Transfer Family
9 resource kinds. Generated from the operator's CRD schemas.
aws.konfig.io/v1alpha1
TransferAgreement # CLOUD CONTROL · AWS::Transfer::Agreement
TransferAgreement manages AWS::Transfer::Agreement through the AWS Cloud Control API.
kubectl get transferagreements · example on GitHub
Example
# TransferAgreement — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferagreement
apiVersion: aws.konfig.io/v1alpha1
kind: TransferAgreement
metadata:
name: example-transferagreement
namespace: default
spec:
accessRole: example-xxxxxxxxxxxx
baseDirectory: example
customDirectories:
failedFilesDirectory: example
mdnFilesDirectory: example
payloadFilesDirectory: example
statusFilesDirectory: example
temporaryFilesDirectory: example
description: Managed by konfig-konector
enforceMessageSigning: ENABLED
localProfileId: example-id-xxxxxxxx
partnerProfileId: example-id-xxxxxxxx
preserveFilename: ENABLED
providerRef:
name: example-transferagreement
region: us-east-1
serverId: example-id-xxxxxxxx
status: ACTIVE
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
accessRole | string | yes | Specifies the access role for the agreement. |
baseDirectory | string | — | Specifies the base directory for the agreement. |
customDirectories | object | — | Specifies a separate directory for each type of file to store for an AS2 message. |
customDirectories.failedFilesDirectory | string | yes | Specifies a location to store the failed files for an AS2 message. |
customDirectories.mdnFilesDirectory | string | yes | Specifies a location to store the MDN file for an AS2 message. |
customDirectories.payloadFilesDirectory | string | yes | Specifies a location to store the payload file for an AS2 message. |
customDirectories.statusFilesDirectory | string | yes | Specifies a location to store the status file for an AS2 message. |
customDirectories.temporaryFilesDirectory | string | yes | Specifies a location to store the temporary processing file for an AS2 message. |
description | string | — | A textual description for the agreement. |
enforceMessageSigning | enum | — | Specifies whether to enforce an AS2 message is signed for this agreement. Allowed: ENABLED, DISABLED |
localProfileId | string | yes | A unique identifier for the local profile. |
partnerProfileId | string | yes | A unique identifier for the partner profile. |
preserveFilename | enum | — | Specifies whether to preserve the filename received for this agreement. Allowed: ENABLED, DISABLED |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
serverId | string | yes | A unique identifier for the server. |
status | enum | — | Specifies the status of the agreement. Allowed: ACTIVE, INACTIVE |
tags | array<object> | — | Key-value pairs that can be used to group and search for agreements. |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
agreementId | string | — | A unique identifier for the agreement. |
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the agreement. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
TransferCertificate # CLOUD CONTROL · AWS::Transfer::Certificate
TransferCertificate manages AWS::Transfer::Certificate through the AWS Cloud Control API.
kubectl get transfercertificates · example on GitHub
Example
# TransferCertificate — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transfercertificate
apiVersion: aws.konfig.io/v1alpha1
kind: TransferCertificate
metadata:
name: example-transfercertificate
namespace: default
spec:
activeDate: example
certificate: example
certificateChain: example
description: Managed by konfig-konector
inactiveDate: example
privateKey: example
providerRef:
name: example-transfercertificate
region: us-east-1
tags:
- key: example
value: example
usage: SIGNING
Spec
| Field | Type | Required | Description |
|---|---|---|---|
activeDate | string | — | Specifies the active date for the certificate. |
certificate | string | yes | Specifies the certificate body to be imported. |
certificateChain | string | — | Specifies the certificate chain to be imported. |
description | string | — | A textual description for the certificate. |
inactiveDate | string | — | Specifies the inactive date for the certificate. |
privateKey | string | — | Specifies the private key for the certificate. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tags | array<object> | — | Key-value pairs that can be used to group and search for certificates. |
tags[].key | string | yes | |
tags[].value | string | yes | |
usage | enum | yes | Specifies the usage type for the certificate. Allowed: SIGNING, ENCRYPTION, TLS |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the agreement. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
certificateId | string | — | A unique identifier for the certificate. |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
notAfterDate | string | — | Specifies the not after date for the certificate. |
notBeforeDate | string | — | Specifies the not before date for the certificate. |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
serial | string | — | Specifies Certificate's serial. |
status | enum | — | A status description for the certificate. Allowed: ACTIVE, PENDING, INACTIVE |
type | enum | — | Describing the type of certificate. Allowed: CERTIFICATE, CERTIFICATE_WITH_PRIVATE_KEY |
TransferConnector # CLOUD CONTROL · AWS::Transfer::Connector
TransferConnector manages AWS::Transfer::Connector through the AWS Cloud Control API.
