Redshift

9 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

RedshiftCluster # GA

RedshiftCluster is the Schema for managing Redshift clusters.

kubectl get redshiftclusters · example on GitHub

Example

# RedshiftCluster — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftcluster
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftCluster
metadata:
  name: example-redshiftcluster
  namespace: default
spec:
  clusterIdentifier: example
  clusterSubnetGroupName: example-redshiftcluster
  clusterSubnetGroupRef: example
  dbName: example-redshiftcluster
  encrypted: true
  kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
  masterUserPasswordRef:
    key: example
    name: example-redshiftcluster
  masterUsername: example-redshiftcluster
  nodeType: example
  numberOfNodes: 1
  providerRef:
    name: example-redshiftcluster
    region: us-east-1
  publiclyAccessible: false
  skipFinalClusterSnapshot: false
  tags:
    environment: dev
    team: platform
  vpcSecurityGroupRefs:
  - name: example-vpcsecuritygrouprefs

Spec

Field	Type	Required	Description
`clusterIdentifier`	string	yes	ClusterIdentifier is the unique identifier of the cluster.
`clusterSubnetGroupName`	string	—	ClusterSubnetGroupName is the name of an existing Redshift subnet group.
`clusterSubnetGroupRef`	string	—	ClusterSubnetGroupRef is the name of a RedshiftSubnetGroup CR in the same namespace.
`dbName`	string	—	DBName is the name of the first database created in the cluster.
`encrypted`	boolean	—	Encrypted enables encryption at rest.
`kmsKeyId`	string	—	KMSKeyID is the KMS key ID/ARN used for encryption at rest.
`masterUserPasswordRef`	object	yes	MasterUserPasswordRef references a Kubernetes Secret containing the master user password.
`masterUserPasswordRef.key`	string	yes	Key is the key within the Secret whose value to use.
`masterUserPasswordRef.name`	string	yes	Name of the Kubernetes Secret.
`masterUsername`	string	yes	MasterUsername is the master user name.
`nodeType`	string	yes	NodeType is the node type to provision (e.g.
`numberOfNodes`	integer	—	NumberOfNodes is the number of compute nodes.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`publiclyAccessible`	boolean	—	PubliclyAccessible controls whether the cluster is reachable from a public network.
`skipFinalClusterSnapshot`	boolean	—	SkipFinalClusterSnapshot skips the final snapshot when the cluster is deleted.
`tags`	map<string>	—	Tags are AWS resource tags to apply.
`vpcSecurityGroupRefs`	array<object>	—	VPCSecurityGroupRefs is the list of VPC security group references.
`vpcSecurityGroupRefs[].id`	string	—	ID is a direct AWS Security Group ID (e.g.
`vpcSecurityGroupRefs[].name`	string	—	Name of a SecurityGroup CR in the same namespace.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`clusterIdentifier`	string	—	ClusterIdentifier is the identifier of the cluster in AWS.
`clusterStatus`	string	—	ClusterStatus is the current cluster status (available, creating, modifying, deleting, ...).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`endpoint`	string	—	Endpoint is the connection endpoint hostname.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`port`	integer	—	Port is the connection port.

RedshiftEndpointAccess # CLOUD CONTROL · AWS::Redshift::EndpointAccess

RedshiftEndpointAccess manages AWS::Redshift::EndpointAccess through the AWS Cloud Control API.

kubectl get redshiftendpointaccesses · example on GitHub

Example

# RedshiftEndpointAccess — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftendpointaccess
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftEndpointAccess
metadata:
  name: example-redshiftendpointaccess
  namespace: default
spec:
  clusterIdentifier: example
  endpointName: example-redshiftendpointaccess
  providerRef:
    name: example-redshiftendpointaccess
    region: us-east-1
  resourceOwner: example
  subnetGroupName: example-redshiftendpointaccess
  vpcSecurityGroupIds:
  - example

Spec

Field	Type	Required	Description
`clusterIdentifier`	string	yes	A unique identifier for the cluster.
`endpointName`	string	yes	The name of the endpoint.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceOwner`	string	—	The AWS account ID of the owner of the cluster.
`subnetGroupName`	string	yes	The subnet group name where Amazon Redshift chooses to deploy the endpoint.
`vpcSecurityGroupIds`	array<string>	yes	A list of vpc security group ids to apply to the created endpoint access.

