CodeBuild

4 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

CodeBuildFleet # CLOUD CONTROL · AWS::CodeBuild::Fleet

CodeBuildFleet manages AWS::CodeBuild::Fleet through the AWS Cloud Control API.

kubectl get codebuildfleets · example on GitHub

Example

# CodeBuildFleet — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildfleet
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildFleet
metadata:
  name: example-codebuildfleet
  namespace: default
spec:
  baseCapacity: 1
  computeConfiguration:
    disk: 1
    instanceType: example
    machineType: GENERAL
    memory: 1
    vCpu: 1
  computeType: BUILD_GENERAL1_SMALL
  environmentType: WINDOWS_SERVER_2019_CONTAINER
  fleetProxyConfiguration:
    defaultBehavior: ALLOW_ALL
    orderedProxyRules:
    - effect: ALLOW
      entities:
      - example
      type: DOMAIN
  fleetServiceRole: example
  fleetVpcConfig:
    securityGroupIds:
    - example
    subnets:
    - example
  name: example-codebuildfleet
  overflowBehavior: QUEUE
  providerRef:
    name: example-codebuildfleet
    region: us-east-1
  scalingConfiguration:
    maxCapacity: 1
    scalingType: TARGET_TRACKING_SCALING
    targetTrackingScalingConfigs:
    - metricType: FLEET_UTILIZATION_RATE
      targetValue: 1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
baseCapacityinteger—
computeConfigurationobject—CodeBuildFleetComputeConfiguration is a nested property type of AWS::CodeBuild::Fleet.
computeConfiguration.diskinteger—
computeConfiguration.instanceTypestring—
computeConfiguration.machineTypeenum—Allowed: GENERAL, NVME
computeConfiguration.memoryinteger—
computeConfiguration.vCpuinteger—
computeTypeenum—Allowed: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE, BUILD_GENERAL1_XLARGE, BUILD_GENERAL1_2XLARGE, ATTRIBUTE_BASED_COMPUTE, CUSTOM_INSTANCE_TYPE
environmentTypeenum—Allowed: WINDOWS_SERVER_2019_CONTAINER, WINDOWS_SERVER_2022_CONTAINER, LINUX_CONTAINER, LINUX_GPU_CONTAINER, ARM_CONTAINER, MAC_ARM, LINUX_EC2, ARM_EC2…
fleetProxyConfigurationobject—CodeBuildFleetProxyConfiguration is a nested property type of AWS::CodeBuild::Fleet.
fleetProxyConfiguration.defaultBehaviorenum—Allowed: ALLOW_ALL, DENY_ALL
fleetProxyConfiguration.orderedProxyRulesarray<object>—
fleetProxyConfiguration.orderedProxyRules[].effectenum—Allowed: ALLOW, DENY
fleetProxyConfiguration.orderedProxyRules[].entitiesarray<string>—
fleetProxyConfiguration.orderedProxyRules[].typeenum—Allowed: DOMAIN, IP
fleetServiceRolestring—
fleetVpcConfigobject—CodeBuildFleetVpcConfig is a nested property type of AWS::CodeBuild::Fleet.
fleetVpcConfig.securityGroupIdsarray<string>—
fleetVpcConfig.subnetsarray<string>—
fleetVpcConfig.vpcIdstring—
imageIdstring—
namestring—
overflowBehaviorenum—Allowed: QUEUE, ON_DEMAND
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
scalingConfigurationobject—CodeBuildFleetScalingConfigurationInput is a nested property type of AWS::CodeBuild::Fleet.
scalingConfiguration.maxCapacityinteger—
scalingConfiguration.scalingTypeenum—Allowed: TARGET_TRACKING_SCALING
scalingConfiguration.targetTrackingScalingConfigsarray<object>—
scalingConfiguration.targetTrackingScalingConfigs[].metricTypeenum—Allowed: FLEET_UTILIZATION_RATE
scalingConfiguration.targetTrackingScalingConfigs[].targetValuenumber—
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
arnstring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

CodeBuildProject # GA

CodeBuildProject is the Schema for managing AWS CodeBuild projects.

kubectl get codebuildprojects · example on GitHub

Example

# CodeBuildProject — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildproject
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildProject
metadata:
  name: example-codebuildproject
  namespace: default
spec:
  artifacts:
    location: example
    type: CODEPIPELINE
  description: Managed by konfig-konector
  environment:
    computeType: BUILD_GENERAL1_SMALL
    image: example
    privilegedMode: false
    type: LINUX_CONTAINER
  name: example-codebuildproject
  providerRef:
    name: example-codebuildproject
    region: us-east-1
  serviceRoleARN: arn:aws:iam::123456789012:role/example-role
  source:
    buildspec: example
    location: example
    type: CODECOMMIT
  tags:
    environment: dev
    team: platform

