Service Catalog

16 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

SCPortfolio # GA

SCPortfolio is the Schema for managing AWS Service Catalog portfolios.

kubectl get scportfolios · example on GitHub

Example

# SCPortfolio — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scportfolio
apiVersion: aws.konfig.io/v1alpha1
kind: SCPortfolio
metadata:
  name: example-scportfolio
  namespace: default
spec:
  description: Managed by konfig-konector
  displayName: example-scportfolio
  providerName: example-scportfolio
  providerRef:
    name: example-scportfolio
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

FieldTypeRequiredDescription
descriptionstring—Description of the portfolio.
displayNamestringyesDisplayName is the portfolio name shown to users.
providerNamestringyesProviderName is the name of the portfolio provider.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsmap<string>—Tags are AWS resource tags to apply.

Status

FieldTypeRequiredDescription
arnstring—ARN is the Amazon Resource Name of the portfolio.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
lastSyncTimestring—LastSyncTime is when the resource was last successfully reconciled.
observedGenerationinteger—ObservedGeneration is the most recent .metadata.generation reconciled.
portfolioIdstring—PortfolioID is the Service Catalog portfolio identifier (port-...).

SCPortfolioProductAssociation # GA

SCPortfolioProductAssociation is the Schema for managing Service Catalog product-portfolio associations.

kubectl get scportfolioproductassociations · example on GitHub

Example

# SCPortfolioProductAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scportfolioproductassociation
apiVersion: aws.konfig.io/v1alpha1
kind: SCPortfolioProductAssociation
metadata:
  name: example-scportfolioproductassociation
  namespace: default
spec:
  portfolioRef:
    name: example-scportfolioproductassociation
  productRef:
    name: example-scportfolioproductassociation
  providerRef:
    name: example-scportfolioproductassociation
    region: us-east-1

Spec

FieldTypeRequiredDescription
portfolioRefobjectyesPortfolioRef references the portfolio to associate the product with.
portfolioRef.namestring—Name of an SCPortfolio CR in the same namespace.
portfolioRef.portfolioIdstring—PortfolioID is a direct Service Catalog portfolio ID (port-...).
productRefobjectyesProductRef references the product to associate.
productRef.namestring—Name of an SCProduct CR in the same namespace.
productRef.productIdstring—ProductID is a direct Service Catalog product ID (prod-...).
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
lastSyncTimestring—LastSyncTime is when the resource was last successfully reconciled.
observedGenerationinteger—ObservedGeneration is the most recent .metadata.generation reconciled.
portfolioIdstring—PortfolioID is the resolved portfolio ID.
productIdstring—ProductID is the resolved product ID.

SCProduct # GA

SCProduct is the Schema for managing AWS Service Catalog products.

kubectl get scproducts · example on GitHub

Example

# SCProduct — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#scproduct
apiVersion: aws.konfig.io/v1alpha1
kind: SCProduct
metadata:
  name: example-scproduct
  namespace: default
spec:
  description: Managed by konfig-konector
  distributor: example
  name: example-scproduct
  owner: example
  productType: CLOUD_FORMATION_TEMPLATE
  providerRef:
    name: example-scproduct
    region: us-east-1
  provisioningArtifact:
    description: Managed by konfig-konector
    name: example-scproduct
    templateUrl: example
  supportEmail: ops@example.com
  tags:
    environment: dev
    team: platform

Spec

FieldTypeRequiredDescription
descriptionstring—Description of the product.
distributorstring—Distributor of the product.
namestringyesName of the product.
ownerstringyesOwner of the product.
productTypeenum—ProductType of the product. Allowed: CLOUD_FORMATION_TEMPLATE
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
provisioningArtifactobjectyesProvisioningArtifact is the initial version of the product.
provisioningArtifact.descriptionstring—Description of the provisioning artifact.
provisioningArtifact.namestringyesName of the provisioning artifact (e.g.
provisioningArtifact.templateUrlstringyesTemplateURL is the S3 (or GitHub) URL of the CloudFormation template, passed as LoadTemplateFromURL.
supportEmailstring—SupportEmail is the contact email for product support.
tagsmap<string>—Tags are AWS resource tags to apply.