Status

Field	Type	Required	Description
`address`	string	—	The DNS address of the endpoint.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`endpointCreateTime`	string	—	The time (UTC) that the endpoint was created.
`endpointStatus`	string	—	The status of the endpoint.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`port`	integer	—	The port number on which the cluster accepts incoming connections.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`vpcEndpoint`	object	—	The connection endpoint for connecting to an Amazon Redshift cluster through the proxy.
`vpcEndpoint.networkInterfaces`	array<object>	—	One or more network interfaces of the endpoint.
`vpcEndpoint.networkInterfaces[].availabilityZone`	string	—	The Availability Zone.
`vpcEndpoint.networkInterfaces[].networkInterfaceId`	string	—	The network interface identifier.
`vpcEndpoint.networkInterfaces[].privateIpAddress`	string	—	The IPv4 address of the network interface within the subnet.
`vpcEndpoint.networkInterfaces[].subnetId`	string	—	The subnet identifier.
`vpcEndpoint.vpcEndpointId`	string	—	The connection endpoint ID for connecting an Amazon Redshift cluster through the proxy.
`vpcEndpoint.vpcId`	string	—	The VPC identifier that the endpoint is associated.
`vpcSecurityGroups`	array<object>	—	A list of Virtual Private Cloud (VPC) security groups to be associated with the endpoint.
`vpcSecurityGroups[].status`	string	—	The status of the VPC security group.
`vpcSecurityGroups[].vpcSecurityGroupId`	string	—	The identifier of the VPC security group.

RedshiftEndpointAuthorization # CLOUD CONTROL · AWS::Redshift::EndpointAuthorization

RedshiftEndpointAuthorization manages AWS::Redshift::EndpointAuthorization through the AWS Cloud Control API.

kubectl get redshiftendpointauthorizations · example on GitHub

Example

# RedshiftEndpointAuthorization — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftendpointauthorization
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftEndpointAuthorization
metadata:
  name: example-redshiftendpointauthorization
  namespace: default
spec:
  account: example
  clusterIdentifier: example
  force: false
  providerRef:
    name: example-redshiftendpointauthorization
    region: us-east-1
  vpcIds:
  - example

Spec

Field	Type	Required	Description
`account`	string	yes	The target AWS account ID to grant or revoke access for.
`clusterIdentifier`	string	yes	The cluster identifier.
`force`	boolean	—	Indicates whether to force the revoke action.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`vpcIds`	array<string>	—	The virtual private cloud (VPC) identifiers to grant or revoke access to.

Status

Field	Type	Required	Description
`allowedAllVPCs`	boolean	—	Indicates whether all VPCs in the grantee account are allowed access to the cluster.
`allowedVPCs`	array<string>	—	The VPCs allowed access to the cluster.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`authorizeTime`	string	—	The time (UTC) when the authorization was created.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`clusterStatus`	string	—	The status of the cluster.
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`endpointCount`	integer	—	The number of Redshift-managed VPC endpoints created for the authorization.
`grantee`	string	—	The AWS account ID of the grantee of the cluster.
`grantor`	string	—	The AWS account ID of the cluster owner.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	string	—	The status of the authorization action.

RedshiftEventSubscription # CLOUD CONTROL · AWS::Redshift::EventSubscription

RedshiftEventSubscription manages AWS::Redshift::EventSubscription through the AWS Cloud Control API.

