EC2 Image Builder

8 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

ImageBuilderComponent # CLOUD CONTROL · AWS::ImageBuilder::Component

ImageBuilderComponent manages AWS::ImageBuilder::Component through the AWS Cloud Control API.

kubectl get imagebuildercomponents · example on GitHub

Example

# ImageBuilderComponent — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuildercomponent
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderComponent
metadata:
  name: example-imagebuildercomponent
  namespace: default
spec:
  changeDescription: Managed by konfig-konector
  data: example
  description: Managed by konfig-konector
  kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
  name: example-imagebuildercomponent
  platform: Windows
  providerRef:
    name: example-imagebuildercomponent
    region: us-east-1
  supportedOsVersions:
  - example
  tags:
    environment: dev
    team: platform
  uri: example
  version: '1.0'

Spec

Field	Type	Required	Description
`changeDescription`	string	—	The change description of the component.
`data`	string	—	The data of the component.
`description`	string	—	The description of the component.
`kmsKeyId`	string	—	The KMS key identifier used to encrypt the component.
`name`	string	yes	The name of the component.
`platform`	enum	yes	The platform of the component. Allowed: `Windows, Linux, macOS`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`supportedOsVersions`	array<string>	—	The operating system (OS) version supported by the component.
`tags`	map<string>	—	The tags associated with the component.
`uri`	string	—	The uri of the component.
`version`	string	yes	The version of the component.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the component.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`encrypted`	boolean	—	The encryption status of the component.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`latestVersion`	object	—	The latest version references of the component.
`latestVersion.arn`	string	—	The latest version ARN of the created component.
`latestVersion.major`	string	—	The latest version ARN of the created component, with the same major version.
`latestVersion.minor`	string	—	The latest version ARN of the created component, with the same minor version.
`latestVersion.patch`	string	—	The latest version ARN of the created component, with the same patch version.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`type`	enum	—	The type of the component denotes whether the component is used to build the image or only to test it. Allowed: `BUILD, TEST`

ImageBuilderContainerRecipe # CLOUD CONTROL · AWS::ImageBuilder::ContainerRecipe

ImageBuilderContainerRecipe manages AWS::ImageBuilder::ContainerRecipe through the AWS Cloud Control API.

kubectl get imagebuildercontainerrecipes · example on GitHub

Example

# ImageBuilderContainerRecipe — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuildercontainerrecipe
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderContainerRecipe
metadata:
  name: example-imagebuildercontainerrecipe
  namespace: default
spec:
  components:
  - componentArn: arn:aws:iam::123456789012:role/example-role
    parameters:
    - name: example-imagebuildercontainerrecipe
      value:
      - example
  containerType: DOCKER
  description: Managed by konfig-konector
  dockerfileTemplateData: example
  dockerfileTemplateUri: example
  imageOsVersionOverride: example
  instanceConfiguration:
    blockDeviceMappings:
    - deviceName: example-imagebuildercontainerrecipe
      noDevice: example
      virtualName: example-imagebuildercontainerrecipe
    image: example
  kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
  name: example-imagebuildercontainerrecipe
  parentImage: example
  platformOverride: Windows
  providerRef:
    name: example-imagebuildercontainerrecipe
    region: us-east-1
  tags:
    environment: dev
    team: platform
  targetRepository:
    repositoryName: example-imagebuildercontainerrecipe
    service: ECR
  version: '1.0'
  workingDirectory: example

