  providerRef:
    name: example-cloudcontrolresource
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  typeName: example-cloudcontrolresource

Spec

FieldTypeRequiredDescription
desiredStateobjectyesDesiredState is the resource's properties as a JSON object, using the CloudFormation property names for the type.
identifierstring—Identifier adopts an existing resource by its Cloud Control primary identifier instead of creating a new one.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
roleArnstring—RoleARN is an IAM role Cloud Control assumes to perform the operation, instead of the caller's credentials.
typeNamestringyesTypeName is the CloudFormation resource type, e.g.
typeVersionIdstring—TypeVersionID pins a specific registered version of the type.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
propertiesobject—Properties is the live resource model as returned by GetResource.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.