Elastic Load Balancing

7 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

ELBLoadBalancer # CLOUD CONTROL · AWS::ElasticLoadBalancing::LoadBalancer

ELBLoadBalancer manages AWS::ElasticLoadBalancing::LoadBalancer through the AWS Cloud Control API.

kubectl get elbloadbalancers · example on GitHub

Example

# ELBLoadBalancer — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#elbloadbalancer
apiVersion: aws.konfig.io/v1alpha1
kind: ELBLoadBalancer
metadata:
  name: example-elbloadbalancer
  namespace: default
spec:
  accessLoggingPolicy:
    emitInterval: 1
    enabled: true
    s3BucketName: example-elbloadbalancer
    s3BucketPrefix: example
  appCookieStickinessPolicy:
  - cookieName: example-elbloadbalancer
    policyName: example-elbloadbalancer
  availabilityZones:
  - us-east-1a
  connectionDrainingPolicy:
    enabled: true
    timeout: 300
  connectionSettings:
    idleTimeout: 300
  crossZone: false
  healthCheck:
    healthyThreshold: example
    interval: example
    target: example
    timeout: '2026-01-01T00:00:00Z'
    unhealthyThreshold: example
  instances:
  - example
  lbCookieStickinessPolicy:
  - cookieExpirationPeriod: example
    policyName: example-elbloadbalancer
  listeners:
  - instancePort: example
    instanceProtocol: example
    loadBalancerPort: example
    policyNames:
    - example
    protocol: example
  loadBalancerName: example-elbloadbalancer
  policies:
  - attributes:
    - name: example-elbloadbalancer
      value: example
    instancePorts:
    - example
    loadBalancerPorts:
    - example
    policyName: example-elbloadbalancer
    policyType: example
  providerRef:
    name: example-elbloadbalancer
    region: us-east-1
  scheme: example
  securityGroups:
  - example
  subnets:
  - example
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`accessLoggingPolicy`	object	—	Information about where and how access logs are stored for the load balancer.
`accessLoggingPolicy.emitInterval`	integer	—	The interval for publishing the access logs.
`accessLoggingPolicy.enabled`	boolean	yes	Specifies whether access logs are enabled for the load balancer.
`accessLoggingPolicy.s3BucketName`	string	yes	The name of the Amazon S3 bucket where the access logs are stored.
`accessLoggingPolicy.s3BucketPrefix`	string	—	The logical hierarchy you created for your Amazon S3 bucket, for example `my-bucket-prefix/prod`.
`appCookieStickinessPolicy`	array<object>	—	Information about a policy for application-controlled session stickiness.
`appCookieStickinessPolicy[].cookieName`	string	yes	The name of the application cookie used for stickiness.
`appCookieStickinessPolicy[].policyName`	string	yes	The mnemonic name for the policy being created.
`availabilityZones`	array<string>	—	The Availability Zones for a load balancer in a default VPC.
`connectionDrainingPolicy`	object	—	If enabled, the load balancer allows existing requests to complete before the load balancer shifts traffic away from a deregistered or unhealthy instance.
`connectionDrainingPolicy.enabled`	boolean	yes	Specifies whether connection draining is enabled for the load balancer.
`connectionDrainingPolicy.timeout`	integer	—	The maximum time, in seconds, to keep the existing connections open before deregistering the instances.
`connectionSettings`	object	—	If enabled, the load balancer allows the connections to remain idle (no data is sent over the connection) for the specified duration.
`connectionSettings.idleTimeout`	integer	yes	The time, in seconds, that the connection is allowed to be idle (no data has been sent over the connection) before it is closed by the load balancer.
`crossZone`	boolean	—	If enabled, the load balancer routes the request traffic evenly across all instances regardless of the Availability Zones.
`healthCheck`	object	—	The health check settings to use when evaluating the health of your EC2 instances.
`healthCheck.healthyThreshold`	string	yes	The number of consecutive health checks successes required before moving the instance to the `Healthy` state.
`healthCheck.interval`	string	yes	The approximate interval, in seconds, between health checks of an individual instance.
`healthCheck.target`	string	yes	The instance being checked.
`healthCheck.timeout`	string	yes	The amount of time, in seconds, during which no response means a failed health check.
`healthCheck.unhealthyThreshold`	string	yes	The number of consecutive health check failures required before moving the instance to the `Unhealthy` state.
`instances`	array<string>	—	The IDs of the instances for the load balancer.
`lbCookieStickinessPolicy`	array<object>	—	Information about a policy for duration-based session stickiness.
`lbCookieStickinessPolicy[].cookieExpirationPeriod`	string	—	The time period, in seconds, after which the cookie should be considered stale.
`lbCookieStickinessPolicy[].policyName`	string	—	The name of the policy.
`listeners`	array<object>	yes	The Listeners for the load balancer.
`listeners[].instancePort`	string	yes	The port on which the instance is listening.
`listeners[].instanceProtocol`	string	—	The protocol to use for routing traffic to instances: HTTP, HTTPS, TCP, or SSL.
`listeners[].loadBalancerPort`	string	yes	The port on which the load balancer is listening.
`listeners[].policyNames`	array<string>	—	The names of the policies to associate with the listener.
`listeners[].protocol`	string	yes	The load balancer transport protocol to use for routing: HTTP, HTTPS, TCP, or SSL.
`listeners[].sslCertificateId`	string	—	The Amazon Resource Name (ARN) of the server certificate.
`loadBalancerName`	string	—	The name of the load balancer.
`policies`	array<object>	—	The policies defined for your Classic Load Balancer.
`policies[].attributes`	array<object>	yes	The policy attributes.
`policies[].attributes[].name`	string	—
`policies[].attributes[].value`	string	—
`policies[].instancePorts`	array<string>	—	The instance ports for the policy.
`policies[].loadBalancerPorts`	array<string>	—	The load balancer ports for the policy.
`policies[].policyName`	string	yes	The name of the policy.
`policies[].policyType`	string	yes	The name of the policy type.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`scheme`	string	—	The type of load balancer.
`securityGroups`	array<string>	—	The security groups for the load balancer.
`subnets`	array<string>	—	The IDs of the subnets for the load balancer.
`tags`	array<object>	—	The tags associated with a load balancer.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`canonicalHostedZoneName`	string	—	The name of the Route 53 hosted zone that is associated with the load balancer.
`canonicalHostedZoneNameID`	string	—	The ID of the Route 53 hosted zone name that is associated with the load balancer.
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`dnsName`	string	—	The DNS name for the load balancer Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`sourceSecurityGroup`	object	—	Read-only: reported by AWS after creation.
`sourceSecurityGroup.groupName`	string	—	The name of the security group that you can use as part of your inbound rules for your load balancer's back-end instances.
`sourceSecurityGroup.ownerAlias`	string	—	The owner of the source security group.