Spec

Field	Type	Required	Description
`components`	array<object>	—	Components for build and test that are included in the container recipe.
`components[].componentArn`	string	—	The Amazon Resource Name (ARN) of the component.
`components[].parameters`	array<object>	—	A group of parameter settings that are used to configure the component for a specific recipe.
`components[].parameters[].name`	string	yes	The name of the component parameter to set.
`components[].parameters[].value`	array<string>	yes	Sets the value for the named component parameter.
`containerType`	enum	—	Specifies the type of container, such as Docker. Allowed: `DOCKER`
`description`	string	—	The description of the container recipe.
`dockerfileTemplateData`	string	—	Dockerfiles are text documents that are used to build Docker containers, and ensure that they contain all of the elements required by the application running inside.
`dockerfileTemplateUri`	string	—	The S3 URI for the Dockerfile that will be used to build your container image.
`imageOsVersionOverride`	string	—	Specifies the operating system version for the source image.
`instanceConfiguration`	object	—	A group of options that can be used to configure an instance for building and testing container images.
`instanceConfiguration.blockDeviceMappings`	array<object>	—	Defines the block devices to attach for building an instance from this Image Builder AMI.
`instanceConfiguration.blockDeviceMappings[].deviceName`	string	—	The device to which these mappings apply.
`instanceConfiguration.blockDeviceMappings[].ebs`	object	—	Use to manage Amazon EBS-specific configuration for this mapping.
`instanceConfiguration.blockDeviceMappings[].ebs.deleteOnTermination`	boolean	—	Use to configure delete on termination of the associated device.
`instanceConfiguration.blockDeviceMappings[].ebs.encrypted`	boolean	—	Use to configure device encryption.
`instanceConfiguration.blockDeviceMappings[].ebs.iops`	integer	—	Use to configure device IOPS.
`instanceConfiguration.blockDeviceMappings[].ebs.kmsKeyId`	string	—	Use to configure the KMS key to use when encrypting the device.
`instanceConfiguration.blockDeviceMappings[].ebs.snapshotId`	string	—	The snapshot that defines the device contents.
`instanceConfiguration.blockDeviceMappings[].ebs.throughput`	integer	—	For GP3 volumes only - The throughput in MiB/s that the volume supports.
`instanceConfiguration.blockDeviceMappings[].ebs.volumeSize`	integer	—	Use to override the device's volume size.
`instanceConfiguration.blockDeviceMappings[].ebs.volumeType`	enum	—	Use to override the device's volume type. Allowed: `standard, io1, io2, io2a, gp2, gp3, gp3a, sc1…`
`instanceConfiguration.blockDeviceMappings[].noDevice`	string	—	Use to remove a mapping from the parent image.
`instanceConfiguration.blockDeviceMappings[].virtualName`	string	—	Use to manage instance ephemeral devices.
`instanceConfiguration.image`	string	—	The AMI ID to use as the base image for a container build and test instance.
`kmsKeyId`	string	—	Identifies which KMS key is used to encrypt the container image.
`name`	string	—	The name of the container recipe.
`parentImage`	string	—	The source image for the container recipe.
`platformOverride`	enum	—	Specifies the operating system platform when you use a custom source image. Allowed: `Windows, Linux`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags that are attached to the container recipe.
`targetRepository`	object	—	The destination repository for the container image.
`targetRepository.repositoryName`	string	—	The name of the container repository where the output container image is stored.
`targetRepository.service`	enum	—	Specifies the service in which this image was registered. Allowed: `ECR`
`version`	string	—	The semantic version of the container recipe (..).
`workingDirectory`	string	—	The working directory to be used during build and test workflows.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the container recipe.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`latestVersion`	object	—	The latest version references of the container recipe.
`latestVersion.arn`	string	—	The latest version ARN of the created container recipe.
`latestVersion.major`	string	—	The latest version ARN of the created container recipe, with the same major version.
`latestVersion.minor`	string	—	The latest version ARN of the created container recipe, with the same minor version.
`latestVersion.patch`	string	—	The latest version ARN of the created container recipe, with the same patch version.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderDistributionConfiguration # CLOUD CONTROL · AWS::ImageBuilder::DistributionConfiguration

ImageBuilderDistributionConfiguration manages AWS::ImageBuilder::DistributionConfiguration through the AWS Cloud Control API.

