Service Catalog
16 resource kinds. Generated from the operator's CRD schemas.
aws.konfig.io/v1alpha1
SCPortfolio # GA
SCPortfolio is the Schema for managing AWS Service Catalog portfolios.
kubectl get scportfolios · example on GitHub
Example
# SCPortfolio — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scportfolio
apiVersion: aws.konfig.io/v1alpha1
kind: SCPortfolio
metadata:
name: example-scportfolio
namespace: default
spec:
description: Managed by konfig-konector
displayName: example-scportfolio
providerName: example-scportfolio
providerRef:
name: example-scportfolio
region: us-east-1
tags:
environment: dev
team: platform
Spec
| Field | Type | Required | Description |
|---|---|---|---|
description | string | — | Description of the portfolio. |
displayName | string | yes | DisplayName is the portfolio name shown to users. |
providerName | string | yes | ProviderName is the name of the portfolio provider. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tags | map<string> | — | Tags are AWS resource tags to apply. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | ARN is the Amazon Resource Name of the portfolio. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
lastSyncTime | string | — | LastSyncTime is when the resource was last successfully reconciled. |
observedGeneration | integer | — | ObservedGeneration is the most recent .metadata.generation reconciled. |
portfolioId | string | — | PortfolioID is the Service Catalog portfolio identifier (port-...). |
SCPortfolioProductAssociation # GA
SCPortfolioProductAssociation is the Schema for managing Service Catalog product-portfolio associations.
kubectl get scportfolioproductassociations · example on GitHub
Example
# SCPortfolioProductAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scportfolioproductassociation
apiVersion: aws.konfig.io/v1alpha1
kind: SCPortfolioProductAssociation
metadata:
name: example-scportfolioproductassociation
namespace: default
spec:
portfolioRef:
name: example-scportfolioproductassociation
productRef:
name: example-scportfolioproductassociation
providerRef:
name: example-scportfolioproductassociation
region: us-east-1
Spec
| Field | Type | Required | Description |
|---|---|---|---|
portfolioRef | object | yes | PortfolioRef references the portfolio to associate the product with. |
portfolioRef.name | string | — | Name of an SCPortfolio CR in the same namespace. |
portfolioRef.portfolioId | string | — | PortfolioID is a direct Service Catalog portfolio ID (port-...). |
productRef | object | yes | ProductRef references the product to associate. |
productRef.name | string | — | Name of an SCProduct CR in the same namespace. |
productRef.productId | string | — | ProductID is a direct Service Catalog product ID (prod-...). |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
lastSyncTime | string | — | LastSyncTime is when the resource was last successfully reconciled. |
observedGeneration | integer | — | ObservedGeneration is the most recent .metadata.generation reconciled. |
portfolioId | string | — | PortfolioID is the resolved portfolio ID. |
productId | string | — | ProductID is the resolved product ID. |
SCProduct # GA
SCProduct is the Schema for managing AWS Service Catalog products.
kubectl get scproducts · example on GitHub
Example
# SCProduct — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scproduct
apiVersion: aws.konfig.io/v1alpha1
kind: SCProduct
metadata:
name: example-scproduct
namespace: default
spec:
description: Managed by konfig-konector
distributor: example
name: example-scproduct
owner: example
productType: CLOUD_FORMATION_TEMPLATE
providerRef:
name: example-scproduct
region: us-east-1
provisioningArtifact:
description: Managed by konfig-konector
name: example-scproduct
templateUrl: example
supportEmail: ops@example.com
tags:
environment: dev
team: platform
Spec
| Field | Type | Required | Description |
|---|---|---|---|
description | string | — | Description of the product. |
distributor | string | — | Distributor of the product. |
name | string | yes | Name of the product. |
owner | string | yes | Owner of the product. |
productType | enum | — | ProductType of the product. Allowed: CLOUD_FORMATION_TEMPLATE |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
provisioningArtifact | object | yes | ProvisioningArtifact is the initial version of the product. |
provisioningArtifact.description | string | — | Description of the provisioning artifact. |
provisioningArtifact.name | string | yes | Name of the provisioning artifact (e.g. |
provisioningArtifact.templateUrl | string | yes | TemplateURL is the S3 (or GitHub) URL of the CloudFormation template, passed as LoadTemplateFromURL. |
supportEmail | string | — | SupportEmail is the contact email for product support. |
tags | map<string> | — | Tags are AWS resource tags to apply. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | ARN is the Amazon Resource Name of the product. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
lastSyncTime | string | — | LastSyncTime is when the resource was last successfully reconciled. |
observedGeneration | integer | — | ObservedGeneration is the most recent .metadata.generation reconciled. |
productId | string | — | ProductID is the Service Catalog product identifier (prod-...). |
provisioningArtifactId | string | — | ProvisioningArtifactID is the identifier of the initial provisioning artifact created with the product. |
ServiceCatalogCloudFormationProvisionedProduct # CLOUD CONTROL · AWS::ServiceCatalog::CloudFormationProvisionedProduct
ServiceCatalogCloudFormationProvisionedProduct manages AWS::ServiceCatalog::CloudFormationProvisionedProduct through the AWS Cloud Control API.
kubectl get servicecatalogcloudformationprovisionedproducts · example on GitHub
Example
# ServiceCatalogCloudFormationProvisionedProduct — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogcloudformationprovisionedproduct
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogCloudFormationProvisionedProduct
metadata:
name: example-servicecatalogcloudformationprovisionedproduct
namespace: default
spec:
acceptLanguage: en
notificationArns:
- example
pathName: example-servicecatalogcloudformationprovisionedproduct
productName: example-servicecatalogcloudformationprovisionedproduct
providerRef:
name: example-servicecatalogcloudformationprovisionedproduct
region: us-east-1
provisionedProductName: example-servicecatalogcloudformationprovisionedproduct
provisioningArtifactName: example-servicecatalogcloudformationprovisionedproduct
provisioningParameters:
- key: example
value: example
provisioningPreferences:
stackSetAccounts:
- example
stackSetFailureToleranceCount: 1
stackSetFailureTolerancePercentage: 1
stackSetMaxConcurrencyCount: 1
stackSetMaxConcurrencyPercentage: 1
stackSetOperationType: CREATE
stackSetRegions:
- example
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | enum | — | Allowed: en, jp, zh |
notificationArns | array<string> | — | Create-only in AWS: changing it requires replacing the resource. |
pathId | string | — | |
pathName | string | — | |
productId | string | — | |
productName | string | — | |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
provisionedProductName | string | — | Create-only in AWS: changing it requires replacing the resource. |
provisioningArtifactId | string | — | |
provisioningArtifactName | string | — | |
provisioningParameters | array<object> | — | |
provisioningParameters[].key | string | yes | |
provisioningParameters[].value | string | yes | |
provisioningPreferences | object | — | ServiceCatalogCloudFormationProvisionedProductProvisioningPreferences is a nested property type of AWS::ServiceCatalog::CloudFormationProvisionedProduct. |
provisioningPreferences.stackSetAccounts | array<string> | — | |
provisioningPreferences.stackSetFailureToleranceCount | integer | — | |
provisioningPreferences.stackSetFailureTolerancePercentage | integer | — | |
provisioningPreferences.stackSetMaxConcurrencyCount | integer | — | |
provisioningPreferences.stackSetMaxConcurrencyPercentage | integer | — | |
provisioningPreferences.stackSetOperationType | enum | — | Allowed: CREATE, UPDATE, DELETE |
provisioningPreferences.stackSetRegions | array<string> | — | |
tags | array<object> | — | |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
cloudformationStackArn | string | — | Read-only: reported by AWS after creation. |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
outputs | map<string> | — | List of key-value pair outputs. |
provisionedProductId | string | — | Read-only: reported by AWS after creation. |
recordId | string | — | Read-only: reported by AWS after creation. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogLaunchNotificationConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchNotificationConstraint
ServiceCatalogLaunchNotificationConstraint manages AWS::ServiceCatalog::LaunchNotificationConstraint through the AWS Cloud Control API.
kubectl get servicecataloglaunchnotificationconstraints · example on GitHub
Example
# ServiceCatalogLaunchNotificationConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchnotificationconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchNotificationConstraint
metadata:
name: example-servicecataloglaunchnotificationconstraint
namespace: default
spec:
acceptLanguage: example
description: Managed by konfig-konector
notificationArns:
- example
portfolioId: example-id
productId: example-id
providerRef:
name: example-servicecataloglaunchnotificationconstraint
region: us-east-1
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | |
description | string | — | |
notificationArns | array<string> | yes | |
portfolioId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
productId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | Unique identifier for the constraint Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogLaunchRoleConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchRoleConstraint
ServiceCatalogLaunchRoleConstraint manages AWS::ServiceCatalog::LaunchRoleConstraint through the AWS Cloud Control API.
kubectl get servicecataloglaunchroleconstraints · example on GitHub
Example
# ServiceCatalogLaunchRoleConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchroleconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchRoleConstraint
metadata:
name: example-servicecataloglaunchroleconstraint
namespace: default
spec:
acceptLanguage: example
description: Managed by konfig-konector
localRoleName: example-servicecataloglaunchroleconstraint
portfolioId: example-id
productId: example-id
providerRef:
name: example-servicecataloglaunchroleconstraint
region: us-east-1
roleArn: arn:aws:iam::123456789012:role/example-role
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | The language code for the constraint. |
description | string | — | The description of the launch role constraint. |
localRoleName | string | — | The local IAM role name to use in the launch constraint. |
portfolioId | string | yes | The ID of the portfolio to which this launch role constraint applies. |
productId | string | yes | The ID of the product to which this launch role constraint applies. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
roleArn | string | — | The ARN of the IAM role used for the launch constraint. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | The unique identifier for the launch role constraint. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogLaunchTemplateConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchTemplateConstraint
ServiceCatalogLaunchTemplateConstraint manages AWS::ServiceCatalog::LaunchTemplateConstraint through the AWS Cloud Control API.
kubectl get servicecataloglaunchtemplateconstraints · example on GitHub
Example
# ServiceCatalogLaunchTemplateConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchtemplateconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchTemplateConstraint
metadata:
name: example-servicecataloglaunchtemplateconstraint
namespace: default
spec:
acceptLanguage: example
description: Managed by konfig-konector
portfolioId: example-id
productId: example-id
providerRef:
name: example-servicecataloglaunchtemplateconstraint
region: us-east-1
rules: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | The language code. |
description | string | — | The description of the constraint. |
portfolioId | string | yes | The portfolio identifier. |
productId | string | yes | The product identifier. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
rules | string | yes | A json encoded string of the template constraint rules |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | Unique identifier for the constraint Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogPortfolioPrincipalAssociation # CLOUD CONTROL · AWS::ServiceCatalog::PortfolioPrincipalAssociation
ServiceCatalogPortfolioPrincipalAssociation manages AWS::ServiceCatalog::PortfolioPrincipalAssociation through the AWS Cloud Control API.
kubectl get servicecatalogportfolioprincipalassociations · example on GitHub
Example
# ServiceCatalogPortfolioPrincipalAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogportfolioprincipalassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogPortfolioPrincipalAssociation
metadata:
name: example-servicecatalogportfolioprincipalassociation
namespace: default
spec:
acceptLanguage: example
principalARN: arn:aws:iam::123456789012:role/example-role
principalType: example
providerRef:
name: example-servicecatalogportfolioprincipalassociation
region: us-east-1
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | The language code. |
portfolioId | string | — | The portfolio identifier. |
principalARN | string | — | The ARN of the principal (user, role, or group). |
principalType | string | yes | The principal type. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogResourceUpdateConstraint # CLOUD CONTROL · AWS::ServiceCatalog::ResourceUpdateConstraint
ServiceCatalogResourceUpdateConstraint manages AWS::ServiceCatalog::ResourceUpdateConstraint through the AWS Cloud Control API.
kubectl get servicecatalogresourceupdateconstraints · example on GitHub
Example
# ServiceCatalogResourceUpdateConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogresourceupdateconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogResourceUpdateConstraint
metadata:
name: example-servicecatalogresourceupdateconstraint
namespace: default
spec:
acceptLanguage: example
description: Managed by konfig-konector
portfolioId: example-id
productId: example-id
providerRef:
name: example-servicecatalogresourceupdateconstraint
region: us-east-1
tagUpdateOnProvisionedProduct: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | The language code |
description | string | — | The description of the constraint |
portfolioId | string | yes | The portfolio identifier Create-only in AWS: changing it requires replacing the resource. |
productId | string | yes | The product identifier Create-only in AWS: changing it requires replacing the resource. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tagUpdateOnProvisionedProduct | string | yes | ALLOWED or NOT_ALLOWED, to permit or prevent changes to the tags on provisioned instances of the specified portfolio / product combination |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | Unique identifier for the constraint Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogServiceAction # CLOUD CONTROL · AWS::ServiceCatalog::ServiceAction
ServiceCatalogServiceAction manages AWS::ServiceCatalog::ServiceAction through the AWS Cloud Control API.
kubectl get servicecatalogserviceactions · example on GitHub
Example
# ServiceCatalogServiceAction — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogserviceaction
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogServiceAction
metadata:
name: example-servicecatalogserviceaction
namespace: default
spec:
acceptLanguage: en
definition:
- key: example
value: example
definitionType: SSM_AUTOMATION
description: Managed by konfig-konector
name: example-servicecatalogserviceaction
providerRef:
name: example-servicecatalogserviceaction
region: us-east-1
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | enum | — | Allowed: en, jp, zh |
definition | array<object> | yes | |
definition[].key | string | yes | |
definition[].value | string | yes | |
definitionType | enum | yes | Allowed: SSM_AUTOMATION |
description | string | — | |
name | string | yes | |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogServiceActionAssociation # CLOUD CONTROL · AWS::ServiceCatalog::ServiceActionAssociation
ServiceCatalogServiceActionAssociation manages AWS::ServiceCatalog::ServiceActionAssociation through the AWS Cloud Control API.
kubectl get servicecatalogserviceactionassociations · example on GitHub
Example
# ServiceCatalogServiceActionAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogserviceactionassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogServiceActionAssociation
metadata:
name: example-servicecatalogserviceactionassociation
namespace: default
spec:
productId: example-id
providerRef:
name: example-servicecatalogserviceactionassociation
region: us-east-1
provisioningArtifactId: example-id
serviceActionId: example-id
Spec
| Field | Type | Required | Description |
|---|---|---|---|
productId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
provisioningArtifactId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
serviceActionId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogStackSetConstraint # CLOUD CONTROL · AWS::ServiceCatalog::StackSetConstraint
ServiceCatalogStackSetConstraint manages AWS::ServiceCatalog::StackSetConstraint through the AWS Cloud Control API.
kubectl get servicecatalogstacksetconstraints · example on GitHub
Example
# ServiceCatalogStackSetConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogstacksetconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogStackSetConstraint
metadata:
name: example-servicecatalogstacksetconstraint
namespace: default
spec:
acceptLanguage: example
accountList:
- example
adminRole: example
description: Managed by konfig-konector
executionRole: example
portfolioId: example-id
productId: example-id
providerRef:
name: example-servicecatalogstacksetconstraint
region: us-east-1
regionList:
- example
stackInstanceControl: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
acceptLanguage | string | — | The language code. |
accountList | array<string> | yes | One or more AWS accounts that will have access to the provisioned product. |
adminRole | string | yes | AdminRole ARN. |
description | string | yes | The description of the constraint. |
executionRole | string | yes | ExecutionRole name. |
portfolioId | string | yes | The portfolio identifier. |
productId | string | yes | The product identifier. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
regionList | array<string> | yes | One or more AWS Regions where the provisioned product will be available. |
stackInstanceControl | string | yes | Permission to create, update, and delete stack instances. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | Unique identifier for the constraint Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogTagOption # CLOUD CONTROL · AWS::ServiceCatalog::TagOption
ServiceCatalogTagOption manages AWS::ServiceCatalog::TagOption through the AWS Cloud Control API.
kubectl get servicecatalogtagoptions · example on GitHub
Example
# ServiceCatalogTagOption — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogtagoption
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogTagOption
metadata:
name: example-servicecatalogtagoption
namespace: default
spec:
active: false
key: example
providerRef:
name: example-servicecatalogtagoption
region: us-east-1
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
active | boolean | — | The TagOption active state. |
key | string | yes | The TagOption key. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
value | string | yes | The TagOption value. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
id | string | — | The TagOption identifier. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
ServiceCatalogTagOptionAssociation # CLOUD CONTROL · AWS::ServiceCatalog::TagOptionAssociation
ServiceCatalogTagOptionAssociation manages AWS::ServiceCatalog::TagOptionAssociation through the AWS Cloud Control API.
kubectl get servicecatalogtagoptionassociations · example on GitHub
Example
# ServiceCatalogTagOptionAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogtagoptionassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogTagOptionAssociation
metadata:
name: example-servicecatalogtagoptionassociation
namespace: default
spec:
providerRef:
name: example-servicecatalogtagoptionassociation
region: us-east-1
Spec
| Field | Type | Required | Description |
|---|---|---|---|
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
resourceId | string | — | The CloudformationProduct or Portfolio identifier. |
tagOptionId | string | — | The TagOption identifier. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |