EMR

5 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

EMRSecurityConfiguration # CLOUD CONTROL · AWS::EMR::SecurityConfiguration

EMRSecurityConfiguration manages AWS::EMR::SecurityConfiguration through the AWS Cloud Control API.

kubectl get emrsecurityconfigurations · example on GitHub

Example

# EMRSecurityConfiguration — EMR
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/emr.html#emrsecurityconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: EMRSecurityConfiguration
metadata:
  name: example-emrsecurityconfiguration
  namespace: default
spec:
  name: example-emrsecurityconfiguration
  providerRef:
    name: example-emrsecurityconfiguration
    region: us-east-1

Spec

Field	Type	Required	Description
`name`	string	—	The name of the security configuration.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`securityConfiguration`	object	yes	The security configuration details in JSON format.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EMRStep # CLOUD CONTROL · AWS::EMR::Step

EMRStep manages AWS::EMR::Step through the AWS Cloud Control API.

kubectl get emrsteps · example on GitHub

Example

# EMRStep — EMR
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/emr.html#emrstep
apiVersion: aws.konfig.io/v1alpha1
kind: EMRStep
metadata:
  name: example-emrstep
  namespace: default
spec:
  actionOnFailure: example
  encryptionKeyArn: arn:aws:iam::123456789012:role/example-role
  hadoopJarStep:
    args:
    - example
    jar: example
    mainClass: example
    stepProperties:
    - key: example
      value: example
  jobFlowId: example-id
  logUri: example
  name: example-emrstep
  providerRef:
    name: example-emrstep
    region: us-east-1

Spec

Field	Type	Required	Description
`actionOnFailure`	string	yes	This specifies what action to take when the cluster step fails.
`encryptionKeyArn`	string	—	The KMS key ARN to encrypt the logs published to the given Amazon S3 destination.
`hadoopJarStep`	object	yes	The HadoopJarStepConfig property type specifies a job flow step consisting of a JAR file whose main function will be executed.
`hadoopJarStep.args`	array<string>	—
`hadoopJarStep.jar`	string	yes
`hadoopJarStep.mainClass`	string	—
`hadoopJarStep.stepProperties`	array<object>	—
`hadoopJarStep.stepProperties[].key`	string	yes
`hadoopJarStep.stepProperties[].value`	string	yes
`jobFlowId`	string	yes	A string that uniquely identifies the cluster (job flow).
`logUri`	string	—	The Amazon S3 destination URI for log publishing.
`name`	string	yes	The name of the cluster step.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID generated by service Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EMRStudio # CLOUD CONTROL · AWS::EMR::Studio

EMRStudio manages AWS::EMR::Studio through the AWS Cloud Control API.

kubectl get emrstudios · example on GitHub

Example

# EMRStudio — EMR
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/emr.html#emrstudio
apiVersion: aws.konfig.io/v1alpha1
kind: EMRStudio
metadata:
  name: example-emrstudio
  namespace: default
spec:
  authMode: SSO
  defaultS3Location: example
  description: Managed by konfig-konector
  encryptionKeyArn: arn:aws:iam::123456789012:role/example-role
  engineSecurityGroupId: sg-0abc12def3456789
  idcInstanceArn: arn:aws:iam::123456789012:role/example-role
  idcUserAssignment: REQUIRED
  idpAuthUrl: example
  idpRelayStateParameterName: example-emrstudio
  name: example-emrstudio
  providerRef:
    name: example-emrstudio
    region: us-east-1
  serviceRole: example
  subnetIds:
  - example
  tags:
  - key: example
    value: example
  trustedIdentityPropagationEnabled: true
  userRole: example
  vpcId: vpc-0abc12def3456789
  workspaceSecurityGroupId: sg-0abc12def3456789

Spec

Field	Type	Required	Description
`authMode`	enum	yes	Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Allowed: `SSO, IAM`
`defaultS3Location`	string	yes	The default Amazon S3 location to back up EMR Studio Workspaces and notebook files.
`description`	string	—	A detailed description of the Studio.
`encryptionKeyArn`	string	—	The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.
`engineSecurityGroupId`	string	yes	The ID of the Amazon EMR Studio Engine security group.
`idcInstanceArn`	string	—	The ARN of the IAM Identity Center instance to create the Studio application.
`idcUserAssignment`	enum	—	Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. Allowed: `REQUIRED, OPTIONAL`
`idpAuthUrl`	string	—	Your identity provider's authentication endpoint.
`idpRelayStateParameterName`	string	—	The name of relay state parameter for external Identity Provider.
`name`	string	yes	A descriptive name for the Amazon EMR Studio.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceRole`	string	yes	The IAM role that will be assumed by the Amazon EMR Studio.
`subnetIds`	array<string>	yes	A list of up to 5 subnet IDs to associate with the Studio.
`tags`	array<object>	—	A list of tags to associate with the Studio.
`tags[].key`	string	yes
`tags[].value`	string	yes
`trustedIdentityPropagationEnabled`	boolean	—	A Boolean indicating whether to enable Trusted identity propagation for the Studio.
`userRole`	string	—	The IAM user role that will be assumed by users and groups logged in to a Studio.
`vpcId`	string	yes	The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
`workspaceSecurityGroupId`	string	yes	The ID of the Amazon EMR Studio Workspace security group.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the EMR Studio.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`studioId`	string	—	The ID of the EMR Studio.
`url`	string	—	The unique Studio access URL.

EMRStudioSessionMapping # CLOUD CONTROL · AWS::EMR::StudioSessionMapping

EMRStudioSessionMapping manages AWS::EMR::StudioSessionMapping through the AWS Cloud Control API.

kubectl get emrstudiosessionmappings · example on GitHub

Example

# EMRStudioSessionMapping — EMR
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/emr.html#emrstudiosessionmapping
apiVersion: aws.konfig.io/v1alpha1
kind: EMRStudioSessionMapping
metadata:
  name: example-emrstudiosessionmapping
  namespace: default
spec:
  identityName: example-emrstudiosessionmapping
  identityType: USER
  providerRef:
    name: example-emrstudiosessionmapping
    region: us-east-1
  sessionPolicyArn: arn:aws:iam::123456789012:role/example-role
  studioId: example-id

Spec

Field	Type	Required	Description
`identityName`	string	yes	The name of the user or group.
`identityType`	enum	yes	Specifies whether the identity to map to the Studio is a user or a group. Allowed: `USER, GROUP`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`sessionPolicyArn`	string	yes	The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group.
`studioId`	string	yes	The ID of the Amazon EMR Studio to which the user or group will be mapped.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EMRWALWorkspace # CLOUD CONTROL · AWS::EMR::WALWorkspace

EMRWALWorkspace manages AWS::EMR::WALWorkspace through the AWS Cloud Control API.

kubectl get emrwalworkspaces · example on GitHub

Example

# EMRWALWorkspace — EMR
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/emr.html#emrwalworkspace
apiVersion: aws.konfig.io/v1alpha1
kind: EMRWALWorkspace
metadata:
  name: example-emrwalworkspace
  namespace: default
spec:
  providerRef:
    name: example-emrwalworkspace
    region: us-east-1
  tags:
  - key: example
    value: example
  walWorkspaceName: example-emrwalworkspace

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	array<object>	—	An array of key-value pairs to apply to this resource.
`tags[].key`	string	yes
`tags[].value`	string	yes
`walWorkspaceName`	string	—	The name of the emrwal container Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.