kubectl get imagebuilderdistributionconfigurations · example on GitHub

Example

# ImageBuilderDistributionConfiguration — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderdistributionconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderDistributionConfiguration
metadata:
  name: example-imagebuilderdistributionconfiguration
  namespace: default
spec:
  description: Managed by konfig-konector
  distributions:
  - amiDistributionConfiguration:
      description: Managed by konfig-konector
      kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
      name: example-imagebuilderdistributionconfiguration
      targetAccountIds:
      - example
    containerDistributionConfiguration:
      containerTags:
      - example
      description: Managed by konfig-konector
    fastLaunchConfigurations:
    - accountId: '123456789012'
      enabled: true
      maxParallelLaunches: 1
    launchTemplateConfigurations:
    - accountId: '123456789012'
      setDefaultVersion: false
    licenseConfigurationArns:
    - example
    region: us-east-1
    ssmParameterConfigurations:
    - amiAccountId: '123456789012'
      dataType: example
      parameterName: example-imagebuilderdistributionconfiguration
  name: example-imagebuilderdistributionconfiguration
  providerRef:
    name: example-imagebuilderdistributionconfiguration
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`description`	string	—	The description of the distribution configuration.
`distributions`	array<object>	yes	The distributions of the distribution configuration.
`distributions[].amiDistributionConfiguration`	object	—	ImageBuilderDistributionConfigurationAmiDistributionConfiguration is a nested property type of AWS::ImageBuilder::DistributionConfiguration.
`distributions[].amiDistributionConfiguration.amiTags`	map<string>	—	The tags to apply to AMIs distributed to this Region.
`distributions[].amiDistributionConfiguration.description`	string	—	The description of the AMI distribution configuration.
`distributions[].amiDistributionConfiguration.kmsKeyId`	string	—	The KMS key identifier used to encrypt the distributed image.
`distributions[].amiDistributionConfiguration.launchPermissionConfiguration`	object	—	ImageBuilderDistributionConfigurationLaunchPermissionConfiguration is a nested property type of AWS::ImageBuilder::DistributionConfiguration.
`distributions[].amiDistributionConfiguration.launchPermissionConfiguration.organizationArns`	array<string>	—	The ARN for an Amazon Web Services Organization that you want to share your AMI with.
`distributions[].amiDistributionConfiguration.launchPermissionConfiguration.organizationalUnitArns`	array<string>	—	The ARN for an Organizations organizational unit (OU) that you want to share your AMI with.
`distributions[].amiDistributionConfiguration.launchPermissionConfiguration.userGroups`	array<string>	—	The name of the group.
`distributions[].amiDistributionConfiguration.launchPermissionConfiguration.userIds`	array<string>	—	The AWS account ID.
`distributions[].amiDistributionConfiguration.name`	string	—	The name of the AMI distribution configuration.
`distributions[].amiDistributionConfiguration.targetAccountIds`	array<string>	—	The ID of accounts to which you want to distribute an image.
`distributions[].containerDistributionConfiguration`	object	—	ImageBuilderDistributionConfigurationContainerDistributionConfiguration is a nested property type of AWS::ImageBuilder::DistributionConfiguration.
`distributions[].containerDistributionConfiguration.containerTags`	array<string>	—	Tags that are attached to the container distribution configuration.
`distributions[].containerDistributionConfiguration.description`	string	—	The description of the container distribution configuration.
`distributions[].containerDistributionConfiguration.targetRepository`	object	—	The destination repository for the container distribution configuration.
`distributions[].containerDistributionConfiguration.targetRepository.repositoryName`	string	—	The repository name of target container repository.
`distributions[].containerDistributionConfiguration.targetRepository.service`	enum	—	The service of target container repository. Allowed: `ECR`
`distributions[].fastLaunchConfigurations`	array<object>	—	The Windows faster-launching configurations to use for AMI distribution.
`distributions[].fastLaunchConfigurations[].accountId`	string	—	The owner account ID for the fast-launch enabled Windows AMI.
`distributions[].fastLaunchConfigurations[].enabled`	boolean	—	A Boolean that represents the current state of faster launching for the Windows AMI.
`distributions[].fastLaunchConfigurations[].launchTemplate`	object	—	The launch template that the fast-launch enabled Windows AMI uses when it launches Windows instances to create pre-provisioned snapshots.
`distributions[].fastLaunchConfigurations[].launchTemplate.launchTemplateId`	string	—	The ID of the launch template to use for faster launching for a Windows AMI.
`distributions[].fastLaunchConfigurations[].launchTemplate.launchTemplateName`	string	—	The name of the launch template to use for faster launching for a Windows AMI.
`distributions[].fastLaunchConfigurations[].launchTemplate.launchTemplateVersion`	string	—	The version of the launch template to use for faster launching for a Windows AMI.
`distributions[].fastLaunchConfigurations[].maxParallelLaunches`	integer	—	The maximum number of parallel instances that are launched for creating resources.
`distributions[].fastLaunchConfigurations[].snapshotConfiguration`	object	—	Configuration settings for managing the number of snapshots that are created from pre-provisioned instances for the Windows AMI when faster launching is enabled.
`distributions[].fastLaunchConfigurations[].snapshotConfiguration.targetResourceCount`	integer	—	The number of pre-provisioned snapshots to keep on hand for a fast-launch enabled Windows AMI.
`distributions[].launchTemplateConfigurations`	array<object>	—	A group of launchTemplateConfiguration settings that apply to image distribution.
`distributions[].launchTemplateConfigurations[].accountId`	string	—	The account ID that this configuration applies to.
`distributions[].launchTemplateConfigurations[].launchTemplateId`	string	—	Identifies the EC2 launch template to use.
`distributions[].launchTemplateConfigurations[].setDefaultVersion`	boolean	—	Set the specified EC2 launch template as the default launch template for the specified account.
`distributions[].licenseConfigurationArns`	array<string>	—	The License Manager Configuration to associate with the AMI in the specified Region.
`distributions[].region`	string	yes	region
`distributions[].ssmParameterConfigurations`	array<object>	—	The SSM parameter configurations to use for AMI distribution.
`distributions[].ssmParameterConfigurations[].amiAccountId`	string	—	The account ID for the AMI to update the parameter with.
`distributions[].ssmParameterConfigurations[].dataType`	string	—	The data type of the SSM parameter.
`distributions[].ssmParameterConfigurations[].parameterName`	string	yes	The name of the SSM parameter.
`name`	string	yes	The name of the distribution configuration.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	The tags associated with the component.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the distribution configuration.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderImagePipeline # CLOUD CONTROL · AWS::ImageBuilder::ImagePipeline

