Route 53

7 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

DelegationSignerRecord # GA

DelegationSignerRecord is the Schema for managing DS records in Route53 for DNSSEC delegation.

kubectl get delegationsignerrecords · example on GitHub

Example

# DelegationSignerRecord — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#delegationsignerrecord
apiVersion: aws.konfig.io/v1alpha1
kind: DelegationSignerRecord
metadata:
  name: example-delegationsignerrecord
  namespace: default
spec:
  childZoneName: example-delegationsignerrecord
  dsRecord: example
  hostedZoneID: Z0ABC123EXAMPLE
  providerRef:
    name: example-delegationsignerrecord
    region: us-east-1
  ttl: 1

Spec

Field	Type	Required	Description
`childZoneName`	string	yes	ChildZoneName is the domain name of the child zone.
`dsRecord`	string	yes	DSRecord is the full DS record value (e.g.
`hostedZoneID`	string	yes	HostedZoneID is the Route53 hosted zone ID of the parent zone.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`ttl`	integer	—	TTL is the TTL in seconds for the DS record.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`changeID`	string	—	ChangeID is the Route53 change ID for the DS record change.
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

HealthCheck # GA

HealthCheck is the Schema for managing AWS Route53 Health Checks.

kubectl get healthchecks · example on GitHub

Example

# HealthCheck — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#healthcheck
apiVersion: aws.konfig.io/v1alpha1
kind: HealthCheck
metadata:
  name: example-healthcheck
  namespace: default
spec:
  failureThreshold: 1
  fqdn: example
  ipAddress: example
  port: 1
  providerRef:
    name: example-healthcheck
    region: us-east-1
  requestInterval: 1
  resourcePath: example
  searchString: example
  tags:
    environment: dev
    team: platform
  type: HTTP

Spec

Field	Type	Required	Description
`failureThreshold`	integer	—	FailureThreshold is the number of consecutive failures before marking unhealthy (1–10).
`fqdn`	string	—	FQDN is the fully qualified domain name of the endpoint.
`ipAddress`	string	—	IPAddress is the IPv4 or IPv6 address of the endpoint.
`port`	integer	—	Port is the port on the endpoint to connect to.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`requestInterval`	enum	—	RequestInterval is the frequency of health checks in seconds (10 or 30). Allowed: `10, 30`
`resourcePath`	string	—	ResourcePath is the path that Route53 requests when performing health checks (HTTP/HTTPS).
`searchString`	string	—	SearchString is the string to search for in HTTP/HTTPS responses.
`tags`	map<string>	—	Tags are AWS resource tags applied to the health check.
`type`	enum	yes	Type is the type of health check. Allowed: `HTTP, HTTPS, HTTP_STR_MATCH, HTTPS_STR_MATCH, TCP, CALCULATED, CLOUDWATCH_METRIC, RECOVERY_CONTROL`

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`healthCheckId`	string	—	HealthCheckID is the Route53 health check identifier.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

HostedZone # GA

HostedZone is the Schema for managing AWS Route53 Hosted Zones.

kubectl get hostedzones · example on GitHub

Example

# HostedZone — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#hostedzone
apiVersion: aws.konfig.io/v1alpha1
kind: HostedZone
metadata:
  name: example-hostedzone
  namespace: default
spec:
  comment: Managed by konfig-konector
  name: example-hostedzone
  private: false
  providerRef:
    name: example-hostedzone
    region: us-east-1
  tags:
    environment: dev
    team: platform
  vpcRef:
    id: example-id
    region: us-east-1

Spec

Field	Type	Required	Description
`comment`	string	—	Comment is a human-readable description for the hosted zone.
`delegationSetId`	string	—	DelegationSetID is the reusable delegation set ID to assign to this zone.
`name`	string	yes	Name is the DNS zone name (e.g.
`private`	boolean	—	Private indicates this is a private hosted zone (requires VPCRef).
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags applied to the hosted zone.
`vpcRef`	object	—	VPCRef is required when Private is true.
`vpcRef.id`	string	yes	ID is the VPC ID.
`vpcRef.region`	string	yes	Region is the AWS region of the VPC.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`hostedZoneId`	string	—	HostedZoneID is the Route53 hosted zone identifier (e.g.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`nameServers`	array<string>	—	NameServers are the authoritative name servers for the zone.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

HostedZoneVPCAssociation # GA WIP · CROSS-ACCOUNT

STATUS: WIP.

kubectl get hostedzonevpcassociations · example on GitHub

Example

# HostedZoneVPCAssociation — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#hostedzonevpcassociation
apiVersion: aws.konfig.io/v1alpha1
kind: HostedZoneVPCAssociation
metadata:
  name: example-hostedzonevpcassociation
  namespace: default
spec:
  hostedZoneRef:
    name: example-hostedzone
  providerRef:
    name: example-hostedzonevpcassociation
    region: us-east-1
  vpcProviderRef:
    name: example-hostedzonevpcassociation
    region: us-east-1
  vpcRef:
    name: example-vpc
  vpcRegion: example

Spec

Field	Type	Required	Description
`hostedZoneRef`	object	yes	HostedZoneRef is the private hosted zone.
`hostedZoneRef.id`	string	—	ID is a direct hosted zone ID (e.g.
`hostedZoneRef.name`	string	—	Name of a HostedZone CR.
`hostedZoneRef.namespace`	string	—	Namespace of the HostedZone CR.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`vpcProviderRef`	object	—	VPCProviderRef names the AWSProvider of the account owning the VPC when it differs from the zone's account.
`vpcProviderRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`vpcProviderRef.region`	string	—	Region overrides the provider's region for this resource only.
`vpcRef`	object	yes	VPCRef is the VPC to associate (CR name or direct ID).
`vpcRef.id`	string	—	ID is a direct AWS VPC ID (e.g.
`vpcRef.name`	string	—	Name of a VPC CR in the same namespace.
`vpcRegion`	string	yes	VPCRegion is the region of the VPC.

