VPC Lattice

14 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

LatticeListener # GA

LatticeListener is the Schema for managing VPC Lattice listeners.

kubectl get latticelisteners · example on GitHub

Example

# LatticeListener — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticelistener
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeListener
metadata:
  name: example-latticelistener
  namespace: default
spec:
  defaultAction:
    fixedResponse:
      statusCode: 100
    forward:
    - targetGroupRef:
        name: example-targetgroup
      weight: 1
  name: example-latticelistener
  port: 1
  protocol: HTTP
  providerRef:
    name: example-latticelistener
    region: us-east-1
  serviceRef:
    name: example-service
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`defaultAction`	object	yes	DefaultAction taken when no listener rule matches.
`defaultAction.fixedResponse`	object	—	FixedResponse returns a fixed HTTP status code.
`defaultAction.fixedResponse.statusCode`	integer	yes	StatusCode is the HTTP response code to return.
`defaultAction.forward`	array<object>	—	Forward routes requests to one or more target groups.
`defaultAction.forward[].targetGroupRef`	object	yes	TargetGroupRef references the target group to forward to.
`defaultAction.forward[].targetGroupRef.id`	string	—	ID is a direct AWS target group ID or ARN.
`defaultAction.forward[].targetGroupRef.name`	string	—	Name of a LatticeTargetGroup CR in the same namespace.
`defaultAction.forward[].weight`	integer	—	Weight determines how requests are distributed among target groups.
`name`	string	yes	Name of the listener.
`port`	integer	—	Port on which the listener accepts traffic.
`protocol`	enum	yes	Protocol of the listener. Allowed: `HTTP, HTTPS`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceRef`	object	yes	ServiceRef references the service the listener belongs to.
`serviceRef.id`	string	—	ID is a direct AWS service ID or ARN.
`serviceRef.name`	string	—	Name of a LatticeService CR in the same namespace.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the listener.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID is the unique identifier of the listener.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`serviceId`	string	—	ServiceID is the identifier of the owning service (needed for delete).

LatticeService # GA

LatticeService is the Schema for managing VPC Lattice services.

kubectl get latticeservices · example on GitHub

Example

# LatticeService — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticeservice
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeService
metadata:
  name: example-latticeservice
  namespace: default
spec:
  authType: NONE
  certificateArn: arn:aws:iam::123456789012:role/example-role
  customDomainName: example-latticeservice
  name: example-latticeservice
  providerRef:
    name: example-latticeservice
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`authType`	enum	—	AuthType determines how clients are authenticated. Allowed: `NONE, AWS_IAM`
`certificateArn`	string	—	CertificateARN is the ARN of the ACM certificate for the custom domain.
`customDomainName`	string	—	CustomDomainName is the custom domain name of the service.
`name`	string	yes	Name of the service.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the service.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`dnsName`	string	—	DNSName is the DNS name that clients use to reach the service.
`id`	string	—	ID is the unique identifier of the service.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`status`	string	—	Status is the lifecycle status reported by AWS.

LatticeServiceNetwork # GA

LatticeServiceNetwork is the Schema for managing VPC Lattice service networks.

kubectl get latticeservicenetworks · example on GitHub

Example

# LatticeServiceNetwork — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticeservicenetwork
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeServiceNetwork
metadata:
  name: example-latticeservicenetwork
  namespace: default
spec:
  authType: NONE
  name: example-latticeservicenetwork
  providerRef:
    name: example-latticeservicenetwork
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`authType`	enum	—	AuthType determines how clients are authenticated. Allowed: `NONE, AWS_IAM`
`name`	string	yes	Name of the service network.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the service network.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID is the unique identifier of the service network.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

LatticeServiceNetworkServiceAssociation # GA

LatticeServiceNetworkServiceAssociation is the Schema for managing VPC Lattice service network to service associations.

kubectl get latticeservicenetworkserviceassociations · example on GitHub

Example

# LatticeServiceNetworkServiceAssociation — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticeservicenetworkserviceassociation
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeServiceNetworkServiceAssociation
metadata:
  name: example-latticeservicenetworkserviceassociation
  namespace: default
spec:
  providerRef:
    name: example-latticeservicenetworkserviceassociation
    region: us-east-1
  serviceNetworkRef:
    name: example-servicenetwork
  serviceRef:
    name: example-service
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceNetworkRef`	object	yes	ServiceNetworkRef references the service network to associate.
`serviceNetworkRef.id`	string	—	ID is a direct AWS service network ID or ARN.
`serviceNetworkRef.name`	string	—	Name of a LatticeServiceNetwork CR in the same namespace.
`serviceRef`	object	yes	ServiceRef references the service to associate.
`serviceRef.id`	string	—	ID is a direct AWS service ID or ARN.
`serviceRef.name`	string	—	Name of a LatticeService CR in the same namespace.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the association.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID is the unique identifier of the association.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`status`	string	—	Status is the lifecycle status reported by AWS.

LatticeServiceNetworkVpcAssociation # GA

LatticeServiceNetworkVpcAssociation is the Schema for managing VPC Lattice service network to VPC associations.

kubectl get latticeservicenetworkvpcassociations · example on GitHub

Example

# LatticeServiceNetworkVpcAssociation — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticeservicenetworkvpcassociation
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeServiceNetworkVpcAssociation
metadata:
  name: example-latticeservicenetworkvpcassociation
  namespace: default
spec:
  providerRef:
    name: example-latticeservicenetworkvpcassociation
    region: us-east-1
  securityGroupRefs:
  - name: example-securitygrouprefs
  serviceNetworkRef:
    name: example-servicenetwork
  tags:
    environment: dev
    team: platform
  vpcRef:
    name: example-vpc

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`securityGroupRefs`	array<object>	—	SecurityGroupRefs are security groups to apply to the association.
`securityGroupRefs[].id`	string	—	ID is a direct AWS Security Group ID (e.g.
`securityGroupRefs[].name`	string	—	Name of a SecurityGroup CR in the same namespace.
`serviceNetworkRef`	object	yes	ServiceNetworkRef references the service network to associate.
`serviceNetworkRef.id`	string	—	ID is a direct AWS service network ID or ARN.
`serviceNetworkRef.name`	string	—	Name of a LatticeServiceNetwork CR in the same namespace.
`tags`	map<string>	—	Tags are AWS resource tags to apply.
`vpcRef`	object	yes	VPCRef references the VPC to associate.
`vpcRef.id`	string	—	ID is a direct AWS VPC ID (e.g.
`vpcRef.name`	string	—	Name of a VPC CR in the same namespace.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the association.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID is the unique identifier of the association.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`status`	string	—	Status is the lifecycle status reported by AWS.

LatticeTargetGroup # GA

LatticeTargetGroup is the Schema for managing VPC Lattice target groups.

kubectl get latticetargetgroups · example on GitHub

Example

# LatticeTargetGroup — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#latticetargetgroup
apiVersion: aws.konfig.io/v1alpha1
kind: LatticeTargetGroup
metadata:
  name: example-latticetargetgroup
  namespace: default
spec:
  config:
    healthCheck:
      path: example
      protocol: HTTP
    port: 1
    protocol: HTTP
    vpcRef:
      name: example-vpc
  name: example-latticetargetgroup
  providerRef:
    name: example-latticetargetgroup
    region: us-east-1
  tags:
    environment: dev
    team: platform
  type: INSTANCE

Spec

Field	Type	Required	Description
`config`	object	—	Config holds the protocol/port/VPC configuration.
`config.healthCheck`	object	—	HealthCheck configures target health checks.
`config.healthCheck.path`	string	—	Path is the destination for health checks on the targets.
`config.healthCheck.protocol`	enum	—	Protocol used for health checks (HTTP or HTTPS). Allowed: `HTTP, HTTPS`
`config.port`	integer	—	Port on which the targets listen.
`config.protocol`	enum	—	Protocol to use for routing traffic to the targets. Allowed: `HTTP, HTTPS, TCP`
`config.vpcRef`	object	—	VPCRef references the VPC of the targets.
`config.vpcRef.id`	string	—	ID is a direct AWS VPC ID (e.g.
`config.vpcRef.name`	string	—	Name of a VPC CR in the same namespace.
`name`	string	yes	Name of the target group.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.
`type`	enum	yes	Type of target group. Allowed: `INSTANCE, IP, LAMBDA, ALB`

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the Amazon Resource Name of the target group.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	ID is the unique identifier of the target group.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`status`	string	—	Status is the lifecycle status reported by AWS.

VpcLatticeAccessLogSubscription # CLOUD CONTROL · AWS::VpcLattice::AccessLogSubscription

VpcLatticeAccessLogSubscription manages AWS::VpcLattice::AccessLogSubscription through the AWS Cloud Control API.

kubectl get vpclatticeaccesslogsubscriptions · example on GitHub

Example

# VpcLatticeAccessLogSubscription — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeaccesslogsubscription
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeAccessLogSubscription
metadata:
  name: example-vpclatticeaccesslogsubscription
  namespace: default
spec:
  destinationArn: arn:aws:iam::123456789012:role/example-role
  providerRef:
    name: example-vpclatticeaccesslogsubscription
    region: us-east-1
  resourceIdentifier: example
  serviceNetworkLogType: SERVICE
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`destinationArn`	string	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceIdentifier`	string	—	Create-only in AWS: changing it requires replacing the resource.
`serviceNetworkLogType`	enum	—	Allowed: `SERVICE, RESOURCE`
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`resourceArn`	string	—	Read-only: reported by AWS after creation.
`resourceId`	string	—	Read-only: reported by AWS after creation.

VpcLatticeAuthPolicy # CLOUD CONTROL · AWS::VpcLattice::AuthPolicy

VpcLatticeAuthPolicy manages AWS::VpcLattice::AuthPolicy through the AWS Cloud Control API.

kubectl get vpclatticeauthpolicies · example on GitHub

Example

# VpcLatticeAuthPolicy — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeauthpolicy
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeAuthPolicy
metadata:
  name: example-vpclatticeauthpolicy
  namespace: default
spec:
  providerRef:
    name: example-vpclatticeauthpolicy
    region: us-east-1
  resourceIdentifier: example-xxxxxxxxx

Spec

Field	Type	Required	Description
`policy`	object	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`state`	enum	—	Read-only: reported by AWS after creation. Allowed: `Active, Inactive`

VpcLatticeDomainVerification # CLOUD CONTROL · AWS::VpcLattice::DomainVerification

VpcLatticeDomainVerification manages AWS::VpcLattice::DomainVerification through the AWS Cloud Control API.

kubectl get vpclatticedomainverifications · example on GitHub

Example

# VpcLatticeDomainVerification — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticedomainverification
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeDomainVerification
metadata:
  name: example-vpclatticedomainverification
  namespace: default
spec:
  domainName: example-vpclatticedomainverification
  providerRef:
    name: example-vpclatticedomainverification
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`domainName`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	Read-only: reported by AWS after creation. Allowed: `VERIFIED, PENDING, VERIFICATION_TIMED_OUT`
`txtMethodConfig`	object	—	Read-only: reported by AWS after creation.
`txtMethodConfig.name`	string	—
`txtMethodConfig.value`	string	—

VpcLatticeResourceConfiguration # CLOUD CONTROL · AWS::VpcLattice::ResourceConfiguration

VpcLatticeResourceConfiguration manages AWS::VpcLattice::ResourceConfiguration through the AWS Cloud Control API.

kubectl get vpclatticeresourceconfigurations · example on GitHub

Example

# VpcLatticeResourceConfiguration — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeresourceconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeResourceConfiguration
metadata:
  name: example-vpclatticeresourceconfiguration
  namespace: default
spec:
  allowAssociationToSharableServiceNetwork: false
  customDomainName: example-vpclatticeresourceconfiguration
  groupDomain: example
  name: example-vpclatticeresourceconfiguration
  portRanges:
  - example
  protocolType: TCP
  providerRef:
    name: example-vpclatticeresourceconfiguration
    region: us-east-1
  resourceConfigurationAuthType: NONE
  resourceConfigurationType: GROUP
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`allowAssociationToSharableServiceNetwork`	boolean	—
`customDomainName`	string	—	Create-only in AWS: changing it requires replacing the resource.
`domainVerificationId`	string	—	Create-only in AWS: changing it requires replacing the resource.
`groupDomain`	string	—	Create-only in AWS: changing it requires replacing the resource.
`name`	string	yes
`portRanges`	array<string>	—
`protocolType`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `TCP`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceConfigurationAuthType`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `NONE, AWS_IAM`
`resourceConfigurationDefinition`	object	—
`resourceConfigurationGroupId`	string	—
`resourceConfigurationType`	enum	yes	Create-only in AWS: changing it requires replacing the resource. Allowed: `GROUP, CHILD, SINGLE, ARN`
`resourceGatewayId`	string	—	Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

VpcLatticeResourceGateway # CLOUD CONTROL · AWS::VpcLattice::ResourceGateway

VpcLatticeResourceGateway manages AWS::VpcLattice::ResourceGateway through the AWS Cloud Control API.

kubectl get vpclatticeresourcegateways · example on GitHub

Example

# VpcLatticeResourceGateway — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeresourcegateway
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeResourceGateway
metadata:
  name: example-vpclatticeresourcegateway
  namespace: default
spec:
  ipAddressType: IPV4
  ipv4AddressesPerEni: 1
  name: example-vpclatticeresourcegateway
  providerRef:
    name: example-vpclatticeresourcegateway
    region: us-east-1
  resourceConfigDnsResolution: IN_VPC
  subnetIds:
  - example
  tags:
  - key: example
    value: example
  vpcIdentifier: example

Spec

Field	Type	Required	Description
`ipAddressType`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `IPV4, IPV6, DUALSTACK`
`ipv4AddressesPerEni`	integer	—	The number of IPv4 addresses to allocate per ENI for the resource gateway
`name`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceConfigDnsResolution`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `IN_VPC, PUBLIC`
`securityGroupIds`	array<object>	—	The ID of one or more security groups to associate with the endpoint network interface.
`subnetIds`	array<string>	yes	The ID of one or more subnets in which to create an endpoint network interface.
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes
`vpcIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

VpcLatticeResourcePolicy # CLOUD CONTROL · AWS::VpcLattice::ResourcePolicy

VpcLatticeResourcePolicy manages AWS::VpcLattice::ResourcePolicy through the AWS Cloud Control API.

kubectl get vpclatticeresourcepolicies · example on GitHub

Example

# VpcLatticeResourcePolicy — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeresourcepolicy
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeResourcePolicy
metadata:
  name: example-vpclatticeresourcepolicy
  namespace: default
spec:
  providerRef:
    name: example-vpclatticeresourcepolicy
    region: us-east-1
  resourceArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`policy`	object	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceArn`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

VpcLatticeRule # CLOUD CONTROL · AWS::VpcLattice::Rule

VpcLatticeRule manages AWS::VpcLattice::Rule through the AWS Cloud Control API.

kubectl get vpclatticerules · example on GitHub

Example

# VpcLatticeRule — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticerule
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeRule
metadata:
  name: example-vpclatticerule
  namespace: default
spec:
  action:
    fixedResponse:
      statusCode: 100
    forward:
      targetGroups:
      - targetGroupIdentifier: example-xxxxxxxxxxxx
        weight: 1
  listenerIdentifier: example
  match:
    httpMatch:
      headerMatches:
      - caseSensitive: false
        match:
          contains: example
          exact: example
          prefix: example
        name: example-vpclatticerule
      method: CONNECT
      pathMatch:
        caseSensitive: false
        match:
          exact: example
          prefix: example
  name: example-vpclatticerule
  priority: 1
  providerRef:
    name: example-vpclatticerule
    region: us-east-1
  serviceIdentifier: example
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`action`	object	yes	VpcLatticeRuleAction is a nested property type of AWS::VpcLattice::Rule.
`action.fixedResponse`	object	—	VpcLatticeRuleFixedResponse is a nested property type of AWS::VpcLattice::Rule.
`action.fixedResponse.statusCode`	integer	yes
`action.forward`	object	—	VpcLatticeRuleForward is a nested property type of AWS::VpcLattice::Rule.
`action.forward.targetGroups`	array<object>	yes
`action.forward.targetGroups[].targetGroupIdentifier`	string	yes
`action.forward.targetGroups[].weight`	integer	—
`listenerIdentifier`	string	—	Create-only in AWS: changing it requires replacing the resource.
`match`	object	yes	VpcLatticeRuleMatch is a nested property type of AWS::VpcLattice::Rule.
`match.httpMatch`	object	yes	VpcLatticeRuleHttpMatch is a nested property type of AWS::VpcLattice::Rule.
`match.httpMatch.headerMatches`	array<object>	—
`match.httpMatch.headerMatches[].caseSensitive`	boolean	—
`match.httpMatch.headerMatches[].match`	object	yes	VpcLatticeRuleHeaderMatchType is a nested property type of AWS::VpcLattice::Rule.
`match.httpMatch.headerMatches[].match.contains`	string	—
`match.httpMatch.headerMatches[].match.exact`	string	—
`match.httpMatch.headerMatches[].match.prefix`	string	—
`match.httpMatch.headerMatches[].name`	string	yes
`match.httpMatch.method`	enum	—	Allowed: `CONNECT, DELETE, GET, HEAD, OPTIONS, POST, PUT, TRACE`
`match.httpMatch.pathMatch`	object	—	VpcLatticeRulePathMatch is a nested property type of AWS::VpcLattice::Rule.
`match.httpMatch.pathMatch.caseSensitive`	boolean	—
`match.httpMatch.pathMatch.match`	object	yes	VpcLatticeRulePathMatchType is a nested property type of AWS::VpcLattice::Rule.
`match.httpMatch.pathMatch.match.exact`	string	—
`match.httpMatch.pathMatch.match.prefix`	string	—
`name`	string	—	Create-only in AWS: changing it requires replacing the resource.
`priority`	integer	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceIdentifier`	string	—	Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

VpcLatticeServiceNetworkResourceAssociation # CLOUD CONTROL · AWS::VpcLattice::ServiceNetworkResourceAssociation

VpcLatticeServiceNetworkResourceAssociation manages AWS::VpcLattice::ServiceNetworkResourceAssociation through the AWS Cloud Control API.

kubectl get vpclatticeservicenetworkresourceassociations · example on GitHub

Example

# VpcLatticeServiceNetworkResourceAssociation — VPC Lattice
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/vpclattice.html#vpclatticeservicenetworkresourceassociation
apiVersion: aws.konfig.io/v1alpha1
kind: VpcLatticeServiceNetworkResourceAssociation
metadata:
  name: example-vpclatticeservicenetworkresourceassociation
  namespace: default
spec:
  privateDnsEnabled: true
  providerRef:
    name: example-vpclatticeservicenetworkresourceassociation
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`privateDnsEnabled`	boolean	—	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceConfigurationId`	string	—	Create-only in AWS: changing it requires replacing the resource.
`serviceNetworkId`	string	—	Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.