ImageBuilderImagePipeline manages AWS::ImageBuilder::ImagePipeline through the AWS Cloud Control API.

kubectl get imagebuilderimagepipelines · example on GitHub

Example

# ImageBuilderImagePipeline — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderimagepipeline
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderImagePipeline
metadata:
  name: example-imagebuilderimagepipeline
  namespace: default
spec:
  containerRecipeArn: arn:aws:iam::123456789012:role/example-role
  description: Managed by konfig-konector
  distributionConfigurationArn: arn:aws:iam::123456789012:role/example-role
  enhancedImageMetadataEnabled: true
  executionRole: example
  imageRecipeArn: arn:aws:iam::123456789012:role/example-role
  imageScanningConfiguration:
    ecrConfiguration:
      containerTags:
      - example
      repositoryName: example-imagebuilderimagepipeline
    imageScanningEnabled: true
  imageTags:
    environment: dev
    team: platform
  imageTestsConfiguration:
    imageTestsEnabled: true
    timeoutMinutes: 60
  infrastructureConfigurationArn: arn:aws:iam::123456789012:role/example-role
  loggingConfiguration:
    imageLogGroupName: example-imagebuilderimagepipeline
    pipelineLogGroupName: example-imagebuilderimagepipeline
  name: example-imagebuilderimagepipeline
  providerRef:
    name: example-imagebuilderimagepipeline
    region: us-east-1
  schedule:
    autoDisablePolicy:
      failureCount: 1
    pipelineExecutionStartCondition: EXPRESSION_MATCH_ONLY
    scheduleExpression: example
    timezone: example
  status: DISABLED
  tags:
    environment: dev
    team: platform
  workflows:
  - onFailure: CONTINUE
    parallelGroup: example
    parameters:
    - name: example-imagebuilderimagepipeline
      value:
      - example
    workflowArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`containerRecipeArn`	string	—	The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested.
`description`	string	—	The description of the image pipeline.
`distributionConfigurationArn`	string	—	The Amazon Resource Name (ARN) of the distribution configuration associated with this image pipeline.
`enhancedImageMetadataEnabled`	boolean	—	Collects additional information about the image being created, including the operating system (OS) version and package list.
`executionRole`	string	—	The execution role name/ARN for the image build, if provided
`imageRecipeArn`	string	—	The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed.
`imageScanningConfiguration`	object	—	Contains settings for vulnerability scans that Amazon Inspector runs against the test instance during image creation.
`imageScanningConfiguration.ecrConfiguration`	object	—	Contains ECR settings for vulnerability scans.
`imageScanningConfiguration.ecrConfiguration.containerTags`	array<string>	—	Tags for Image Builder to apply the output container image that is scanned.
`imageScanningConfiguration.ecrConfiguration.repositoryName`	string	—	The name of the container repository that Amazon Inspector scans to identify findings for your container images.
`imageScanningConfiguration.imageScanningEnabled`	boolean	—	This sets whether Image Builder keeps a snapshot of the vulnerability scans that Amazon Inspector runs against the test instance when you create a new image.
`imageTags`	map<string>	—	The tags to be applied to images created by this pipeline.
`imageTestsConfiguration`	object	—	The image tests configuration of the image pipeline.
`imageTestsConfiguration.imageTestsEnabled`	boolean	—	Defines if tests should be executed when building this image.
`imageTestsConfiguration.timeoutMinutes`	integer	—	The maximum time in minutes that tests are permitted to run.
`infrastructureConfigurationArn`	string	—	The Amazon Resource Name (ARN) of the infrastructure configuration associated with this image pipeline.
`loggingConfiguration`	object	—	The logging configuration settings for the image pipeline.
`loggingConfiguration.imageLogGroupName`	string	—	The name of the log group for image build logs.
`loggingConfiguration.pipelineLogGroupName`	string	—	The name of the log group for pipeline execution logs.
`name`	string	—	The name of the image pipeline.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`schedule`	object	—	The schedule of the image pipeline.
`schedule.autoDisablePolicy`	object	—	The auto-disable policy for the image pipeline.
`schedule.autoDisablePolicy.failureCount`	integer	yes	The number of consecutive failures after which the pipeline should be automatically disabled.
`schedule.pipelineExecutionStartCondition`	enum	—	The condition configures when the pipeline should trigger a new image build. Allowed: `EXPRESSION_MATCH_ONLY, EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE`
`schedule.scheduleExpression`	string	—	The expression determines how often EC2 Image Builder evaluates your pipelineExecutionStartCondition.
`schedule.timezone`	string	—	The timezone that applies to the scheduling expression, for example "Etc/UTC" or "America/Los_Angeles" in IANA timezone format.
`status`	enum	—	The status of the image pipeline. Allowed: `DISABLED, ENABLED`
`tags`	map<string>	—	The tags of this image pipeline.
`workflows`	array<object>	—	Workflows to define the image build process
`workflows[].onFailure`	enum	—	Define execution decision in case of workflow failure Allowed: `CONTINUE, ABORT`
`workflows[].parallelGroup`	string	—	The parallel group name
`workflows[].parameters`	array<object>	—	The parameters associated with the workflow
`workflows[].parameters[].name`	string	—
`workflows[].parameters[].value`	array<string>	—
`workflows[].workflowArn`	string	—	The Amazon Resource Name (ARN) of the workflow