kubectl get transferconnectors · example on GitHub
Example
# TransferConnector — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferconnector
apiVersion: aws.konfig.io/v1alpha1
kind: TransferConnector
metadata:
name: example-transferconnector
namespace: default
spec:
accessRole: example-xxxxxxxxxxxx
as2Config:
asyncMdnConfig:
serverIds:
- example
url: example
compression: ZLIB
encryptionAlgorithm: AES128_CBC
mdnResponse: SYNC
mdnSigningAlgorithm: SHA256
messageSubject: example
preserveContentType: ENABLED
signingAlgorithm: SHA256
egressConfig:
vpcLattice:
portNumber: 1
resourceConfigurationArn: arn:aws:iam::123456789012:role/example-role
egressType: SERVICE_MANAGED
ipAddressType: IPV4
loggingRole: example
providerRef:
name: example-transferconnector
region: us-east-1
securityPolicyName: example-transferconnector
sftpConfig:
maxConcurrentConnections: 1
trustedHostKeys:
- example
tags:
- key: example
value: example
url: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
accessRole | string | yes | Specifies the access role for the connector. |
as2Config | object | — | Configuration for an AS2 connector. |
as2Config.asyncMdnConfig | object | — | Configuration for an AS2 connector with ASYNC MDN Response |
as2Config.asyncMdnConfig.serverIds | array<string> | yes | |
as2Config.asyncMdnConfig.url | string | yes | URL of the server to receive the MDN response on |
as2Config.basicAuthSecretId | string | — | ARN or name of the secret in AWS Secrets Manager which contains the credentials for Basic authentication. |
as2Config.compression | enum | — | Compression setting for this AS2 connector configuration. Allowed: ZLIB, DISABLED |
as2Config.encryptionAlgorithm | enum | — | Encryption algorithm for this AS2 connector configuration. Allowed: AES128_CBC, AES192_CBC, AES256_CBC, NONE, DES_EDE3_CBC |
as2Config.localProfileId | string | — | A unique identifier for the local profile. |
as2Config.mdnResponse | enum | — | MDN Response setting for this AS2 connector configuration. Allowed: SYNC, ASYNC, NONE |
as2Config.mdnSigningAlgorithm | enum | — | MDN Signing algorithm for this AS2 connector configuration. Allowed: SHA256, SHA384, SHA512, SHA1, NONE, DEFAULT |
as2Config.messageSubject | string | — | The message subject for this AS2 connector configuration. |
as2Config.partnerProfileId | string | — | A unique identifier for the partner profile. |
as2Config.preserveContentType | enum | — | Specifies whether to use the AWS S3 object content-type as the content-type for the AS2 message. Allowed: ENABLED, DISABLED |
as2Config.signingAlgorithm | enum | — | Signing algorithm for this AS2 connector configuration. Allowed: SHA256, SHA384, SHA512, SHA1, NONE |
egressConfig | object | — | Egress configuration for the connector. |
egressConfig.vpcLattice | object | yes | TransferConnectorConnectorVpcLatticeEgressConfig is a nested property type of AWS::Transfer::Connector. |
egressConfig.vpcLattice.portNumber | integer | — | Port to connect to on the target VPC Lattice resource |
egressConfig.vpcLattice.resourceConfigurationArn | string | yes | ARN of the VPC Lattice resource configuration |
egressType | enum | — | Specifies the egress type for the connector. Allowed: SERVICE_MANAGED, VPC_LATTICE |
ipAddressType | enum | — | Allowed: IPV4, DUALSTACK |
loggingRole | string | — | Specifies the logging role for the connector. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
securityPolicyName | string | — | Security policy for SFTP Connector |
sftpConfig | object | — | Configuration for an SFTP connector. |
sftpConfig.maxConcurrentConnections | integer | — | Specifies the number of active connections that your connector can establish with the remote server at the same time. |
sftpConfig.trustedHostKeys | array<string> | — | List of public host keys, for the external server to which you are connecting. |
sftpConfig.userSecretId | string | — | ARN or name of the secret in AWS Secrets Manager which contains the SFTP user's private keys or passwords. |
tags | array<object> | — | Key-value pairs that can be used to group and search for connectors. |
tags[].key | string | yes | |
tags[].value | string | yes | |
url | string | — | URL for Connector |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the connector. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
connectorId | string | — | A unique identifier for the connector. |
errorMessage | string | — | Detailed error message when Connector in ERRORED status Read-only: reported by AWS after creation. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
serviceManagedEgressIpAddresses | array<string> | — | The list of egress IP addresses of this connector. |
status | enum | — | Read-only: reported by AWS after creation. Allowed: ACTIVE, PENDING, ERRORED |
TransferHostKey # CLOUD CONTROL · AWS::Transfer::HostKey ⚠ DESTRUCTIVE SCOPE
Caution, destructive scope: spec must contain the SSH host private key in plain text. Provided for completeness; do not use from application namespaces. Restrict with AWSProvider.allowedNamespaces and RBAC. TransferHostKey manages AWS::Transfer::HostKey through the AWS Cloud Control API.
kubectl get transferhostkeys · example on GitHub
Example
# TransferHostKey — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferhostkey
apiVersion: aws.konfig.io/v1alpha1
kind: TransferHostKey
metadata:
name: example-transferhostkey
namespace: default
spec:
description: Managed by konfig-konector
hostKeyBody: example
providerRef:
name: example-transferhostkey
region: us-east-1
serverId: example-id-xxxxxxxx
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
description | string | — | The text description for this host key. |
hostKeyBody | string | — | The private key portion of an SSH key pair. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
serverId | string | yes | The identifier of the server that contains the host key. |
tags | array<object> | — | Key-value pairs that can be used to group and search for host keys. |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | The unique Amazon Resource Name (ARN) for the host key. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
dateImported | string | — | The date on which the host key was added to the server. |
hostKeyFingerprint | string | — | The public key fingerprint, which is a short sequence of bytes used to identify the longer public key. |
hostKeyId | string | — | A unique identifier for the host key. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
type | string | — | The encryption algorithm that is used for the host key. |
TransferProfile # CLOUD CONTROL · AWS::Transfer::Profile
TransferProfile manages AWS::Transfer::Profile through the AWS Cloud Control API.
kubectl get transferprofiles · example on GitHub
Example
# TransferProfile — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferprofile
apiVersion: aws.konfig.io/v1alpha1
kind: TransferProfile
metadata:
name: example-transferprofile
namespace: default
spec:
as2Id: example-id
certificateIds:
- example
profileType: LOCAL
providerRef:
name: example-transferprofile
region: us-east-1
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
as2Id | string | yes | AS2 identifier agreed with a trading partner. |
certificateIds | array<string> | — | List of the certificate IDs associated with this profile to be used for encryption and signing of AS2 messages. |
profileType | enum | yes | Enum specifying whether the profile is local or associated with a trading partner. Allowed: LOCAL, PARTNER |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tags | array<object> | — | An array of key-value pairs to apply to this resource. |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the profile. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
profileId | string | — | A unique identifier for the profile Read-only: reported by AWS after creation. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
TransferServer # CLOUD CONTROL · AWS::Transfer::Server
TransferServer manages AWS::Transfer::Server through the AWS Cloud Control API.
kubectl get transferservers · example on GitHub
Example
# TransferServer — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferserver
apiVersion: aws.konfig.io/v1alpha1
kind: TransferServer
metadata:
name: example-transferserver
namespace: default
spec:
certificate: example
domain: S3
endpointDetails:
addressAllocationIds:
- example
securityGroupIds:
- example
subnetIds:
- example
endpointType: PUBLIC
identityProviderDetails:
function: example
invocationRole: example
sftpAuthenticationMethods: PASSWORD
url: example
identityProviderType: SERVICE_MANAGED
ipAddressType: IPV4
loggingRole: example
postAuthenticationLoginBanner: example
preAuthenticationLoginBanner: example
protocolDetails:
as2Transports:
- example
passiveIp: example
setStatOption: DEFAULT
tlsSessionResumptionMode: DISABLED
protocols:
- example
providerRef:
name: example-transferserver
region: us-east-1
s3StorageOptions:
directoryListingOptimization: ENABLED
securityPolicyName: example-transferserver
structuredLogDestinations:
- example
tags:
- key: example
value: example
workflowDetails:
onPartialUpload:
- executionRole: example-xxxxxxxxxxxx
workflowId: example-id-xxxxxxxx
onUpload:
- executionRole: example-xxxxxxxxxxxx
workflowId: example-id-xxxxxxxx
Spec
| Field | Type | Required | Description |
|---|---|---|---|
certificate | string | — | |
domain | enum | — | Create-only in AWS: changing it requires replacing the resource. Allowed: S3, EFS |
endpointDetails | object | — | TransferServerEndpointDetails is a nested property type of AWS::Transfer::Server. |
endpointDetails.addressAllocationIds | array<string> | — | |
endpointDetails.securityGroupIds | array<string> | — | |
endpointDetails.subnetIds | array<string> | — | |
endpointDetails.vpcEndpointId | string | — | |
endpointDetails.vpcId | string | — | |
endpointType | enum | — | Allowed: PUBLIC, VPC, VPC_ENDPOINT |
identityProviderDetails | object | — | TransferServerIdentityProviderDetails is a nested property type of AWS::Transfer::Server. |
identityProviderDetails.directoryId | string | — | |
identityProviderDetails.function | string | — | |
identityProviderDetails.invocationRole | string | — | |
identityProviderDetails.sftpAuthenticationMethods | enum | — | Allowed: PASSWORD, PUBLIC_KEY, PUBLIC_KEY_OR_PASSWORD, PUBLIC_KEY_AND_PASSWORD |
identityProviderDetails.url | string | — | |
identityProviderType | enum | — | Allowed: SERVICE_MANAGED, API_GATEWAY, AWS_DIRECTORY_SERVICE, AWS_LAMBDA |
ipAddressType | enum | — | Allowed: IPV4, DUALSTACK |
loggingRole | string | — | |
postAuthenticationLoginBanner | string | — | |
preAuthenticationLoginBanner | string | — | |
protocolDetails | object | — | TransferServerProtocolDetails is a nested property type of AWS::Transfer::Server. |
protocolDetails.as2Transports | array<string> | — | |
protocolDetails.passiveIp | string | — | |
protocolDetails.setStatOption | enum | — | Allowed: DEFAULT, ENABLE_NO_OP |
protocolDetails.tlsSessionResumptionMode | enum | — | Allowed: DISABLED, ENABLED, ENFORCED |
protocols | array<string> | — | |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
s3StorageOptions | object | — | TransferServerS3StorageOptions is a nested property type of AWS::Transfer::Server. |
s3StorageOptions.directoryListingOptimization | enum | — | Allowed: ENABLED, DISABLED |
securityPolicyName | string | — | |
structuredLogDestinations | array<string> | — | |
tags | array<object> | — | |
tags[].key | string | yes | |
tags[].value | string | yes | |
workflowDetails | object | — | TransferServerWorkflowDetails is a nested property type of AWS::Transfer::Server. |
workflowDetails.onPartialUpload | array<object> | — | |
workflowDetails.onPartialUpload[].executionRole | string | yes | |
workflowDetails.onPartialUpload[].workflowId | string | yes | |
workflowDetails.onUpload | array<object> | — | |
workflowDetails.onUpload[].executionRole | string | yes | |
workflowDetails.onUpload[].workflowId | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Read-only: reported by AWS after creation. |
as2ServiceManagedEgressIpAddresses | array<string> | — | The list of egress IP addresses of this server. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
serverId | string | — | Read-only: reported by AWS after creation. |
state | enum | — | Read-only: reported by AWS after creation. Allowed: OFFLINE, ONLINE, STARTING, STOPPING, START_FAILED, STOP_FAILED |
TransferUser # CLOUD CONTROL · AWS::Transfer::User
TransferUser manages AWS::Transfer::User through the AWS Cloud Control API.
kubectl get transferusers · example on GitHub
Example
# TransferUser — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferuser
apiVersion: aws.konfig.io/v1alpha1
kind: TransferUser
metadata:
name: example-transferuser
namespace: default
spec:
homeDirectory: example
homeDirectoryMappings:
- entry: example
target: example
type: FILE
homeDirectoryType: PATH
policy: '{"Version": "2012-10-17", "Statement": [{"Effect": "Allow", "Action": ["s3:GetObject"], "Resource":
"*"}]}'
posixProfile:
gid: 1
secondaryGids:
- 1
uid: 1
providerRef:
name: example-transferuser
region: us-east-1
role: example-xxxxxxxxxxxx
serverId: example-id-xxxxxxxx
sshPublicKeys:
- example
tags:
- key: example
value: example
userName: example-transferuser
Spec
| Field | Type | Required | Description |
|---|---|---|---|
homeDirectory | string | — | |
homeDirectoryMappings | array<object> | — | |
homeDirectoryMappings[].entry | string | yes | |
homeDirectoryMappings[].target | string | yes | |
homeDirectoryMappings[].type | enum | — | Allowed: FILE, DIRECTORY |
homeDirectoryType | enum | — | Allowed: PATH, LOGICAL |
policy | string | — | |
posixProfile | object | — | TransferUserPosixProfile is a nested property type of AWS::Transfer::User. |
posixProfile.gid | number | yes | |
posixProfile.secondaryGids | array<number> | — | |
posixProfile.uid | number | yes | |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
role | string | yes | |
serverId | string | yes | Create-only in AWS: changing it requires replacing the resource. |
sshPublicKeys | array<string> | — | This represents the SSH User Public Keys for CloudFormation resource |
tags | array<object> | — | |
tags[].key | string | yes | |
tags[].value | string | yes | |
userName | string | yes | Create-only in AWS: changing it requires replacing the resource. |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Read-only: reported by AWS after creation. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
TransferWebApp # CLOUD CONTROL · AWS::Transfer::WebApp
TransferWebApp manages AWS::Transfer::WebApp through the AWS Cloud Control API.
kubectl get transferwebapps · example on GitHub
Example
# TransferWebApp — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferwebapp
apiVersion: aws.konfig.io/v1alpha1
kind: TransferWebApp
metadata:
name: example-transferwebapp
namespace: default
spec:
accessEndpoint: example
endpointDetails:
vpc:
ipAddressType: IPV4
securityGroupIds:
- example
subnetIds:
- example
identityProviderDetails:
applicationArn: arn:aws:iam::123456789012:role/example-role
instanceArn: arn:aws:iam::123456789012:role/example-role
role: example
providerRef:
name: example-transferwebapp
region: us-east-1
tags:
- key: example
value: example
webAppCustomization:
faviconFile: example
logoFile: example
title: example
webAppEndpointPolicy: STANDARD
Spec
| Field | Type | Required | Description |
|---|---|---|---|
accessEndpoint | string | — | The AccessEndpoint is the URL that you provide to your users for them to interact with the Transfer Family web app. |
endpointDetails | object | — | TransferWebAppEndpointDetails is a nested property type of AWS::Transfer::WebApp. |
endpointDetails.vpc | object | — | TransferWebAppVpc is a nested property type of AWS::Transfer::WebApp. |
endpointDetails.vpc.ipAddressType | enum | — | The IP address type for the VPC endpoint used by the web app. Allowed: IPV4, DUALSTACK |
endpointDetails.vpc.securityGroupIds | array<string> | — | |
endpointDetails.vpc.subnetIds | array<string> | — | |
endpointDetails.vpc.vpcId | string | — | |
identityProviderDetails | object | yes | TransferWebAppIdentityProviderDetails is a nested property type of AWS::Transfer::WebApp. |
identityProviderDetails.applicationArn | string | — | |
identityProviderDetails.instanceArn | string | — | The Amazon Resource Name (ARN) for the IAM Identity Center used for the web app. |
identityProviderDetails.role | string | — | The IAM role in IAM Identity Center used for the web app. |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
tags | array<object> | — | Key-value pairs that can be used to group and search for web apps. |
tags[].key | string | yes | |
tags[].value | string | yes | |
webAppCustomization | object | — | TransferWebAppWebAppCustomization is a nested property type of AWS::Transfer::WebApp. |
webAppCustomization.faviconFile | string | — | Specifies a favicon to display in the browser tab. |
webAppCustomization.logoFile | string | — | Specifies a logo to display on the web app. |
webAppCustomization.title | string | — | Specifies a title to display on the web app. |
webAppEndpointPolicy | enum | — | Create-only in AWS: changing it requires replacing the resource. Allowed: STANDARD, FIPS |
webAppUnits | object | — |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the web app. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
vpcEndpointId | string | — | Read-only: reported by AWS after creation. |
webAppId | string | — | A unique identifier for the web app. |
TransferWorkflow # CLOUD CONTROL · AWS::Transfer::Workflow
TransferWorkflow manages AWS::Transfer::Workflow through the AWS Cloud Control API.
kubectl get transferworkflows · example on GitHub
Example
# TransferWorkflow — Transfer Family
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/transfer.html#transferworkflow
apiVersion: aws.konfig.io/v1alpha1
kind: TransferWorkflow
metadata:
name: example-transferworkflow
namespace: default
spec:
description: Managed by konfig-konector
onExceptionSteps:
- copyStepDetails:
name: example-transferworkflow
overwriteExisting: 'TRUE'
sourceFileLocation: example
customStepDetails:
name: example-transferworkflow
sourceFileLocation: example
target: example
timeoutSeconds: 1
decryptStepDetails:
name: example-transferworkflow
overwriteExisting: 'TRUE'
sourceFileLocation: example
type: PGP
deleteStepDetails:
name: example-transferworkflow
sourceFileLocation: example
tagStepDetails:
name: example-transferworkflow
sourceFileLocation: example
tags:
- key: example
value: example
type: COPY
providerRef:
name: example-transferworkflow
region: us-east-1
steps:
- copyStepDetails:
name: example-transferworkflow
overwriteExisting: 'TRUE'
sourceFileLocation: example
customStepDetails:
name: example-transferworkflow
sourceFileLocation: example
target: example
timeoutSeconds: 1
decryptStepDetails:
name: example-transferworkflow
overwriteExisting: 'TRUE'
sourceFileLocation: example
type: PGP
deleteStepDetails:
name: example-transferworkflow
sourceFileLocation: example
tagStepDetails:
name: example-transferworkflow
sourceFileLocation: example
tags:
- key: example
value: example
type: COPY
tags:
- key: example
value: example
Spec
| Field | Type | Required | Description |
|---|---|---|---|
description | string | — | A textual description for the workflow. |
onExceptionSteps | array<object> | — | Specifies the steps (actions) to take if any errors are encountered during execution of the workflow. |
onExceptionSteps[].copyStepDetails | object | — | Details for a step that performs a file copy. |
onExceptionSteps[].copyStepDetails.destinationFileLocation | object | — | TransferWorkflowS3FileLocation is a nested property type of AWS::Transfer::Workflow. |
onExceptionSteps[].copyStepDetails.destinationFileLocation.s3FileLocation | object | — | TransferWorkflowS3InputFileLocation is a nested property type of AWS::Transfer::Workflow. |
onExceptionSteps[].copyStepDetails.destinationFileLocation.s3FileLocation.bucket | string | — | Specifies the S3 bucket that contains the file. |
onExceptionSteps[].copyStepDetails.destinationFileLocation.s3FileLocation.key | string | — | The name assigned to the file when it was created in S3. |
onExceptionSteps[].copyStepDetails.name | string | — | The name of the step, used as an identifier. |
onExceptionSteps[].copyStepDetails.overwriteExisting | enum | — | A flag that indicates whether or not to overwrite an existing file of the same name. Allowed: TRUE, FALSE |
onExceptionSteps[].copyStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
onExceptionSteps[].customStepDetails | object | — | Details for a step that invokes a lambda function. |
onExceptionSteps[].customStepDetails.name | string | — | The name of the step, used as an identifier. |
onExceptionSteps[].customStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
onExceptionSteps[].customStepDetails.target | string | — | The ARN for the lambda function that is being called. |
onExceptionSteps[].customStepDetails.timeoutSeconds | integer | — | Timeout, in seconds, for the step. |
onExceptionSteps[].decryptStepDetails | object | — | Details for a step that performs a file decryption. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation | object | yes | TransferWorkflowInputFileLocation is a nested property type of AWS::Transfer::Workflow. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.efsFileLocation | object | — | TransferWorkflowEfsInputFileLocation is a nested property type of AWS::Transfer::Workflow. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.efsFileLocation.fileSystemId | string | — | Specifies the EFS filesystem that contains the file. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.efsFileLocation.path | string | — | The name assigned to the file when it was created in EFS. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.s3FileLocation | object | — | TransferWorkflowS3InputFileLocation is a nested property type of AWS::Transfer::Workflow. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.s3FileLocation.bucket | string | — | Specifies the S3 bucket that contains the file. |
onExceptionSteps[].decryptStepDetails.destinationFileLocation.s3FileLocation.key | string | — | The name assigned to the file when it was created in S3. |
onExceptionSteps[].decryptStepDetails.name | string | — | The name of the step, used as an identifier. |
onExceptionSteps[].decryptStepDetails.overwriteExisting | enum | — | A flag that indicates whether or not to overwrite an existing file of the same name. Allowed: TRUE, FALSE |
onExceptionSteps[].decryptStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
onExceptionSteps[].decryptStepDetails.type | enum | yes | Specifies which encryption method to use. Allowed: PGP |
onExceptionSteps[].deleteStepDetails | object | — | Details for a step that deletes the file. |
onExceptionSteps[].deleteStepDetails.name | string | — | The name of the step, used as an identifier. |
onExceptionSteps[].deleteStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
onExceptionSteps[].tagStepDetails | object | — | Details for a step that creates one or more tags. |
onExceptionSteps[].tagStepDetails.name | string | — | The name of the step, used as an identifier. |
onExceptionSteps[].tagStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
onExceptionSteps[].tagStepDetails.tags | array<object> | — | Array that contains from 1 to 10 key/value pairs. |
onExceptionSteps[].tagStepDetails.tags[].key | string | yes | |
onExceptionSteps[].tagStepDetails.tags[].value | string | yes | |
onExceptionSteps[].type | enum | — | Allowed: COPY, CUSTOM, DECRYPT, DELETE, TAG |
providerRef | object | — | ProviderRef selects the AWSProvider (account/region) this resource is reconciled against. |
providerRef.name | string | yes | Name of a cluster-scoped AWSProvider. |
providerRef.region | string | — | Region overrides the provider's region for this resource only. |
steps | array<object> | yes | Specifies the details for the steps that are in the specified workflow. |
steps[].copyStepDetails | object | — | Details for a step that performs a file copy. |
steps[].copyStepDetails.destinationFileLocation | object | — | TransferWorkflowS3FileLocation is a nested property type of AWS::Transfer::Workflow. |
steps[].copyStepDetails.destinationFileLocation.s3FileLocation | object | — | TransferWorkflowS3InputFileLocation is a nested property type of AWS::Transfer::Workflow. |
steps[].copyStepDetails.destinationFileLocation.s3FileLocation.bucket | string | — | Specifies the S3 bucket that contains the file. |
steps[].copyStepDetails.destinationFileLocation.s3FileLocation.key | string | — | The name assigned to the file when it was created in S3. |
steps[].copyStepDetails.name | string | — | The name of the step, used as an identifier. |
steps[].copyStepDetails.overwriteExisting | enum | — | A flag that indicates whether or not to overwrite an existing file of the same name. Allowed: TRUE, FALSE |
steps[].copyStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
steps[].customStepDetails | object | — | Details for a step that invokes a lambda function. |
steps[].customStepDetails.name | string | — | The name of the step, used as an identifier. |
steps[].customStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
steps[].customStepDetails.target | string | — | The ARN for the lambda function that is being called. |
steps[].customStepDetails.timeoutSeconds | integer | — | Timeout, in seconds, for the step. |
steps[].decryptStepDetails | object | — | Details for a step that performs a file decryption. |
steps[].decryptStepDetails.destinationFileLocation | object | yes | TransferWorkflowInputFileLocation is a nested property type of AWS::Transfer::Workflow. |
steps[].decryptStepDetails.destinationFileLocation.efsFileLocation | object | — | TransferWorkflowEfsInputFileLocation is a nested property type of AWS::Transfer::Workflow. |
steps[].decryptStepDetails.destinationFileLocation.efsFileLocation.fileSystemId | string | — | Specifies the EFS filesystem that contains the file. |
steps[].decryptStepDetails.destinationFileLocation.efsFileLocation.path | string | — | The name assigned to the file when it was created in EFS. |
steps[].decryptStepDetails.destinationFileLocation.s3FileLocation | object | — | TransferWorkflowS3InputFileLocation is a nested property type of AWS::Transfer::Workflow. |
steps[].decryptStepDetails.destinationFileLocation.s3FileLocation.bucket | string | — | Specifies the S3 bucket that contains the file. |
steps[].decryptStepDetails.destinationFileLocation.s3FileLocation.key | string | — | The name assigned to the file when it was created in S3. |
steps[].decryptStepDetails.name | string | — | The name of the step, used as an identifier. |
steps[].decryptStepDetails.overwriteExisting | enum | — | A flag that indicates whether or not to overwrite an existing file of the same name. Allowed: TRUE, FALSE |
steps[].decryptStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
steps[].decryptStepDetails.type | enum | yes | Specifies which encryption method to use. Allowed: PGP |
steps[].deleteStepDetails | object | — | Details for a step that deletes the file. |
steps[].deleteStepDetails.name | string | — | The name of the step, used as an identifier. |
steps[].deleteStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
steps[].tagStepDetails | object | — | Details for a step that creates one or more tags. |
steps[].tagStepDetails.name | string | — | The name of the step, used as an identifier. |
steps[].tagStepDetails.sourceFileLocation | string | — | Specifies which file to use as input to the workflow step. |
steps[].tagStepDetails.tags | array<object> | — | Array that contains from 1 to 10 key/value pairs. |
steps[].tagStepDetails.tags[].key | string | yes | |
steps[].tagStepDetails.tags[].value | string | yes | |
steps[].type | enum | — | Allowed: COPY, CUSTOM, DECRYPT, DELETE, TAG |
tags | array<object> | — | Key-value pairs that can be used to group and search for workflows. |
tags[].key | string | yes | |
tags[].value | string | yes |
Status
| Field | Type | Required | Description |
|---|---|---|---|
arn | string | — | Specifies the unique Amazon Resource Name (ARN) for the workflow. |
attempt | integer | — | Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure. |
awsProvider | object | — | AWSProvider confirms the account and region this resource was reconciled against. |
awsProvider.accountId | string | — | AccountID the resource lives in. |
awsProvider.name | string | — | Name of the AWSProvider used; empty when the operator's own credentials were used. |
awsProvider.region | string | — | Region the resource lives in (empty for global services). |
conditions | array<object> | — | Conditions describe the current state of the resource. |
conditions[].lastTransitionTime | string | yes | lastTransitionTime is the last time the condition transitioned from one status to another. |
conditions[].message | string | yes | message is a human readable message indicating details about the transition. |
conditions[].observedGeneration | integer | — | observedGeneration represents the .metadata.generation that the condition was set based upon. |
conditions[].reason | string | yes | reason contains a programmatic identifier indicating the reason for the condition's last transition. |
conditions[].status | enum | yes | status of the condition, one of True, False, Unknown. Allowed: True, False, Unknown |
conditions[].type | string | yes | type of condition in CamelCase or in foo.example.com/CamelCase. |
identifier | string | — | Identifier is the Cloud Control primary identifier of the resource. |
lastSyncTime | string | — | |
observedGeneration | integer | — | |
operation | string | — | Operation is the in-flight operation (CREATE, UPDATE, DELETE). |
operationStatus | string | — | OperationStatus is the last reported operation status. |
requestToken | string | — | RequestToken tracks an in-flight asynchronous operation. |
workflowId | string | — | A unique identifier for the workflow. |