Status

FieldTypeRequiredDescription
arnstring—ARN is the Amazon Resource Name of the product.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
lastSyncTimestring—LastSyncTime is when the resource was last successfully reconciled.
observedGenerationinteger—ObservedGeneration is the most recent .metadata.generation reconciled.
productIdstring—ProductID is the Service Catalog product identifier (prod-...).
provisioningArtifactIdstring—ProvisioningArtifactID is the identifier of the initial provisioning artifact created with the product.

ServiceCatalogAcceptedPortfolioShare # CLOUD CONTROL · AWS::ServiceCatalog::AcceptedPortfolioShare

ServiceCatalogAcceptedPortfolioShare manages AWS::ServiceCatalog::AcceptedPortfolioShare through the AWS Cloud Control API.

kubectl get servicecatalogacceptedportfolioshares · example on GitHub

Example

# ServiceCatalogAcceptedPortfolioShare — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogacceptedportfolioshare
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogAcceptedPortfolioShare
metadata:
  name: example-servicecatalogacceptedportfolioshare
  namespace: default
spec:
  acceptLanguage: example
  portfolioId: example-id
  providerRef:
    name: example-servicecatalogacceptedportfolioshare
    region: us-east-1

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code.
portfolioIdstringyesThe portfolio identifier.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogCloudFormationProvisionedProduct # CLOUD CONTROL · AWS::ServiceCatalog::CloudFormationProvisionedProduct

ServiceCatalogCloudFormationProvisionedProduct manages AWS::ServiceCatalog::CloudFormationProvisionedProduct through the AWS Cloud Control API.

kubectl get servicecatalogcloudformationprovisionedproducts · example on GitHub

Example

# ServiceCatalogCloudFormationProvisionedProduct — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogcloudformationprovisionedproduct
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogCloudFormationProvisionedProduct
metadata:
  name: example-servicecatalogcloudformationprovisionedproduct
  namespace: default
spec:
  acceptLanguage: en
  notificationArns:
  - example
  pathName: example-servicecatalogcloudformationprovisionedproduct
  productName: example-servicecatalogcloudformationprovisionedproduct
  providerRef:
    name: example-servicecatalogcloudformationprovisionedproduct
    region: us-east-1
  provisionedProductName: example-servicecatalogcloudformationprovisionedproduct
  provisioningArtifactName: example-servicecatalogcloudformationprovisionedproduct
  provisioningParameters:
  - key: example
    value: example
  provisioningPreferences:
    stackSetAccounts:
    - example
    stackSetFailureToleranceCount: 1
    stackSetFailureTolerancePercentage: 1
    stackSetMaxConcurrencyCount: 1
    stackSetMaxConcurrencyPercentage: 1
    stackSetOperationType: CREATE
    stackSetRegions:
    - example
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
acceptLanguageenum—Allowed: en, jp, zh
notificationArnsarray<string>—Create-only in AWS: changing it requires replacing the resource.
pathIdstring—
pathNamestring—
productIdstring—
productNamestring—
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
provisionedProductNamestring—Create-only in AWS: changing it requires replacing the resource.
provisioningArtifactIdstring—
provisioningArtifactNamestring—
provisioningParametersarray<object>—
provisioningParameters[].keystringyes
provisioningParameters[].valuestringyes
provisioningPreferencesobject—ServiceCatalogCloudFormationProvisionedProductProvisioningPreferences is a nested property type of AWS::ServiceCatalog::CloudFormationProvisionedProduct.
provisioningPreferences.stackSetAccountsarray<string>—
provisioningPreferences.stackSetFailureToleranceCountinteger—
provisioningPreferences.stackSetFailureTolerancePercentageinteger—
provisioningPreferences.stackSetMaxConcurrencyCountinteger—
provisioningPreferences.stackSetMaxConcurrencyPercentageinteger—
provisioningPreferences.stackSetOperationTypeenum—Allowed: CREATE, UPDATE, DELETE
provisioningPreferences.stackSetRegionsarray<string>—
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
cloudformationStackArnstring—Read-only: reported by AWS after creation.
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
outputsmap<string>—List of key-value pair outputs.
provisionedProductIdstring—Read-only: reported by AWS after creation.
recordIdstring—Read-only: reported by AWS after creation.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogLaunchNotificationConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchNotificationConstraint

ServiceCatalogLaunchNotificationConstraint manages AWS::ServiceCatalog::LaunchNotificationConstraint through the AWS Cloud Control API.

kubectl get servicecataloglaunchnotificationconstraints · example on GitHub

Example

# ServiceCatalogLaunchNotificationConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchnotificationconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchNotificationConstraint
metadata:
  name: example-servicecataloglaunchnotificationconstraint
  namespace: default
spec:
  acceptLanguage: example
  description: Managed by konfig-konector
  notificationArns:
  - example
  portfolioId: example-id
  productId: example-id
  providerRef:
    name: example-servicecataloglaunchnotificationconstraint
    region: us-east-1

Spec

FieldTypeRequiredDescription
acceptLanguagestring—
descriptionstring—
notificationArnsarray<string>yes
portfolioIdstringyesCreate-only in AWS: changing it requires replacing the resource.
productIdstringyesCreate-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Unique identifier for the constraint Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogLaunchRoleConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchRoleConstraint

ServiceCatalogLaunchRoleConstraint manages AWS::ServiceCatalog::LaunchRoleConstraint through the AWS Cloud Control API.

kubectl get servicecataloglaunchroleconstraints · example on GitHub

Example

# ServiceCatalogLaunchRoleConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchroleconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchRoleConstraint
metadata:
  name: example-servicecataloglaunchroleconstraint
  namespace: default
spec:
  acceptLanguage: example
  description: Managed by konfig-konector
  localRoleName: example-servicecataloglaunchroleconstraint
  portfolioId: example-id
  productId: example-id
  providerRef:
    name: example-servicecataloglaunchroleconstraint
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code for the constraint.
descriptionstring—The description of the launch role constraint.
localRoleNamestring—The local IAM role name to use in the launch constraint.
portfolioIdstringyesThe ID of the portfolio to which this launch role constraint applies.
productIdstringyesThe ID of the product to which this launch role constraint applies.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
roleArnstring—The ARN of the IAM role used for the launch constraint.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—The unique identifier for the launch role constraint.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogLaunchTemplateConstraint # CLOUD CONTROL · AWS::ServiceCatalog::LaunchTemplateConstraint

ServiceCatalogLaunchTemplateConstraint manages AWS::ServiceCatalog::LaunchTemplateConstraint through the AWS Cloud Control API.

kubectl get servicecataloglaunchtemplateconstraints · example on GitHub

Example

# ServiceCatalogLaunchTemplateConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecataloglaunchtemplateconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogLaunchTemplateConstraint
metadata:
  name: example-servicecataloglaunchtemplateconstraint
  namespace: default
spec:
  acceptLanguage: example
  description: Managed by konfig-konector
  portfolioId: example-id
  productId: example-id
  providerRef:
    name: example-servicecataloglaunchtemplateconstraint
    region: us-east-1
  rules: example

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code.
descriptionstring—The description of the constraint.
portfolioIdstringyesThe portfolio identifier.
productIdstringyesThe product identifier.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
rulesstringyesA json encoded string of the template constraint rules

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Unique identifier for the constraint Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogPortfolioPrincipalAssociation # CLOUD CONTROL · AWS::ServiceCatalog::PortfolioPrincipalAssociation

ServiceCatalogPortfolioPrincipalAssociation manages AWS::ServiceCatalog::PortfolioPrincipalAssociation through the AWS Cloud Control API.