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the image pipeline.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`deploymentId`	string	—	The deployment ID of the pipeline, used for resource create/update triggers.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderImageRecipe # CLOUD CONTROL · AWS::ImageBuilder::ImageRecipe

ImageBuilderImageRecipe manages AWS::ImageBuilder::ImageRecipe through the AWS Cloud Control API.

kubectl get imagebuilderimagerecipes · example on GitHub

Example

# ImageBuilderImageRecipe — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderimagerecipe
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderImageRecipe
metadata:
  name: example-imagebuilderimagerecipe
  namespace: default
spec:
  additionalInstanceConfiguration:
    systemsManagerAgent:
      uninstallAfterBuild: false
    userDataOverride: example
  amiTags:
    environment: dev
    team: platform
  amiWatermarks:
  - example
  blockDeviceMappings:
  - deviceName: example-imagebuilderimagerecipe
    ebs:
      deleteOnTermination: false
      encrypted: true
      iops: 1
      kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
      throughput: 1
      volumeSize: 2
      volumeType: standard
    noDevice: example
    virtualName: example-imagebuilderimagerecipe
  components:
  - componentArn: arn:aws:iam::123456789012:role/example-role
    parameters:
    - name: example-imagebuilderimagerecipe
      value:
      - example
  description: Managed by konfig-konector
  name: example-imagebuilderimagerecipe
  parentImage: example
  providerRef:
    name: example-imagebuilderimagerecipe
    region: us-east-1
  tags:
    environment: dev
    team: platform
  version: '1.0'
  workingDirectory: example

