Global Accelerator

4 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

GlobalAcceleratorAccelerator # CLOUD CONTROL · AWS::GlobalAccelerator::Accelerator

GlobalAcceleratorAccelerator manages AWS::GlobalAccelerator::Accelerator through the AWS Cloud Control API.

kubectl get globalacceleratoraccelerators · example on GitHub

Example

# GlobalAcceleratorAccelerator — Global Accelerator
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/globalaccelerator.html#globalacceleratoraccelerator
apiVersion: aws.konfig.io/v1alpha1
kind: GlobalAcceleratorAccelerator
metadata:
  name: example-globalacceleratoraccelerator
  namespace: default
spec:
  enabled: true
  flowLogsEnabled: true
  flowLogsS3Bucket: example
  flowLogsS3Prefix: example
  ipAddressType: IPV4
  ipAddresses:
  - example
  name: example-globalacceleratoraccelerator
  providerRef:
    name: example-globalacceleratoraccelerator
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
enabledboolean—Indicates whether an accelerator is enabled.
flowLogsEnabledboolean—Indicates whether flow logs are enabled for the accelerator.
flowLogsS3Bucketstring—The name of the Amazon S3 bucket for the flow logs.
flowLogsS3Prefixstring—The prefix for the location in the Amazon S3 bucket for the flow logs.
ipAddressTypeenum—IP Address type. Allowed: IPV4, DUAL_STACK
ipAddressesarray<string>—The IP addresses from BYOIP Prefix pool.
namestringyesName of accelerator.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
acceleratorArnstring—The Amazon Resource Name (ARN) of the accelerator.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
dnsNamestring—The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 addresses.
dualStackDnsNamestring—The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 and IPv6 addresses.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
ipv4Addressesarray<string>—The IPv4 addresses assigned to the accelerator.
ipv6Addressesarray<string>—The IPv6 addresses assigned if the accelerator is dualstack Read-only: reported by AWS after creation.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

GlobalAcceleratorCrossAccountAttachment # CLOUD CONTROL · AWS::GlobalAccelerator::CrossAccountAttachment

GlobalAcceleratorCrossAccountAttachment manages AWS::GlobalAccelerator::CrossAccountAttachment through the AWS Cloud Control API.

kubectl get globalacceleratorcrossaccountattachments · example on GitHub

Example

# GlobalAcceleratorCrossAccountAttachment — Global Accelerator
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/globalaccelerator.html#globalacceleratorcrossaccountattachment
apiVersion: aws.konfig.io/v1alpha1
kind: GlobalAcceleratorCrossAccountAttachment
metadata:
  name: example-globalacceleratorcrossaccountattachment
  namespace: default
spec:
  name: example-globalacceleratorcrossaccountattachment
  principals:
  - example
  providerRef:
    name: example-globalacceleratorcrossaccountattachment
    region: us-east-1
  resources:
  - cidr: 10.0.0.0/16
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
namestringyesThe Friendly identifier of the attachment.
principalsarray<string>—Principals to share the resources with.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
resourcesarray<object>—Resources shared using the attachment.
resources[].cidrstring—
resources[].endpointIdstring—
resources[].regionstring—
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attachmentArnstring—The Amazon Resource Name (ARN) of the attachment.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

GlobalAcceleratorEndpointGroup # CLOUD CONTROL · AWS::GlobalAccelerator::EndpointGroup

GlobalAcceleratorEndpointGroup manages AWS::GlobalAccelerator::EndpointGroup through the AWS Cloud Control API.

kubectl get globalacceleratorendpointgroups · example on GitHub

Example

# GlobalAcceleratorEndpointGroup — Global Accelerator
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/globalaccelerator.html#globalacceleratorendpointgroup
apiVersion: aws.konfig.io/v1alpha1
kind: GlobalAcceleratorEndpointGroup
metadata:
  name: example-globalacceleratorendpointgroup
  namespace: default
spec:
  endpointConfigurations:
  - attachmentArn: arn:aws:iam::123456789012:role/example-role
    clientIPPreservationEnabled: true
    endpointId: example-id
    weight: 1
  endpointGroupRegion: example
  healthCheckIntervalSeconds: 300
  healthCheckPath: example
  healthCheckPort: 1
  healthCheckProtocol: TCP
  listenerArn: arn:aws:iam::123456789012:role/example-role
  portOverrides:
  - endpointPort: 1
    listenerPort: 1
  providerRef:
    name: example-globalacceleratorendpointgroup
    region: us-east-1
  thresholdCount: 2
  trafficDialPercentage: 1

Spec

FieldTypeRequiredDescription
endpointConfigurationsarray<object>—The list of endpoint objects.
endpointConfigurations[].attachmentArnstring—Attachment ARN that provides access control to the cross account endpoint.
endpointConfigurations[].clientIPPreservationEnabledboolean—true if client ip should be preserved
endpointConfigurations[].endpointIdstringyesId of the endpoint.
endpointConfigurations[].weightinteger—The weight for the endpoint.
endpointGroupRegionstringyesThe name of the AWS Region where the endpoint group is located Create-only in AWS: changing it requires replacing the resource.
healthCheckIntervalSecondsinteger—The time in seconds between each health check for an endpoint.
healthCheckPathstring—
healthCheckPortinteger—The port that AWS Global Accelerator uses to check the health of endpoints in this endpoint group.
healthCheckProtocolenum—The protocol that AWS Global Accelerator uses to check the health of endpoints in this endpoint group. Allowed: TCP, HTTP, HTTPS
listenerArnstringyesThe Amazon Resource Name (ARN) of the listener Create-only in AWS: changing it requires replacing the resource.
portOverridesarray<object>—
portOverrides[].endpointPortintegeryes
portOverrides[].listenerPortintegeryes
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
thresholdCountinteger—The number of consecutive health checks required to set the state of the endpoint to unhealthy.
trafficDialPercentagenumber—The percentage of traffic to sent to an AWS Region

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
endpointGroupArnstring—The Amazon Resource Name (ARN) of the endpoint group Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

GlobalAcceleratorListener # CLOUD CONTROL · AWS::GlobalAccelerator::Listener

GlobalAcceleratorListener manages AWS::GlobalAccelerator::Listener through the AWS Cloud Control API.

kubectl get globalacceleratorlisteners · example on GitHub

Example

# GlobalAcceleratorListener — Global Accelerator
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/globalaccelerator.html#globalacceleratorlistener
apiVersion: aws.konfig.io/v1alpha1
kind: GlobalAcceleratorListener
metadata:
  name: example-globalacceleratorlistener
  namespace: default
spec:
  acceleratorArn: arn:aws:iam::123456789012:role/example-role
  clientAffinity: NONE
  portRanges:
  - fromPort: 1
    toPort: 1
  protocol: TCP
  providerRef:
    name: example-globalacceleratorlistener
    region: us-east-1

Spec

FieldTypeRequiredDescription
acceleratorArnstringyesThe Amazon Resource Name (ARN) of the accelerator.
clientAffinityenum—Client affinity lets you direct all requests from a user to the same endpoint. Allowed: NONE, SOURCE_IP
portRangesarray<object>yes
portRanges[].fromPortintegeryes
portRanges[].toPortintegeryes
protocolenumyesThe protocol for the listener. Allowed: TCP, UDP
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
listenerArnstring—The Amazon Resource Name (ARN) of the listener.
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.