Fault Injection Service

2 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

FISExperimentTemplate # CLOUD CONTROL · AWS::FIS::ExperimentTemplate

FISExperimentTemplate manages AWS::FIS::ExperimentTemplate through the AWS Cloud Control API.

kubectl get fisexperimenttemplates · example on GitHub

Example

# FISExperimentTemplate — Fault Injection Service
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/fis.html#fisexperimenttemplate
apiVersion: aws.konfig.io/v1alpha1
kind: FISExperimentTemplate
metadata:
  name: example-fisexperimenttemplate
  namespace: default
spec:
  actions: {}
  description: Managed by konfig-konector
  experimentOptions:
    accountTargeting: multi-account
    emptyTargetResolutionMode: fail
  experimentReportConfiguration:
    dataSources:
      cloudWatchDashboards:
      - dashboardIdentifier: example
    outputs:
      experimentReportS3Configuration:
        bucketName: example-fisexperimenttemplate
        prefix: example
    postExperimentDuration: example
    preExperimentDuration: example
  logConfiguration:
    cloudWatchLogsConfiguration:
      logGroupArn: arn:aws:iam::123456789012:role/example-role
    logSchemaVersion: 1
    s3Configuration:
      bucketName: example-fisexperimenttemplate
      prefix: example
  providerRef:
    name: example-fisexperimenttemplate
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  stopConditions:
  - source: example
    value: example
  tags:
    environment: dev
    team: platform
  targets: {}

Spec

Field	Type	Required	Description
`actions`	map<string>	—
`description`	string	yes
`experimentOptions`	object	—	FISExperimentTemplateExperimentTemplateExperimentOptions is a nested property type of AWS::FIS::ExperimentTemplate.
`experimentOptions.accountTargeting`	enum	—	The account targeting setting for the experiment template. Allowed: `multi-account, single-account`
`experimentOptions.emptyTargetResolutionMode`	enum	—	The target resolution failure mode for the experiment template. Allowed: `fail, skip`
`experimentReportConfiguration`	object	—	FISExperimentTemplateExperimentTemplateExperimentReportConfiguration is a nested property type of AWS::FIS::ExperimentTemplate.
`experimentReportConfiguration.dataSources`	object	—	FISExperimentTemplateExperimentTemplateExperimentReportConfigurationDataSources is a nested property type of AWS::FIS::ExperimentTemplate.
`experimentReportConfiguration.dataSources.cloudWatchDashboards`	array<object>	—
`experimentReportConfiguration.dataSources.cloudWatchDashboards[].dashboardIdentifier`	string	yes
`experimentReportConfiguration.outputs`	object	yes	FISExperimentTemplateExperimentTemplateExperimentReportConfigurationOutputs is a nested property type of AWS::FIS::ExperimentTemplate.
`experimentReportConfiguration.outputs.experimentReportS3Configuration`	object	yes	FISExperimentTemplateExperimentTemplateExperimentReportConfigurationOutputsExperimentReportS3Configuration is a nested property type of AWS::FIS::ExperimentTemplate.
`experimentReportConfiguration.outputs.experimentReportS3Configuration.bucketName`	string	yes
`experimentReportConfiguration.outputs.experimentReportS3Configuration.prefix`	string	—
`experimentReportConfiguration.postExperimentDuration`	string	—
`experimentReportConfiguration.preExperimentDuration`	string	—
`logConfiguration`	object	—	FISExperimentTemplateExperimentTemplateLogConfiguration is a nested property type of AWS::FIS::ExperimentTemplate.
`logConfiguration.cloudWatchLogsConfiguration`	object	—	FISExperimentTemplateExperimentTemplateLogConfigurationCloudWatchLogsConfiguration is a nested property type of AWS::FIS::ExperimentTemplate.
`logConfiguration.cloudWatchLogsConfiguration.logGroupArn`	string	yes
`logConfiguration.logSchemaVersion`	integer	yes
`logConfiguration.s3Configuration`	object	—	FISExperimentTemplateExperimentTemplateLogConfigurationS3Configuration is a nested property type of AWS::FIS::ExperimentTemplate.
`logConfiguration.s3Configuration.bucketName`	string	yes
`logConfiguration.s3Configuration.prefix`	string	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roleArn`	string	yes
`stopConditions`	array<object>	yes
`stopConditions[].source`	string	yes
`stopConditions[].value`	string	—
`tags`	map<string>	—
`targets`	map<string>	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

FISTargetAccountConfiguration # CLOUD CONTROL · AWS::FIS::TargetAccountConfiguration ⚠ DESTRUCTIVE SCOPE

Caution, destructive scope: fault injection into another account. Provided for completeness; do not use from application namespaces. Restrict with AWSProvider.allowedNamespaces and RBAC. FISTargetAccountConfiguration manages AWS::FIS::TargetAccountConfiguration through the AWS Cloud Control API.

kubectl get fistargetaccountconfigurations · example on GitHub

Example

# FISTargetAccountConfiguration — Fault Injection Service
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/fis.html#fistargetaccountconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: FISTargetAccountConfiguration
metadata:
  name: example-fistargetaccountconfiguration
  namespace: default
spec:
  accountId: '123456789012'
  description: Managed by konfig-konector
  experimentTemplateId: example-id
  providerRef:
    name: example-fistargetaccountconfiguration
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`accountId`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`description`	string	—
`experimentTemplateId`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roleArn`	string	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.