Spec

Field	Type	Required	Description
`additionalInstanceConfiguration`	object	—	Specify additional settings and launch scripts for your build instances.
`additionalInstanceConfiguration.systemsManagerAgent`	object	—	Contains settings for the SSM agent on your build instance.
`additionalInstanceConfiguration.systemsManagerAgent.uninstallAfterBuild`	boolean	—	Controls whether the SSM agent is removed from your final build image, prior to creating the new AMI.
`additionalInstanceConfiguration.userDataOverride`	string	—	Use this property to provide commands or a command script to run when you launch your build instance.
`amiTags`	map<string>	—	The tags to apply to the AMI created by this image recipe.
`amiWatermarks`	array<string>	—	The AMI watermark names to attach to the output AMI from this recipe.
`blockDeviceMappings`	array<object>	—	The block device mappings to apply when creating images from this recipe.
`blockDeviceMappings[].deviceName`	string	—	The device to which these mappings apply.
`blockDeviceMappings[].ebs`	object	—	Use to manage Amazon EBS-specific configuration for this mapping.
`blockDeviceMappings[].ebs.deleteOnTermination`	boolean	—	Use to configure delete on termination of the associated device.
`blockDeviceMappings[].ebs.encrypted`	boolean	—	Use to configure device encryption.
`blockDeviceMappings[].ebs.iops`	integer	—	Use to configure device IOPS.
`blockDeviceMappings[].ebs.kmsKeyId`	string	—	Use to configure the KMS key to use when encrypting the device.
`blockDeviceMappings[].ebs.snapshotId`	string	—	The snapshot that defines the device contents.
`blockDeviceMappings[].ebs.throughput`	integer	—	For GP3 volumes only - The throughput in MiB/s that the volume supports.
`blockDeviceMappings[].ebs.volumeSize`	integer	—	Use to override the device's volume size.
`blockDeviceMappings[].ebs.volumeType`	enum	—	Use to override the device's volume type. Allowed: `standard, io1, io2, io2a, gp2, gp3, gp3a, sc1…`
`blockDeviceMappings[].noDevice`	string	—	Use to remove a mapping from the parent image.
`blockDeviceMappings[].virtualName`	string	—	Use to manage instance ephemeral devices.
`components`	array<object>	—	The components of the image recipe.
`components[].componentArn`	string	—	The Amazon Resource Name (ARN) of the component.
`components[].parameters`	array<object>	—	A group of parameter settings that are used to configure the component for a specific recipe.
`components[].parameters[].name`	string	yes	The name of the component parameter to set.
`components[].parameters[].value`	array<string>	yes	Sets the value for the named component parameter.
`description`	string	—	The description of the image recipe.
`name`	string	yes	The name of the image recipe.
`parentImage`	string	yes	The parent image of the image recipe.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	The tags of the image recipe.
`version`	string	yes	The version of the image recipe.
`workingDirectory`	string	—	The working directory to be used during build and test workflows.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the image recipe.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`latestVersion`	object	—	The latest version references of the image recipe.
`latestVersion.arn`	string	—	The latest version ARN of the created image recipe.
`latestVersion.major`	string	—	The latest version ARN of the created image recipe, with the same major version.
`latestVersion.minor`	string	—	The latest version ARN of the created image recipe, with the same minor version.
`latestVersion.patch`	string	—	The latest version ARN of the created image recipe, with the same patch version.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderInfrastructureConfiguration # CLOUD CONTROL · AWS::ImageBuilder::InfrastructureConfiguration

ImageBuilderInfrastructureConfiguration manages AWS::ImageBuilder::InfrastructureConfiguration through the AWS Cloud Control API.

kubectl get imagebuilderinfrastructureconfigurations · example on GitHub

Example

# ImageBuilderInfrastructureConfiguration — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderinfrastructureconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderInfrastructureConfiguration
metadata:
  name: example-imagebuilderinfrastructureconfiguration
  namespace: default
spec:
  description: Managed by konfig-konector
  instanceMetadataOptions:
    httpPutResponseHopLimit: 1
    httpTokens: required
  instanceProfileName: example-imagebuilderinfrastructureconfiguration
  instanceTypes:
  - example
  keyPair: example
  logging:
    s3Logs:
      s3BucketName: example-imagebuilderinfrastructureconfiguration
      s3KeyPrefix: example
  name: example-imagebuilderinfrastructureconfiguration
  placement:
    availabilityZone: us-east-1a
    hostResourceGroupArn: arn:aws:iam::123456789012:role/example-role
    tenancy: default
  providerRef:
    name: example-imagebuilderinfrastructureconfiguration
    region: us-east-1
  resourceTags:
    environment: dev
    team: platform
  securityGroupIds:
  - example
  snsTopicArn: arn:aws:iam::123456789012:role/example-role
  tags:
    environment: dev
    team: platform
  terminateInstanceOnFailure: false