ELBv2TrustStore # CLOUD CONTROL · AWS::ElasticLoadBalancingV2::TrustStore

ELBv2TrustStore manages AWS::ElasticLoadBalancingV2::TrustStore through the AWS Cloud Control API.

kubectl get elbv2truststores · example on GitHub

Example

# ELBv2TrustStore — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#elbv2truststore
apiVersion: aws.konfig.io/v1alpha1
kind: ELBv2TrustStore
metadata:
  name: example-elbv2truststore
  namespace: default
spec:
  caCertificatesBundleS3Bucket: example
  caCertificatesBundleS3Key: example
  caCertificatesBundleS3ObjectVersion: '1.0'
  name: example-elbv2truststore
  providerRef:
    name: example-elbv2truststore
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`caCertificatesBundleS3Bucket`	string	—	The name of the S3 bucket to fetch the CA certificate bundle from.
`caCertificatesBundleS3Key`	string	—	The name of the S3 object to fetch the CA certificate bundle from.
`caCertificatesBundleS3ObjectVersion`	string	—	The version of the S3 bucket that contains the CA certificate bundle.
`name`	string	—	The name of the trust store.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	array<object>	—	The tags to assign to the trust store.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`numberOfCaCertificates`	integer	—	The number of certificates associated with the trust store.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	string	—	The status of the trust store, could be either of ACTIVE or CREATING.
`trustStoreArn`	string	—	The Amazon Resource Name (ARN) of the trust store.