kubectl get redshifteventsubscriptions · example on GitHub

Example

# RedshiftEventSubscription — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshifteventsubscription
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftEventSubscription
metadata:
  name: example-redshifteventsubscription
  namespace: default
spec:
  enabled: true
  eventCategories:
  - example
  providerRef:
    name: example-redshifteventsubscription
    region: us-east-1
  severity: ERROR
  snsTopicArn: arn:aws:iam::123456789012:role/example-role
  sourceIds:
  - example
  sourceType: cluster
  subscriptionName: example-redshifteventsubscription
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`enabled`	boolean	—	A boolean value; set to true to activate the subscription, and set to false to create the subscription but not activate it.
`eventCategories`	array<string>	—	Specifies the Amazon Redshift event categories to be published by the event notification subscription.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`severity`	enum	—	Specifies the Amazon Redshift event severity to be published by the event notification subscription. Allowed: `ERROR, INFO`
`snsTopicArn`	string	—	The Amazon Resource Name (ARN) of the Amazon SNS topic used to transmit the event notifications.
`sourceIds`	array<string>	—	A list of one or more identifiers of Amazon Redshift source objects.
`sourceType`	enum	—	The type of source that will be generating the events. Allowed: `cluster, cluster-parameter-group, cluster-security-group, cluster-snapshot, scheduled-action`
`subscriptionName`	string	yes	The name of the Amazon Redshift event notification subscription Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—	An array of key-value pairs to apply to this resource.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`custSubscriptionId`	string	—	The name of the Amazon Redshift event notification subscription.
`customerAwsId`	string	—	The AWS account associated with the Amazon Redshift event notification subscription.
`eventCategoriesList`	array<string>	—	The list of Amazon Redshift event categories specified in the event notification subscription.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`sourceIdsList`	array<string>	—	A list of the sources that publish events to the Amazon Redshift event notification subscription.
`status`	enum	—	The status of the Amazon Redshift event notification subscription. Allowed: `active, no-permission, topic-not-exist`
`subscriptionCreationTime`	string	—	The date and time the Amazon Redshift event notification subscription was created.

RedshiftIntegration # CLOUD CONTROL · AWS::Redshift::Integration

RedshiftIntegration manages AWS::Redshift::Integration through the AWS Cloud Control API.

kubectl get redshiftintegrations · example on GitHub

Example

# RedshiftIntegration — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftintegration
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftIntegration
metadata:
  name: example-redshiftintegration
  namespace: default
spec:
  additionalEncryptionContext:
    key: value
  integrationName: example-redshiftintegration
  kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
  providerRef:
    name: example-redshiftintegration
    region: us-east-1
  sourceArn: arn:aws:iam::123456789012:role/example-role
  tags:
  - key: example
    value: example
  targetArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`additionalEncryptionContext`	map<string>	—	Create-only in AWS: changing it requires replacing the resource.
`integrationName`	string	—	The name of the integration.
`kmsKeyId`	string	—	An KMS key identifier for the key to use to encrypt the integration.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`sourceArn`	string	yes	The Amazon Resource Name (ARN) of the database to use as the source for replication Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—	An array of key-value pairs to apply to this resource.
`tags[].key`	string	yes
`tags[].value`	string	yes
`targetArn`	string	yes	The Amazon Resource Name (ARN) of the Redshift data warehouse to use as the target for replication Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createTime`	string	—	The time (UTC) when the integration was created.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`integrationArn`	string	—	The Amazon Resource Name (ARN) of the integration.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

RedshiftParameterGroup # GA

RedshiftParameterGroup is the Schema for managing Redshift cluster parameter groups.

kubectl get redshiftparametergroups · example on GitHub

Example

# RedshiftParameterGroup — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftparametergroup
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftParameterGroup
metadata:
  name: example-redshiftparametergroup
  namespace: default
spec:
  description: Managed by konfig-konector
  family: example
  name: example-redshiftparametergroup
  parameters:
  - name: example-redshiftparametergroup
    value: example
  providerRef:
    name: example-redshiftparametergroup
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`description`	string	yes	Description is a description of the parameter group.
`family`	string	yes	Family is the parameter group family (e.g.
`name`	string	yes	Name is the name of the parameter group.
`parameters`	array<object>	—	Parameters is the list of parameter overrides to apply.
`parameters[].name`	string	yes	Name is the parameter name.
`parameters[].value`	string	yes	Value is the parameter value.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply at creation.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`parameterGroupName`	string	—	ParameterGroupName is the name of the parameter group in AWS.