Spec

Field	Type	Required	Description
`description`	string	—	The description of the infrastructure configuration.
`instanceMetadataOptions`	object	—	The instance metadata option settings for the infrastructure configuration.
`instanceMetadataOptions.httpPutResponseHopLimit`	integer	—	Limit the number of hops that an instance metadata request can traverse to reach its destination.
`instanceMetadataOptions.httpTokens`	enum	—	Indicates whether a signed token header is required for instance metadata retrieval requests. Allowed: `required, optional`
`instanceProfileName`	string	yes	The instance profile of the infrastructure configuration.
`instanceTypes`	array<string>	—	The instance types of the infrastructure configuration.
`keyPair`	string	—	The EC2 key pair of the infrastructure configuration..
`logging`	object	—	The logging configuration of the infrastructure configuration.
`logging.s3Logs`	object	—	ImageBuilderInfrastructureConfigurationS3Logs is a nested property type of AWS::ImageBuilder::InfrastructureConfiguration.
`logging.s3Logs.s3BucketName`	string	—	S3BucketName
`logging.s3Logs.s3KeyPrefix`	string	—	S3KeyPrefix
`name`	string	yes	The name of the infrastructure configuration.
`placement`	object	—	The placement option settings for the infrastructure configuration.
`placement.availabilityZone`	string	—	AvailabilityZone
`placement.hostId`	string	—	HostId
`placement.hostResourceGroupArn`	string	—	HostResourceGroupArn
`placement.tenancy`	enum	—	Tenancy Allowed: `default, dedicated, host`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceTags`	map<string>	—	The tags attached to the resource created by Image Builder.
`securityGroupIds`	array<string>	—	The security group IDs of the infrastructure configuration.
`snsTopicArn`	string	—	The SNS Topic Amazon Resource Name (ARN) of the infrastructure configuration.
`subnetId`	string	—	The subnet ID of the infrastructure configuration.
`tags`	map<string>	—	The tags associated with the component.
`terminateInstanceOnFailure`	boolean	—	The terminate instance on failure configuration of the infrastructure configuration.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the infrastructure configuration.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderLifecyclePolicy # CLOUD CONTROL · AWS::ImageBuilder::LifecyclePolicy

ImageBuilderLifecyclePolicy manages AWS::ImageBuilder::LifecyclePolicy through the AWS Cloud Control API.

