S3 Control

1 resource kind. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

S3AccessPoint # GA

S3AccessPoint is the Schema for managing S3 access points.

kubectl get s3accesspoints · example on GitHub

Example

# S3AccessPoint — S3 Control
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3control.html#s3accesspoint
apiVersion: aws.konfig.io/v1alpha1
kind: S3AccessPoint
metadata:
  name: example-s3accesspoint
  namespace: default
spec:
  accountId: '123456789012'
  bucketRef:
    bucketName: example-s3accesspoint
    name: example-s3accesspoint
  name: example-s3accesspoint
  providerRef:
    name: example-s3accesspoint
    region: us-east-1
  publicAccessBlock:
    blockPublicAcls: false
    blockPublicPolicy: false
    ignorePublicAcls: false
    restrictPublicBuckets: false
  vpcConfiguration:
    vpcRef:
      name: example-vpc

Spec

Field	Type	Required	Description
`accountId`	string	yes	AccountID is the AWS account ID that owns the bucket.
`bucketRef`	object	yes	BucketRef references the bucket the access point is attached to (by S3Bucket CR name or direct bucket name).
`bucketRef.bucketName`	string	—	BucketName is a direct S3 bucket name (bypasses CR lookup).
`bucketRef.name`	string	—	Name is the name of an S3Bucket CR in the same namespace.
`name`	string	yes	Name is the name of the access point.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`publicAccessBlock`	object	—	PublicAccessBlock configures public access blocking.
`publicAccessBlock.blockPublicAcls`	boolean	—	BlockPublicAcls blocks public ACLs.
`publicAccessBlock.blockPublicPolicy`	boolean	—	BlockPublicPolicy blocks public bucket policies.
`publicAccessBlock.ignorePublicAcls`	boolean	—	IgnorePublicAcls ignores public ACLs.
`publicAccessBlock.restrictPublicBuckets`	boolean	—	RestrictPublicBuckets restricts public bucket policies.
`vpcConfiguration`	object	—	VPCConfiguration restricts access to the given VPC.
`vpcConfiguration.vpcRef`	object	yes	VPCRef references the VPC (by VPC CR name or direct VPC ID).
`vpcConfiguration.vpcRef.id`	string	—	ID is a direct AWS VPC ID (e.g.
`vpcConfiguration.vpcRef.name`	string	—	Name of a VPC CR in the same namespace.

Status

Field	Type	Required	Description
`alias`	string	—	Alias is the bucket-style alias of the access point.
`arn`	string	—	ARN is the ARN of the access point.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.