ELBv2TrustStoreRevocation # CLOUD CONTROL · AWS::ElasticLoadBalancingV2::TrustStoreRevocation

ELBv2TrustStoreRevocation manages AWS::ElasticLoadBalancingV2::TrustStoreRevocation through the AWS Cloud Control API.

kubectl get elbv2truststorerevocations · example on GitHub

Example

# ELBv2TrustStoreRevocation — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#elbv2truststorerevocation
apiVersion: aws.konfig.io/v1alpha1
kind: ELBv2TrustStoreRevocation
metadata:
  name: example-elbv2truststorerevocation
  namespace: default
spec:
  providerRef:
    name: example-elbv2truststorerevocation
    region: us-east-1
  revocationContents:
  - revocationType: example
    s3Bucket: example
    s3Key: example
    s3ObjectVersion: '1.0'
  trustStoreArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`revocationContents`	array<object>	—	The attributes required to create a trust store revocation.
`revocationContents[].revocationType`	string	—
`revocationContents[].s3Bucket`	string	—
`revocationContents[].s3Key`	string	—
`revocationContents[].s3ObjectVersion`	string	—
`trustStoreArn`	string	—	The Amazon Resource Name (ARN) of the trust store.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`revocationId`	integer	—	The ID associated with the revocation.
`trustStoreRevocations`	array<object>	—	The data associated with a trust store revocation Read-only: reported by AWS after creation.
`trustStoreRevocations[].numberOfRevokedEntries`	integer	—
`trustStoreRevocations[].revocationId`	string	—
`trustStoreRevocations[].revocationType`	string	—
`trustStoreRevocations[].trustStoreArn`	string	—

Listener # GA

Listener is the Schema for managing ELBv2 Listeners.

kubectl get listeners · example on GitHub

Example

# Listener — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#listener
apiVersion: aws.konfig.io/v1alpha1
kind: Listener
metadata:
  name: example-listener
  namespace: default
spec:
  certificateArns:
  - example
  defaultActions:
  - fixedResponseConfig:
      contentType: example
      messageBody: example
      statusCode: example
    redirectConfig:
      host: example
      path: example
      port: example
      protocol: example
      statusCode: HTTP_301
    targetGroupRef:
      name: example-targetgroup
    type: forward
  loadBalancerRef:
    name: example-loadbalancer
  port: 1
  protocol: HTTP
  providerRef:
    name: example-listener
    region: us-east-1
  sslPolicy: example
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`certificateArns`	array<string>	—	CertificateARNs are the TLS certificate ARNs (for HTTPS/TLS).
`defaultActions`	array<object>	yes	DefaultActions are the default actions for the listener.
`defaultActions[].fixedResponseConfig`	object	—	FixedResponseConfig configures a fixed response.
`defaultActions[].fixedResponseConfig.contentType`	string	—	ContentType is the response content type.
`defaultActions[].fixedResponseConfig.messageBody`	string	—	MessageBody is the response body.
`defaultActions[].fixedResponseConfig.statusCode`	string	yes	StatusCode is the HTTP status code.
`defaultActions[].redirectConfig`	object	—	RedirectConfig configures a redirect action.
`defaultActions[].redirectConfig.host`	string	—	Host is the redirect host.
`defaultActions[].redirectConfig.path`	string	—	Path is the redirect path.
`defaultActions[].redirectConfig.port`	string	—	Port is the redirect port.
`defaultActions[].redirectConfig.protocol`	string	—	Protocol is the redirect protocol.
`defaultActions[].redirectConfig.statusCode`	enum	yes	StatusCode is the HTTP redirect code. Allowed: `HTTP_301, HTTP_302`
`defaultActions[].targetGroupRef`	object	—	TargetGroupRef is the target group for a forward action.
`defaultActions[].targetGroupRef.arn`	string	—	ARN is a direct AWS target group ARN.
`defaultActions[].targetGroupRef.name`	string	—	Name of a TargetGroup CR in the same namespace.
`defaultActions[].type`	enum	yes	Type is the action type. Allowed: `forward, redirect, fixed-response`
`loadBalancerRef`	object	yes	LoadBalancerRef references the load balancer.
`loadBalancerRef.arn`	string	—	ARN is a direct AWS load balancer ARN.
`loadBalancerRef.name`	string	—	Name of a LoadBalancer CR in the same namespace.
`port`	integer	yes	Port is the listener port.
`protocol`	enum	yes	Protocol is the listener protocol. Allowed: `HTTP, HTTPS, TCP, TLS, UDP, TCP_UDP, GENEVE`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`sslPolicy`	string	—	SSLPolicy is the security policy for HTTPS/TLS.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the listener.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