kubectl get imagebuilderlifecyclepolicies · example on GitHub

Example

# ImageBuilderLifecyclePolicy — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderlifecyclepolicy
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderLifecyclePolicy
metadata:
  name: example-imagebuilderlifecyclepolicy
  namespace: default
spec:
  description: Managed by konfig-konector
  executionRole: example
  name: example-imagebuilderlifecyclepolicy
  policyDetails:
  - action:
      type: DELETE
    filter:
      retainAtLeast: 1
      type: AGE
      unit: DAYS
      value: 1
  providerRef:
    name: example-imagebuilderlifecyclepolicy
    region: us-east-1
  resourceSelection:
    recipes:
    - name: example-imagebuilderlifecyclepolicy
      semanticVersion: '1.0'
    tagMap:
      environment: dev
      team: platform
  resourceType: AMI_IMAGE
  status: DISABLED
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`description`	string	—	The description of the lifecycle policy.
`executionRole`	string	yes	The execution role of the lifecycle policy.
`name`	string	yes	The name of the lifecycle policy.
`policyDetails`	array<object>	yes	The policy details of the lifecycle policy.
`policyDetails[].action`	object	yes	ImageBuilderLifecyclePolicyAction is a nested property type of AWS::ImageBuilder::LifecyclePolicy.
`policyDetails[].action.includeResources`	object	—	ImageBuilderLifecyclePolicyIncludeResources is a nested property type of AWS::ImageBuilder::LifecyclePolicy.
`policyDetails[].action.includeResources.amis`	boolean	—	Use to configure lifecycle actions on AMIs.
`policyDetails[].action.includeResources.containers`	boolean	—	Use to configure lifecycle actions on containers.
`policyDetails[].action.includeResources.snapshots`	boolean	—	Use to configure lifecycle actions on snapshots.
`policyDetails[].action.type`	enum	yes	The action type of the policy detail. Allowed: `DELETE, DEPRECATE, DISABLE`
`policyDetails[].exclusionRules`	object	—	ImageBuilderLifecyclePolicyExclusionRules is a nested property type of AWS::ImageBuilder::LifecyclePolicy.
`policyDetails[].exclusionRules.amis`	object	—	ImageBuilderLifecyclePolicyAmiExclusionRules is a nested property type of AWS::ImageBuilder::LifecyclePolicy.
`policyDetails[].exclusionRules.amis.isPublic`	boolean	—	Use to apply lifecycle policy actions on whether the AMI is public.
`policyDetails[].exclusionRules.amis.lastLaunched`	object	—	Use to apply lifecycle policy actions on AMIs launched before a certain time.
`policyDetails[].exclusionRules.amis.lastLaunched.unit`	enum	yes	The value's time unit. Allowed: `DAYS, WEEKS, MONTHS, YEARS`
`policyDetails[].exclusionRules.amis.lastLaunched.value`	integer	yes	The last launched value.
`policyDetails[].exclusionRules.amis.regions`	array<string>	—	Use to apply lifecycle policy actions on AMIs distributed to a set of regions.
`policyDetails[].exclusionRules.amis.sharedAccounts`	array<string>	—	Use to apply lifecycle policy actions on AMIs shared with a set of regions.
`policyDetails[].exclusionRules.amis.tagMap`	map<string>	—	The AMIs to select by tag.
`policyDetails[].exclusionRules.tagMap`	map<string>	—	The Image Builder tags to filter on.
`policyDetails[].filter`	object	yes	ImageBuilderLifecyclePolicyFilter is a nested property type of AWS::ImageBuilder::LifecyclePolicy.
`policyDetails[].filter.retainAtLeast`	integer	—	The minimum number of Image Builder resources to retain.
`policyDetails[].filter.type`	enum	yes	The filter type. Allowed: `AGE, COUNT`
`policyDetails[].filter.unit`	enum	—	The value's time unit. Allowed: `DAYS, WEEKS, MONTHS, YEARS`
`policyDetails[].filter.value`	integer	yes	The filter value.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceSelection`	object	yes	The resource selection of the lifecycle policy.
`resourceSelection.recipes`	array<object>	—	The recipes to select.
`resourceSelection.recipes[].name`	string	yes	The recipe name.
`resourceSelection.recipes[].semanticVersion`	string	yes	The recipe version.
`resourceSelection.tagMap`	map<string>	—	The Image Builder resources to select by tag.
`resourceType`	enum	yes	The resource type of the lifecycle policy. Allowed: `AMI_IMAGE, CONTAINER_IMAGE`
`status`	enum	—	The status of the lifecycle policy. Allowed: `DISABLED, ENABLED`
`tags`	map<string>	—	The tags associated with the lifecycle policy.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the lifecycle policy.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

ImageBuilderWorkflow # CLOUD CONTROL · AWS::ImageBuilder::Workflow

ImageBuilderWorkflow manages AWS::ImageBuilder::Workflow through the AWS Cloud Control API.

kubectl get imagebuilderworkflows · example on GitHub

Example

# ImageBuilderWorkflow — EC2 Image Builder
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/imagebuilder.html#imagebuilderworkflow
apiVersion: aws.konfig.io/v1alpha1
kind: ImageBuilderWorkflow
metadata:
  name: example-imagebuilderworkflow
  namespace: default
spec:
  changeDescription: Managed by konfig-konector
  data: example
  description: Managed by konfig-konector
  kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
  name: example-imagebuilderworkflow
  providerRef:
    name: example-imagebuilderworkflow
    region: us-east-1
  tags:
    environment: dev
    team: platform
  type: BUILD
  uri: example
  version: '1.0'

Spec

Field	Type	Required	Description
`changeDescription`	string	—	The change description of the workflow.
`data`	string	—	The data of the workflow.
`description`	string	—	The description of the workflow.
`kmsKeyId`	string	—	The KMS key identifier used to encrypt the workflow.
`name`	string	yes	The name of the workflow.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	The tags associated with the workflow.
`type`	enum	yes	The type of the workflow denotes whether the workflow is used to build, test, or distribute. Allowed: `BUILD, TEST, DISTRIBUTION`
`uri`	string	—	The uri of the workflow.
`version`	string	yes	The version of the workflow.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the workflow.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`latestVersion`	object	—	The latest version references of the workflow.
`latestVersion.arn`	string	—	The latest version ARN of the created workflow.
`latestVersion.major`	string	—	The latest version ARN of the created workflow, with the same major version.
`latestVersion.minor`	string	—	The latest version ARN of the created workflow, with the same minor version.
`latestVersion.patch`	string	—	The latest version ARN of the created workflow, with the same patch version.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.