RedshiftScheduledAction # CLOUD CONTROL · AWS::Redshift::ScheduledAction

RedshiftScheduledAction manages AWS::Redshift::ScheduledAction through the AWS Cloud Control API.

kubectl get redshiftscheduledactions · example on GitHub

Example

# RedshiftScheduledAction — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftscheduledaction
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftScheduledAction
metadata:
  name: example-redshiftscheduledaction
  namespace: default
spec:
  enable: true
  endTime: '2026-01-01T00:00:00Z'
  iamRole: example
  providerRef:
    name: example-redshiftscheduledaction
    region: us-east-1
  schedule: example
  scheduledActionDescription: Managed by konfig-konector
  scheduledActionName: example-redshiftscheduledaction
  startTime: '2026-01-01T00:00:00Z'

Spec

Field	Type	Required	Description
`enable`	boolean	—	If true, the schedule is enabled.
`endTime`	string	—	The end time in UTC of the scheduled action.
`iamRole`	string	—	The IAM role to assume to run the target action.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`schedule`	string	—	The schedule in `at( )` or `cron( )` format.
`scheduledActionDescription`	string	—	The description of the scheduled action.
`scheduledActionName`	string	yes	The name of the scheduled action.
`startTime`	string	—	The start time in UTC of the scheduled action.
`targetAction`	object	—	A JSON format string of the Amazon Redshift API operation with input parameters.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`nextInvocations`	array<string>	—	List of times when the scheduled action will run.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`state`	enum	—	The state of the scheduled action. Allowed: `ACTIVE, DISABLED`

RedshiftSnapshotSchedule # CLOUD CONTROL · AWS::Redshift::SnapshotSchedule

RedshiftSnapshotSchedule manages AWS::Redshift::SnapshotSchedule through the AWS Cloud Control API.

kubectl get redshiftsnapshotschedules · example on GitHub

Example

# RedshiftSnapshotSchedule — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftsnapshotschedule
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftSnapshotSchedule
metadata:
  name: example-redshiftsnapshotschedule
  namespace: default
spec:
  providerRef:
    name: example-redshiftsnapshotschedule
    region: us-east-1
  scheduleDefinitions:
  - example
  scheduleDescription: Managed by konfig-konector
  scheduleIdentifier: example
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`scheduleDefinitions`	array<string>	yes	The definition of the snapshot schedule.
`scheduleDescription`	string	—	The description of the snapshot schedule.
`scheduleIdentifier`	string	yes	A unique identifier for the snapshot schedule.
`tags`	array<object>	—	An optional set of tags for the snapshot schedule.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the snapshot schedule.
`associatedClusterCount`	integer	—	The number of clusters associated with the schedule.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

RedshiftSubnetGroup # GA

RedshiftSubnetGroup is the Schema for managing Redshift cluster subnet groups.

kubectl get redshiftsubnetgroups · example on GitHub

Example

# RedshiftSubnetGroup — Redshift
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/redshift.html#redshiftsubnetgroup
apiVersion: aws.konfig.io/v1alpha1
kind: RedshiftSubnetGroup
metadata:
  name: example-redshiftsubnetgroup
  namespace: default
spec:
  description: Managed by konfig-konector
  name: example-redshiftsubnetgroup
  providerRef:
    name: example-redshiftsubnetgroup
    region: us-east-1
  subnetRefs:
  - name: example-subnetrefs
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`description`	string	yes	Description is a description of the subnet group.
`name`	string	yes	Name is the name of the subnet group.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`subnetRefs`	array<object>	yes	SubnetRefs is the list of subnets in the group.
`subnetRefs[].id`	string	—	ID is a direct AWS Subnet ID (e.g.
`subnetRefs[].name`	string	—	Name of a Subnet CR in the same namespace.
`tags`	map<string>	—	Tags are AWS resource tags to apply at creation.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`subnetGroupName`	string	—	SubnetGroupName is the name of the subnet group in AWS.
`vpcId`	string	—	VPCID is the VPC the subnet group belongs to.