Status

Field	Type	Required	Description
`associated`	boolean	—	Associated is true once AWS reports the VPC on the zone.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`hostedZoneId`	string	—	HostedZoneID and VPCID are the resolved identifiers.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`vpcId`	string	—

RecordSet # GA

RecordSet is the Schema for managing AWS Route53 DNS record sets.

kubectl get recordsets · example on GitHub

Example

# RecordSet — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#recordset
apiVersion: aws.konfig.io/v1alpha1
kind: RecordSet
metadata:
  name: example-recordset
  namespace: default
spec:
  alias:
    dnsName: example-recordset
    evaluateTargetHealth: false
    hostedZoneId: Z0ABC123EXAMPLE
  failover: PRIMARY
  healthCheckRef:
    name: example-healthcheck
  hostedZoneRef:
    name: example-hostedzone
  name: example-recordset
  providerRef:
    name: example-recordset
    region: us-east-1
  records:
  - example
  setIdentifier: example
  ttl: 1
  type: A
  weight: 1

Spec

Field	Type	Required	Description
`alias`	object	—	Alias defines an alias record target.
`alias.dnsName`	string	yes	DNSName is the DNS name of the target resource.
`alias.evaluateTargetHealth`	boolean	—	EvaluateTargetHealth enables health checking of the alias target.
`alias.hostedZoneId`	string	yes	HostedZoneID is the hosted zone ID of the target resource.
`failover`	enum	—	Failover sets PRIMARY or SECONDARY failover routing. Allowed: `PRIMARY, SECONDARY`
`healthCheckRef`	object	—	HealthCheckRef references a HealthCheck CR to associate with this record.
`healthCheckRef.name`	string	—	Name of the resource in the same namespace.
`healthCheckRef.namespace`	string	—	Namespace of the resource.
`hostedZoneRef`	object	yes	HostedZoneRef references the hosted zone that owns this record.
`hostedZoneRef.id`	string	—	ID is a direct Route53 hosted zone ID (e.g.
`hostedZoneRef.name`	string	—	Name of a HostedZone CR in the same namespace.
`name`	string	yes	Name is the DNS record name (e.g.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`records`	array<string>	—	Records are the record values.
`setIdentifier`	string	—	SetIdentifier is a unique identifier to differentiate records with the same name and type in weighted, latency, failover, or geolocation routing.
`ttl`	integer	—	TTL is the time-to-live for the record in seconds.
`type`	enum	yes	Type is the DNS record type (A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, CAA, PTR). Allowed: `A, AAAA, CNAME, MX, TXT, NS, SOA, SRV…`
`weight`	integer	—	Weight is used for weighted routing policy (0–255).

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`changeId`	string	—	ChangeID is the Route53 change ID for the last applied change.
`changeStatus`	string	—	ChangeStatus is the status of the last Route53 change (PENDING or INSYNC).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`hostedZoneId`	string	—	HostedZoneID is the resolved Route53 hosted zone ID.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

Route53CidrCollection # CLOUD CONTROL · AWS::Route53::CidrCollection

Route53CidrCollection manages AWS::Route53::CidrCollection through the AWS Cloud Control API.

kubectl get route53cidrcollections · example on GitHub

Example

# Route53CidrCollection — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#route53cidrcollection
apiVersion: aws.konfig.io/v1alpha1
kind: Route53CidrCollection
metadata:
  name: example-route53cidrcollection
  namespace: default
spec:
  locations:
  - cidrList:
    - 10.0.0.0/16
    locationName: example-route53c
  name: example-route53cidrcollection
  providerRef:
    name: example-route53cidrcollection
    region: us-east-1

Spec

Field	Type	Required	Description
`locations`	array<object>	—	A complex type that contains information about the list of CIDR locations.
`locations[].cidrList`	array<string>	yes	A list of CIDR blocks.
`locations[].locationName`	string	yes	The name of the location that is associated with the CIDR collection.
`name`	string	yes	A unique name for the CIDR collection.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon resource name (ARN) to uniquely identify the AWS resource.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	UUID of the CIDR collection.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

Route53DNSSEC # CLOUD CONTROL · AWS::Route53::DNSSEC

Route53DNSSEC manages AWS::Route53::DNSSEC through the AWS Cloud Control API.

kubectl get route53dnssecs · example on GitHub

Example

# Route53DNSSEC — Route 53
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/route53.html#route53dnssec
apiVersion: aws.konfig.io/v1alpha1
kind: Route53DNSSEC
metadata:
  name: example-route53dnssec
  namespace: default
spec:
  hostedZoneId: Z0ABC123EXAMPLE
  providerRef:
    name: example-route53dnssec
    region: us-east-1

Spec

Field	Type	Required	Description
`hostedZoneId`	string	yes	The unique string (ID) used to identify a hosted zone.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.