CodeBuild
4 resource kinds. Generated from the operator's CRD schemas.
aws.konfig.io/v1alpha1
CodeBuildFleet # CLOUD CONTROL · AWS::CodeBuild::Fleet
CodeBuildFleet manages AWS::CodeBuild::Fleet through the AWS Cloud Control API.
kubectl get codebuildfleets · example on GitHub
Example
# CodeBuildFleet — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildfleet
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildFleet
metadata:
name: example-codebuildfleet
namespace: default
spec:
baseCapacity: 1
computeConfiguration:
disk: 1
instanceType: example
machineType: GENERAL
memory: 1
vCpu: 1
computeType: BUILD_GENERAL1_SMALL
environmentType: WINDOWS_SERVER_2019_CONTAINER
fleetProxyConfiguration:
defaultBehavior: ALLOW_ALL
orderedProxyRules:
- effect: ALLOW
entities:
- example
type: DOMAIN
fleetServiceRole: example
fleetVpcConfig:
securityGroupIds:
- example
subnets:
- example
name: example-codebuildfleet
overflowBehavior: QUEUE
providerRef:
name: example-codebuildfleet
region: us-east-1
scalingConfiguration:
maxCapacity: 1
scalingType: TARGET_TRACKING_SCALING
targetTrackingScalingConfigs:
- metricType: FLEET_UTILIZATION_RATE
targetValue: 1
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
baseCapacity | integer | — | |
computeConfiguration | object | — | CodeBuildFleetComputeConfiguration is a nested property type of AWS::CodeBuild::Fleet. |
computeConfiguration.disk | integer | — | |
computeConfiguration.instanceType | string | — | |
computeConfiguration.machineType | enum | — | Allowed: GENERAL, NVME |
computeConfiguration.memory | integer | — | |
computeConfiguration.vCpu | integer | — | |
computeType | enum | — | Allowed: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE, BUILD_GENERAL1_XLARGE, BUILD_GENERAL1_2XLARGE, ATTRIBUTE_BASED_COMPUTE, CUSTOM_INSTANCE_TYPE |
environmentType | enum | — | Allowed: WINDOWS_SERVER_2019_CONTAINER, WINDOWS_SERVER_2022_CONTAINER, LINUX_CONTAINER, LINUX_GPU_CONTAINER, ARM_CONTAINER, MAC_ARM, LINUX_EC2, ARM_EC2… |
fleetProxyConfiguration | object | — | CodeBuildFleetProxyConfiguration is a nested property type of AWS::CodeBuild::Fleet. |
fleetProxyConfiguration.defaultBehavior | enum | — | Allowed: ALLOW_ALL, DENY_ALL |
fleetProxyConfiguration.orderedProxyRules | array<object> | — | |
fleetProxyConfiguration.orderedProxyRules[].effect | enum | — | Allowed: ALLOW, DENY |
fleetProxyConfiguration.orderedProxyRules[].entities | array<string> | — | |
fleetProxyConfiguration.orderedProxyRules[].type | enum | — | Allowed: DOMAIN, IP |
fleetServiceRole | string | — | |
fleetVpcConfig | object | — | CodeBuildFleetVpcConfig is a nested property type of AWS::CodeBuild::Fleet. |
fleetVpcConfig.securityGroupIds | array<string> | — | |
fleetVpcConfig.subnets | array<string> | — | |
fleetVpcConfig.vpcId | string | — | |
imageId | string | — | |
name | string | — | |
overflowBehavior | enum | — | Allowed: QUEUE, ON_DEMAND |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
scalingConfiguration | object | — | CodeBuildFleetScalingConfigurationInput is a nested property type of AWS::CodeBuild::Fleet. |
scalingConfiguration.maxCapacity | integer | — | |
scalingConfiguration.scalingType | enum | — | Allowed: TARGET_TRACKING_SCALING |
scalingConfiguration.targetTrackingScalingConfigs | array<object> | — | |
scalingConfiguration.targetTrackingScalingConfigs[].metricType | enum | — | Allowed: FLEET_UTILIZATION_RATE |
scalingConfiguration.targetTrackingScalingConfigs[].targetValue | number | — | |
tags | array<object> | — | |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Read-only: reported by AWS after creation. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
CodeBuildProject # GA
CodeBuildProject is the Schema for managing AWS CodeBuild projects.
kubectl get codebuildprojects · example on GitHub
Example
# CodeBuildProject — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildproject
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildProject
metadata:
name: example-codebuildproject
namespace: default
spec:
artifacts:
location: example
type: CODEPIPELINE
description: Managed by konfig-konector
environment:
computeType: BUILD_GENERAL1_SMALL
image: example
privilegedMode: false
type: LINUX_CONTAINER
name: example-codebuildproject
providerRef:
name: example-codebuildproject
region: us-east-1
serviceRoleARN: arn:aws:iam::123456789012:role/example-role
source:
buildspec: example
location: example
type: CODECOMMIT
tags:
environment: dev
team: platform
Spec
| Field | Type | Required | Description |
|---|---|---|---|
artifacts | object | yes | Artifacts defines where build output is stored. |
artifacts.location | string | — | Location is the S3 bucket name (required when type is S3). |
artifacts.type | enum | yes | Type is the artifact type (CODEPIPELINE, S3, NO_ARTIFACTS). Allowed: CODEPIPELINE, S3, NO_ARTIFACTS |
description | string | — | Description is an optional project description. |
environment | object | yes | Environment defines the build environment. |
environment.computeType | enum | yes | ComputeType is the build instance type. Allowed: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE, BUILD_GENERAL1_2XLARGE |
environment.image | string | yes | Image is the Docker image to use for the build environment. |
environment.privilegedMode | boolean | — | PrivilegedMode enables Docker daemon access. |
environment.type | enum | yes | Type is the environment type (LINUX_CONTAINER, WINDOWS_SERVER_2019_CONTAINER, ARM_CONTAINER, etc.). Allowed: LINUX_CONTAINER, WINDOWS_SERVER_2019_CONTAINER, ARM_CONTAINER, LINUX_GPU_CONTAINER |
name | string | yes | Name is the project name. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
serviceRoleARN | string | yes | ServiceRoleARN is the ARN of the IAM role that enables CodeBuild to access resources. |
source | object | yes | Source defines the source configuration. |
source.buildspec | string | — | Buildspec is the inline buildspec or path to the buildspec file. |
source.location | string | — | Location is the source location (e.g. |
source.type | enum | yes | Type is the source type (CODECOMMIT, CODEPIPELINE, GITHUB, S3, BITBUCKET, NO_SOURCE). Allowed: CODECOMMIT, CODEPIPELINE, GITHUB, S3, BITBUCKET, NO_SOURCE |
tags | map<string> | — | Tags are metadata tags for the project. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
lastSyncTime | string | — | LastSyncTime is when the resource was last successfully reconciled. |
observedGeneration | integer | — | ObservedGeneration is the most recent .metadata.generation reconciled. |
projectARN | string | — | ProjectARN is the ARN of the CodeBuild project. |
CodeBuildReportGroup # CLOUD CONTROL · AWS::CodeBuild::ReportGroup
CodeBuildReportGroup manages AWS::CodeBuild::ReportGroup through the AWS Cloud Control API.
kubectl get codebuildreportgroups · example on GitHub
Example
# CodeBuildReportGroup — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildreportgroup
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildReportGroup
metadata:
name: example-codebuildreportgroup
namespace: default
spec:
deleteReports: false
exportConfig:
exportConfigType: S3
s3Destination:
bucket: example
bucketOwner: example
encryptionDisabled: true
encryptionKey: example
packaging: NONE
path: example
name: example-codebuildreportgroup
providerRef:
name: example-codebuildreportgroup
region: us-east-1
tags:
- key: example
value: example
type: TEST
Spec
| Field | Type | Required | Description |
|---|---|---|---|
deleteReports | boolean | — | |
exportConfig | object | yes | CodeBuildReportGroupReportExportConfig is a nested property type of AWS::CodeBuild::ReportGroup. |
exportConfig.exportConfigType | enum | yes | Allowed: S3, NO_EXPORT |
exportConfig.s3Destination | object | — | CodeBuildReportGroupS3ReportExportConfig is a nested property type of AWS::CodeBuild::ReportGroup. |
exportConfig.s3Destination.bucket | string | yes | |
exportConfig.s3Destination.bucketOwner | string | — | |
exportConfig.s3Destination.encryptionDisabled | boolean | — | |
exportConfig.s3Destination.encryptionKey | string | — | |
exportConfig.s3Destination.packaging | enum | — | Allowed: NONE, ZIP |
exportConfig.s3Destination.path | string | — | |
name | string | — | Create-only in AWS: changing it requires replacing the resource. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tags | array<object> | — | |
tags[].key | string | yes | |
tags[].value | string | yes | |
type | enum | yes | Create-only in AWS: changing it requires replacing the resource. Allowed: TEST, CODE_COVERAGE |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Read-only: reported by AWS after creation. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
CodeBuildSourceCredential # CLOUD CONTROL · AWS::CodeBuild::SourceCredential ⚠ DESTRUCTIVE SCOPE
Caution, destructive scope: spec must contain a source token in plain text. Provided for completeness; do not use from application namespaces. Restrict with AWSProvider.allowedNamespaces and RBAC. CodeBuildSourceCredential manages AWS::CodeBuild::SourceCredential through the AWS Cloud Control API.
kubectl get codebuildsourcecredentials · example on GitHub
Example
# CodeBuildSourceCredential — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildsourcecredential
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildSourceCredential
metadata:
name: example-codebuildsourcecredential
namespace: default
spec:
authType: example
providerRef:
name: example-codebuildsourcecredential
region: us-east-1
serverType: example
token: example
username: example-codebuildsourcecredential
Spec
| Field | Type | Required | Description |
|---|---|---|---|
authType | string | yes | The type of authentication used by the credentials. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
serverType | string | yes | The type of source provider. |
token | string | yes | For GitHub or GitHub Enterprise, this is the personal access token. |
username | string | — | The Bitbucket username when the authType is BASIC_AUTH. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | The ARN of the SourceCredential resource. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |