/
zz_podidentityassociation_types.go
executable file
·194 lines (151 loc) · 9.76 KB
/
zz_podidentityassociation_types.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
// SPDX-FileCopyrightText: 2024 The Crossplane Authors <https://crossplane.io>
//
// SPDX-License-Identifier: Apache-2.0
// Code generated by upjet. DO NOT EDIT.
package v1beta1
import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/runtime/schema"
v1 "github.com/crossplane/crossplane-runtime/apis/common/v1"
)
type PodIdentityAssociationInitParameters struct {
// The name of the cluster to create the association in.
// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/eks/v1beta1.Cluster
ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`
// Reference to a Cluster in eks to populate clusterName.
// +kubebuilder:validation:Optional
ClusterNameRef *v1.Reference `json:"clusterNameRef,omitempty" tf:"-"`
// Selector for a Cluster in eks to populate clusterName.
// +kubebuilder:validation:Optional
ClusterNameSelector *v1.Selector `json:"clusterNameSelector,omitempty" tf:"-"`
// The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
Namespace *string `json:"namespace,omitempty" tf:"namespace,omitempty"`
// The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/iam/v1beta1.Role
// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
RoleArn *string `json:"roleArn,omitempty" tf:"role_arn,omitempty"`
// Reference to a Role in iam to populate roleArn.
// +kubebuilder:validation:Optional
RoleArnRef *v1.Reference `json:"roleArnRef,omitempty" tf:"-"`
// Selector for a Role in iam to populate roleArn.
// +kubebuilder:validation:Optional
RoleArnSelector *v1.Selector `json:"roleArnSelector,omitempty" tf:"-"`
// The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.
ServiceAccount *string `json:"serviceAccount,omitempty" tf:"service_account,omitempty"`
// Key-value map of resource tags.
// +mapType=granular
Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}
type PodIdentityAssociationObservation struct {
// The Amazon Resource Name (ARN) of the association.
AssociationArn *string `json:"associationArn,omitempty" tf:"association_arn,omitempty"`
// The ID of the association.
AssociationID *string `json:"associationId,omitempty" tf:"association_id,omitempty"`
// The name of the cluster to create the association in.
ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`
ID *string `json:"id,omitempty" tf:"id,omitempty"`
// The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
Namespace *string `json:"namespace,omitempty" tf:"namespace,omitempty"`
// The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
RoleArn *string `json:"roleArn,omitempty" tf:"role_arn,omitempty"`
// The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.
ServiceAccount *string `json:"serviceAccount,omitempty" tf:"service_account,omitempty"`
// Key-value map of resource tags.
// +mapType=granular
Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
// A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
// +mapType=granular
TagsAll map[string]*string `json:"tagsAll,omitempty" tf:"tags_all,omitempty"`
}
type PodIdentityAssociationParameters struct {
// The name of the cluster to create the association in.
// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/eks/v1beta1.Cluster
// +kubebuilder:validation:Optional
ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`
// Reference to a Cluster in eks to populate clusterName.
// +kubebuilder:validation:Optional
ClusterNameRef *v1.Reference `json:"clusterNameRef,omitempty" tf:"-"`
// Selector for a Cluster in eks to populate clusterName.
// +kubebuilder:validation:Optional
ClusterNameSelector *v1.Selector `json:"clusterNameSelector,omitempty" tf:"-"`
// The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
// +kubebuilder:validation:Optional
Namespace *string `json:"namespace,omitempty" tf:"namespace,omitempty"`
// Region is the region you'd like your resource to be created in.
// +upjet:crd:field:TFTag=-
// +kubebuilder:validation:Required
Region *string `json:"region" tf:"-"`
// The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/iam/v1beta1.Role
// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
// +kubebuilder:validation:Optional
RoleArn *string `json:"roleArn,omitempty" tf:"role_arn,omitempty"`
// Reference to a Role in iam to populate roleArn.
// +kubebuilder:validation:Optional
RoleArnRef *v1.Reference `json:"roleArnRef,omitempty" tf:"-"`
// Selector for a Role in iam to populate roleArn.
// +kubebuilder:validation:Optional
RoleArnSelector *v1.Selector `json:"roleArnSelector,omitempty" tf:"-"`
// The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.
// +kubebuilder:validation:Optional
ServiceAccount *string `json:"serviceAccount,omitempty" tf:"service_account,omitempty"`
// Key-value map of resource tags.
// +kubebuilder:validation:Optional
// +mapType=granular
Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}
// PodIdentityAssociationSpec defines the desired state of PodIdentityAssociation
type PodIdentityAssociationSpec struct {
v1.ResourceSpec `json:",inline"`
ForProvider PodIdentityAssociationParameters `json:"forProvider"`
// THIS IS A BETA FIELD. It will be honored
// unless the Management Policies feature flag is disabled.
// InitProvider holds the same fields as ForProvider, with the exception
// of Identifier and other resource reference fields. The fields that are
// in InitProvider are merged into ForProvider when the resource is created.
// The same fields are also added to the terraform ignore_changes hook, to
// avoid updating them after creation. This is useful for fields that are
// required on creation, but we do not desire to update them after creation,
// for example because of an external controller is managing them, like an
// autoscaler.
InitProvider PodIdentityAssociationInitParameters `json:"initProvider,omitempty"`
}
// PodIdentityAssociationStatus defines the observed state of PodIdentityAssociation.
type PodIdentityAssociationStatus struct {
v1.ResourceStatus `json:",inline"`
AtProvider PodIdentityAssociationObservation `json:"atProvider,omitempty"`
}
// +kubebuilder:object:root=true
// +kubebuilder:subresource:status
// +kubebuilder:storageversion
// PodIdentityAssociation is the Schema for the PodIdentityAssociations API.
// +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status"
// +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status"
// +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name"
// +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp"
// +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,aws}
type PodIdentityAssociation struct {
metav1.TypeMeta `json:",inline"`
metav1.ObjectMeta `json:"metadata,omitempty"`
// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.__namespace__) || (has(self.initProvider) && has(self.initProvider.__namespace__))",message="spec.forProvider.namespace is a required parameter"
// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.serviceAccount) || (has(self.initProvider) && has(self.initProvider.serviceAccount))",message="spec.forProvider.serviceAccount is a required parameter"
Spec PodIdentityAssociationSpec `json:"spec"`
Status PodIdentityAssociationStatus `json:"status,omitempty"`
}
// +kubebuilder:object:root=true
// PodIdentityAssociationList contains a list of PodIdentityAssociations
type PodIdentityAssociationList struct {
metav1.TypeMeta `json:",inline"`
metav1.ListMeta `json:"metadata,omitempty"`
Items []PodIdentityAssociation `json:"items"`
}
// Repository type metadata.
var (
PodIdentityAssociation_Kind = "PodIdentityAssociation"
PodIdentityAssociation_GroupKind = schema.GroupKind{Group: CRDGroup, Kind: PodIdentityAssociation_Kind}.String()
PodIdentityAssociation_KindAPIVersion = PodIdentityAssociation_Kind + "." + CRDGroupVersion.String()
PodIdentityAssociation_GroupVersionKind = CRDGroupVersion.WithKind(PodIdentityAssociation_Kind)
)
func init() {
SchemeBuilder.Register(&PodIdentityAssociation{}, &PodIdentityAssociationList{})
}