Spec

FieldTypeRequiredDescription
artifactsobjectyesArtifacts defines where build output is stored.
artifacts.locationstring—Location is the S3 bucket name (required when type is S3).
artifacts.typeenumyesType is the artifact type (CODEPIPELINE, S3, NO_ARTIFACTS). Allowed: CODEPIPELINE, S3, NO_ARTIFACTS
descriptionstring—Description is an optional project description.
environmentobjectyesEnvironment defines the build environment.
environment.computeTypeenumyesComputeType is the build instance type. Allowed: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE, BUILD_GENERAL1_2XLARGE
environment.imagestringyesImage is the Docker image to use for the build environment.
environment.privilegedModeboolean—PrivilegedMode enables Docker daemon access.
environment.typeenumyesType is the environment type (LINUX_CONTAINER, WINDOWS_SERVER_2019_CONTAINER, ARM_CONTAINER, etc.). Allowed: LINUX_CONTAINER, WINDOWS_SERVER_2019_CONTAINER, ARM_CONTAINER, LINUX_GPU_CONTAINER
namestringyesName is the project name.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
serviceRoleARNstringyesServiceRoleARN is the ARN of the IAM role that enables CodeBuild to access resources.
sourceobjectyesSource defines the source configuration.
source.buildspecstring—Buildspec is the inline buildspec or path to the buildspec file.
source.locationstring—Location is the source location (e.g.
source.typeenumyesType is the source type (CODECOMMIT, CODEPIPELINE, GITHUB, S3, BITBUCKET, NO_SOURCE). Allowed: CODECOMMIT, CODEPIPELINE, GITHUB, S3, BITBUCKET, NO_SOURCE
tagsmap<string>—Tags are metadata tags for the project.

Status

FieldTypeRequiredDescription
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
lastSyncTimestring—LastSyncTime is when the resource was last successfully reconciled.
observedGenerationinteger—ObservedGeneration is the most recent .metadata.generation reconciled.
projectARNstring—ProjectARN is the ARN of the CodeBuild project.

CodeBuildReportGroup # CLOUD CONTROL · AWS::CodeBuild::ReportGroup

CodeBuildReportGroup manages AWS::CodeBuild::ReportGroup through the AWS Cloud Control API.

kubectl get codebuildreportgroups · example on GitHub

Example

# CodeBuildReportGroup — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildreportgroup
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildReportGroup
metadata:
  name: example-codebuildreportgroup
  namespace: default
spec:
  deleteReports: false
  exportConfig:
    exportConfigType: S3
    s3Destination:
      bucket: example
      bucketOwner: example
      encryptionDisabled: true
      encryptionKey: example
      packaging: NONE
      path: example
  name: example-codebuildreportgroup
  providerRef:
    name: example-codebuildreportgroup
    region: us-east-1
  tags:
  - key: example
    value: example
  type: TEST

Spec

FieldTypeRequiredDescription
deleteReportsboolean—
exportConfigobjectyesCodeBuildReportGroupReportExportConfig is a nested property type of AWS::CodeBuild::ReportGroup.
exportConfig.exportConfigTypeenumyesAllowed: S3, NO_EXPORT
exportConfig.s3Destinationobject—CodeBuildReportGroupS3ReportExportConfig is a nested property type of AWS::CodeBuild::ReportGroup.
exportConfig.s3Destination.bucketstringyes
exportConfig.s3Destination.bucketOwnerstring—
exportConfig.s3Destination.encryptionDisabledboolean—
exportConfig.s3Destination.encryptionKeystring—
exportConfig.s3Destination.packagingenum—Allowed: NONE, ZIP
exportConfig.s3Destination.pathstring—
namestring—Create-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes
typeenumyesCreate-only in AWS: changing it requires replacing the resource. Allowed: TEST, CODE_COVERAGE

Status

FieldTypeRequiredDescription
arnstring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

CodeBuildSourceCredential # CLOUD CONTROL · AWS::CodeBuild::SourceCredential ⚠ DESTRUCTIVE SCOPE

Caution, destructive scope: spec must contain a source token in plain text. Provided for completeness; do not use from application namespaces. Restrict with AWSProvider.allowedNamespaces and RBAC. CodeBuildSourceCredential manages AWS::CodeBuild::SourceCredential through the AWS Cloud Control API.

kubectl get codebuildsourcecredentials · example on GitHub

Example

# CodeBuildSourceCredential — CodeBuild
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/codebuild.html#codebuildsourcecredential
apiVersion: aws.konfig.io/v1alpha1
kind: CodeBuildSourceCredential
metadata:
  name: example-codebuildsourcecredential
  namespace: default
spec:
  authType: example
  providerRef:
    name: example-codebuildsourcecredential
    region: us-east-1
  serverType: example
  token: example
  username: example-codebuildsourcecredential

Spec

FieldTypeRequiredDescription
authTypestringyesThe type of authentication used by the credentials.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
serverTypestringyesThe type of source provider.
tokenstringyesFor GitHub or GitHub Enterprise, this is the personal access token.
usernamestring—The Bitbucket username when the authType is BASIC_AUTH.

Status

FieldTypeRequiredDescription
arnstring—The ARN of the SourceCredential resource.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.