kubectl get servicecatalogportfolioprincipalassociations · example on GitHub

Example

# ServiceCatalogPortfolioPrincipalAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogportfolioprincipalassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogPortfolioPrincipalAssociation
metadata:
  name: example-servicecatalogportfolioprincipalassociation
  namespace: default
spec:
  acceptLanguage: example
  principalARN: arn:aws:iam::123456789012:role/example-role
  principalType: example
  providerRef:
    name: example-servicecatalogportfolioprincipalassociation
    region: us-east-1

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code.
portfolioIdstring—The portfolio identifier.
principalARNstring—The ARN of the principal (user, role, or group).
principalTypestringyesThe principal type.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogPortfolioShare # CLOUD CONTROL · AWS::ServiceCatalog::PortfolioShare

ServiceCatalogPortfolioShare manages AWS::ServiceCatalog::PortfolioShare through the AWS Cloud Control API.

kubectl get servicecatalogportfolioshares · example on GitHub

Example

# ServiceCatalogPortfolioShare — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogportfolioshare
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogPortfolioShare
metadata:
  name: example-servicecatalogportfolioshare
  namespace: default
spec:
  acceptLanguage: example
  accountId: '123456789012'
  portfolioId: example-id
  providerRef:
    name: example-servicecatalogportfolioshare
    region: us-east-1
  shareTagOptions: false

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code.
accountIdstringyesThe AWS account ID.
portfolioIdstringyesThe portfolio identifier.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
shareTagOptionsboolean—Enables or disables TagOptions sharing when creating the portfolio share.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogResourceUpdateConstraint # CLOUD CONTROL · AWS::ServiceCatalog::ResourceUpdateConstraint

ServiceCatalogResourceUpdateConstraint manages AWS::ServiceCatalog::ResourceUpdateConstraint through the AWS Cloud Control API.

kubectl get servicecatalogresourceupdateconstraints · example on GitHub

Example

# ServiceCatalogResourceUpdateConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogresourceupdateconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogResourceUpdateConstraint
metadata:
  name: example-servicecatalogresourceupdateconstraint
  namespace: default
spec:
  acceptLanguage: example
  description: Managed by konfig-konector
  portfolioId: example-id
  productId: example-id
  providerRef:
    name: example-servicecatalogresourceupdateconstraint
    region: us-east-1
  tagUpdateOnProvisionedProduct: example

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code
descriptionstring—The description of the constraint
portfolioIdstringyesThe portfolio identifier Create-only in AWS: changing it requires replacing the resource.
productIdstringyesThe product identifier Create-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagUpdateOnProvisionedProductstringyesALLOWED or NOT_ALLOWED, to permit or prevent changes to the tags on provisioned instances of the specified portfolio / product combination

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Unique identifier for the constraint Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogServiceAction # CLOUD CONTROL · AWS::ServiceCatalog::ServiceAction

ServiceCatalogServiceAction manages AWS::ServiceCatalog::ServiceAction through the AWS Cloud Control API.

kubectl get servicecatalogserviceactions · example on GitHub

Example

# ServiceCatalogServiceAction — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogserviceaction
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogServiceAction
metadata:
  name: example-servicecatalogserviceaction
  namespace: default
spec:
  acceptLanguage: en
  definition:
  - key: example
    value: example
  definitionType: SSM_AUTOMATION
  description: Managed by konfig-konector
  name: example-servicecatalogserviceaction
  providerRef:
    name: example-servicecatalogserviceaction
    region: us-east-1

Spec

FieldTypeRequiredDescription
acceptLanguageenum—Allowed: en, jp, zh
definitionarray<object>yes
definition[].keystringyes
definition[].valuestringyes
definitionTypeenumyesAllowed: SSM_AUTOMATION
descriptionstring—
namestringyes
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogServiceActionAssociation # CLOUD CONTROL · AWS::ServiceCatalog::ServiceActionAssociation

ServiceCatalogServiceActionAssociation manages AWS::ServiceCatalog::ServiceActionAssociation through the AWS Cloud Control API.

kubectl get servicecatalogserviceactionassociations · example on GitHub

Example

# ServiceCatalogServiceActionAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogserviceactionassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogServiceActionAssociation
metadata:
  name: example-servicecatalogserviceactionassociation
  namespace: default
spec:
  productId: example-id
  providerRef:
    name: example-servicecatalogserviceactionassociation
    region: us-east-1
  provisioningArtifactId: example-id
  serviceActionId: example-id

Spec

FieldTypeRequiredDescription
productIdstringyesCreate-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
provisioningArtifactIdstringyesCreate-only in AWS: changing it requires replacing the resource.
serviceActionIdstringyesCreate-only in AWS: changing it requires replacing the resource.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogStackSetConstraint # CLOUD CONTROL · AWS::ServiceCatalog::StackSetConstraint

ServiceCatalogStackSetConstraint manages AWS::ServiceCatalog::StackSetConstraint through the AWS Cloud Control API.

kubectl get servicecatalogstacksetconstraints · example on GitHub

Example

# ServiceCatalogStackSetConstraint — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogstacksetconstraint
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogStackSetConstraint
metadata:
  name: example-servicecatalogstacksetconstraint
  namespace: default
spec:
  acceptLanguage: example
  accountList:
  - example
  adminRole: example
  description: Managed by konfig-konector
  executionRole: example
  portfolioId: example-id
  productId: example-id
  providerRef:
    name: example-servicecatalogstacksetconstraint
    region: us-east-1
  regionList:
  - example
  stackInstanceControl: example

Spec

FieldTypeRequiredDescription
acceptLanguagestring—The language code.
accountListarray<string>yesOne or more AWS accounts that will have access to the provisioned product.
adminRolestringyesAdminRole ARN.
descriptionstringyesThe description of the constraint.
executionRolestringyesExecutionRole name.
portfolioIdstringyesThe portfolio identifier.
productIdstringyesThe product identifier.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
regionListarray<string>yesOne or more AWS Regions where the provisioned product will be available.
stackInstanceControlstringyesPermission to create, update, and delete stack instances.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Unique identifier for the constraint Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogTagOption # CLOUD CONTROL · AWS::ServiceCatalog::TagOption

ServiceCatalogTagOption manages AWS::ServiceCatalog::TagOption through the AWS Cloud Control API.

kubectl get servicecatalogtagoptions · example on GitHub

Example

# ServiceCatalogTagOption — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogtagoption
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogTagOption
metadata:
  name: example-servicecatalogtagoption
  namespace: default
spec:
  active: false
  key: example
  providerRef:
    name: example-servicecatalogtagoption
    region: us-east-1
  value: example

Spec

FieldTypeRequiredDescription
activeboolean—The TagOption active state.
keystringyesThe TagOption key.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
valuestringyesThe TagOption value.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—The TagOption identifier.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

ServiceCatalogTagOptionAssociation # CLOUD CONTROL · AWS::ServiceCatalog::TagOptionAssociation

ServiceCatalogTagOptionAssociation manages AWS::ServiceCatalog::TagOptionAssociation through the AWS Cloud Control API.

kubectl get servicecatalogtagoptionassociations · example on GitHub

Example

# ServiceCatalogTagOptionAssociation — Service Catalog
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/servicecatalog.html#servicecatalogtagoptionassociation
apiVersion: aws.konfig.io/v1alpha1
kind: ServiceCatalogTagOptionAssociation
metadata:
  name: example-servicecatalogtagoptionassociation
  namespace: default
spec:
  providerRef:
    name: example-servicecatalogtagoptionassociation
    region: us-east-1

Spec

FieldTypeRequiredDescription
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
resourceIdstring—The CloudformationProduct or Portfolio identifier.
tagOptionIdstring—The TagOption identifier.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.