ListenerRule # GA

ListenerRule is the Schema for managing ELBv2 Listener Rules.

kubectl get listenerrules · example on GitHub

Example

# ListenerRule — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#listenerrule
apiVersion: aws.konfig.io/v1alpha1
kind: ListenerRule
metadata:
  name: example-listenerrule
  namespace: default
spec:
  actions:
  - fixedResponseConfig:
      contentType: example
      messageBody: example
      statusCode: example
    redirectConfig:
      host: example
      path: example
      port: example
      protocol: example
      statusCode: HTTP_301
    targetGroupRef:
      name: example-targetgroup
    type: forward
  conditions:
  - field: example
    values:
    - example
  listenerRef:
    name: example-listener
  priority: 1
  providerRef:
    name: example-listenerrule
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`actions`	array<object>	yes	Actions are the rule actions (same structure as listener default actions).
`actions[].fixedResponseConfig`	object	—	FixedResponseConfig configures a fixed response.
`actions[].fixedResponseConfig.contentType`	string	—	ContentType is the response content type.
`actions[].fixedResponseConfig.messageBody`	string	—	MessageBody is the response body.
`actions[].fixedResponseConfig.statusCode`	string	yes	StatusCode is the HTTP status code.
`actions[].redirectConfig`	object	—	RedirectConfig configures a redirect action.
`actions[].redirectConfig.host`	string	—	Host is the redirect host.
`actions[].redirectConfig.path`	string	—	Path is the redirect path.
`actions[].redirectConfig.port`	string	—	Port is the redirect port.
`actions[].redirectConfig.protocol`	string	—	Protocol is the redirect protocol.
`actions[].redirectConfig.statusCode`	enum	yes	StatusCode is the HTTP redirect code. Allowed: `HTTP_301, HTTP_302`
`actions[].targetGroupRef`	object	—	TargetGroupRef is the target group for a forward action.
`actions[].targetGroupRef.arn`	string	—	ARN is a direct AWS target group ARN.
`actions[].targetGroupRef.name`	string	—	Name of a TargetGroup CR in the same namespace.
`actions[].type`	enum	yes	Type is the action type. Allowed: `forward, redirect, fixed-response`
`conditions`	array<object>	yes	Conditions are the rule conditions.
`conditions[].field`	string	yes	Field is the condition field (e.g.
`conditions[].values`	array<string>	—	Values are the values to match.
`listenerRef`	object	yes	ListenerRef references the Listener.
`listenerRef.arn`	string	—	ARN is a direct AWS listener ARN.
`listenerRef.name`	string	—	Name of a Listener CR in the same namespace.
`priority`	integer	yes	Priority is the rule priority (1-50000).
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the listener rule.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

LoadBalancer # GA

LoadBalancer is the Schema for managing ELBv2 Load Balancers.

kubectl get loadbalancers · example on GitHub

Example

# LoadBalancer — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#loadbalancer
apiVersion: aws.konfig.io/v1alpha1
kind: LoadBalancer
metadata:
  name: example-loadbalancer
  namespace: default
spec:
  deletionProtection: true
  idleTimeout: 300
  name: example-loadbalancer
  providerRef:
    name: example-loadbalancer
    region: us-east-1
  scheme: internet-facing
  securityGroupRefs:
  - name: example-securitygrouprefs
  subnetRefs:
  - name: example-subnetrefs
  - name: example-subnetrefs
  tags:
    environment: dev
    team: platform
  type: application

Spec

Field	Type	Required	Description
`deletionProtection`	boolean	—	DeletionProtection prevents accidental deletion.
`idleTimeout`	integer	—	IdleTimeout is the idle timeout in seconds for ALBs.
`name`	string	yes	Name is the name of the load balancer.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`scheme`	enum	—	Scheme determines if the load balancer is internet-facing or internal. Allowed: `internet-facing, internal`
`securityGroupRefs`	array<object>	—	SecurityGroupRefs are the security groups to attach (ALB only).
`securityGroupRefs[].id`	string	—	ID is a direct AWS Security Group ID (e.g.
`securityGroupRefs[].name`	string	—	Name of a SecurityGroup CR in the same namespace.
`subnetRefs`	array<object>	yes	SubnetRefs are the subnets in which to place the load balancer.
`subnetRefs[].id`	string	—	ID is a direct AWS Subnet ID (e.g.
`subnetRefs[].name`	string	—	Name of a Subnet CR in the same namespace.
`tags`	map<string>	—	Tags are AWS resource tags to apply.
`type`	enum	yes	Type is the load balancer type. Allowed: `application, network, gateway`

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the load balancer.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`dnsName`	string	—	DNSName is the DNS name of the load balancer.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`state`	string	—	State is the current state of the load balancer.

TargetGroup # GA

TargetGroup is the Schema for managing ELBv2 Target Groups.

kubectl get targetgroups · example on GitHub

Example

# TargetGroup — Elastic Load Balancing
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/elbv2.html#targetgroup
apiVersion: aws.konfig.io/v1alpha1
kind: TargetGroup
metadata:
  name: example-targetgroup
  namespace: default
spec:
  healthCheck:
    healthyThreshold: 2
    intervalSeconds: 5
    path: example
    port: example
    protocol: HTTP
    unhealthyThreshold: 2
  name: example-targetgroup
  port: 1
  protocol: HTTP
  providerRef:
    name: example-targetgroup
    region: us-east-1
  tags:
    environment: dev
    team: platform
  targetType: instance
  vpcRef:
    name: example-vpc

Spec

Field	Type	Required	Description
`healthCheck`	object	—	HealthCheck defines the health check configuration.
`healthCheck.healthyThreshold`	integer	—	HealthyThreshold is the number of consecutive successes.
`healthCheck.intervalSeconds`	integer	—	IntervalSeconds is the health check interval.
`healthCheck.path`	string	—	Path is the health check path (for HTTP/HTTPS).
`healthCheck.port`	string	—	Port is the health check port (default "traffic-port").
`healthCheck.protocol`	enum	—	Protocol is the health check protocol. Allowed: `HTTP, HTTPS, TCP, TLS, UDP, TCP_UDP`
`healthCheck.unhealthyThreshold`	integer	—	UnhealthyThreshold is the number of consecutive failures.
`name`	string	yes	Name is the name of the target group.
`port`	integer	yes	Port is the port on which targets receive traffic.
`protocol`	enum	yes	Protocol is the routing protocol. Allowed: `HTTP, HTTPS, TCP, TLS, UDP, TCP_UDP, GENEVE`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.
`targetType`	enum	—	TargetType is the target type. Allowed: `instance, ip, lambda, alb`
`vpcRef`	object	—	VPCRef is required for instance, ip, or alb target types.
`vpcRef.id`	string	—	ID is a direct AWS VPC ID (e.g.
`vpcRef.name`	string	—	Name of a VPC CR in the same namespace.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the target group.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.