-
Notifications
You must be signed in to change notification settings - Fork 64
/
zz_secretciphertext_types.go
executable file
·146 lines (117 loc) · 6.95 KB
/
zz_secretciphertext_types.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
// SPDX-FileCopyrightText: 2024 The Crossplane Authors <https://crossplane.io>
//
// SPDX-License-Identifier: Apache-2.0
// Code generated by upjet. DO NOT EDIT.
package v1beta1
import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/runtime/schema"
v1 "github.com/crossplane/crossplane-runtime/apis/common/v1"
)
type SecretCiphertextInitParameters struct {
// The additional authenticated data used for integrity checks during encryption and decryption.
// Note: This property is sensitive and will not be displayed in the plan.
AdditionalAuthenticatedDataSecretRef *v1.SecretKeySelector `json:"additionalAuthenticatedDataSecretRef,omitempty" tf:"-"`
// The full name of the CryptoKey that will be used to encrypt the provided plaintext.
// Format: 'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{cryptoKey}}'
// +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/kms/v1beta2.CryptoKey
// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
CryptoKey *string `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`
// Reference to a CryptoKey in kms to populate cryptoKey.
// +kubebuilder:validation:Optional
CryptoKeyRef *v1.Reference `json:"cryptoKeyRef,omitempty" tf:"-"`
// Selector for a CryptoKey in kms to populate cryptoKey.
// +kubebuilder:validation:Optional
CryptoKeySelector *v1.Selector `json:"cryptoKeySelector,omitempty" tf:"-"`
// The plaintext to be encrypted.
// Note: This property is sensitive and will not be displayed in the plan.
Plaintext *string `json:"plaintext,omitempty" tf:"plaintext,omitempty"`
}
type SecretCiphertextObservation struct {
// Contains the result of encrypting the provided plaintext, encoded in base64.
Ciphertext *string `json:"ciphertext,omitempty" tf:"ciphertext,omitempty"`
// The full name of the CryptoKey that will be used to encrypt the provided plaintext.
// Format: 'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{cryptoKey}}'
CryptoKey *string `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`
// an identifier for the resource with format {{crypto_key}}/{{ciphertext}}
ID *string `json:"id,omitempty" tf:"id,omitempty"`
// The plaintext to be encrypted.
// Note: This property is sensitive and will not be displayed in the plan.
Plaintext *string `json:"plaintext,omitempty" tf:"plaintext,omitempty"`
}
type SecretCiphertextParameters struct {
// The additional authenticated data used for integrity checks during encryption and decryption.
// Note: This property is sensitive and will not be displayed in the plan.
// +kubebuilder:validation:Optional
AdditionalAuthenticatedDataSecretRef *v1.SecretKeySelector `json:"additionalAuthenticatedDataSecretRef,omitempty" tf:"-"`
// The full name of the CryptoKey that will be used to encrypt the provided plaintext.
// Format: 'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{cryptoKey}}'
// +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/kms/v1beta2.CryptoKey
// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
// +kubebuilder:validation:Optional
CryptoKey *string `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`
// Reference to a CryptoKey in kms to populate cryptoKey.
// +kubebuilder:validation:Optional
CryptoKeyRef *v1.Reference `json:"cryptoKeyRef,omitempty" tf:"-"`
// Selector for a CryptoKey in kms to populate cryptoKey.
// +kubebuilder:validation:Optional
CryptoKeySelector *v1.Selector `json:"cryptoKeySelector,omitempty" tf:"-"`
// The plaintext to be encrypted.
// Note: This property is sensitive and will not be displayed in the plan.
// +kubebuilder:validation:Optional
Plaintext *string `json:"plaintext,omitempty" tf:"plaintext,omitempty"`
}
// SecretCiphertextSpec defines the desired state of SecretCiphertext
type SecretCiphertextSpec struct {
v1.ResourceSpec `json:",inline"`
ForProvider SecretCiphertextParameters `json:"forProvider"`
// THIS IS A BETA FIELD. It will be honored
// unless the Management Policies feature flag is disabled.
// InitProvider holds the same fields as ForProvider, with the exception
// of Identifier and other resource reference fields. The fields that are
// in InitProvider are merged into ForProvider when the resource is created.
// The same fields are also added to the terraform ignore_changes hook, to
// avoid updating them after creation. This is useful for fields that are
// required on creation, but we do not desire to update them after creation,
// for example because of an external controller is managing them, like an
// autoscaler.
InitProvider SecretCiphertextInitParameters `json:"initProvider,omitempty"`
}
// SecretCiphertextStatus defines the observed state of SecretCiphertext.
type SecretCiphertextStatus struct {
v1.ResourceStatus `json:",inline"`
AtProvider SecretCiphertextObservation `json:"atProvider,omitempty"`
}
// +kubebuilder:object:root=true
// +kubebuilder:subresource:status
// +kubebuilder:storageversion
// SecretCiphertext is the Schema for the SecretCiphertexts API. Encrypts secret data with Google Cloud KMS and provides access to the ciphertext.
// +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status"
// +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status"
// +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name"
// +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp"
// +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,gcp}
type SecretCiphertext struct {
metav1.TypeMeta `json:",inline"`
metav1.ObjectMeta `json:"metadata,omitempty"`
// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.plaintext) || (has(self.initProvider) && has(self.initProvider.plaintext))",message="spec.forProvider.plaintext is a required parameter"
Spec SecretCiphertextSpec `json:"spec"`
Status SecretCiphertextStatus `json:"status,omitempty"`
}
// +kubebuilder:object:root=true
// SecretCiphertextList contains a list of SecretCiphertexts
type SecretCiphertextList struct {
metav1.TypeMeta `json:",inline"`
metav1.ListMeta `json:"metadata,omitempty"`
Items []SecretCiphertext `json:"items"`
}
// Repository type metadata.
var (
SecretCiphertext_Kind = "SecretCiphertext"
SecretCiphertext_GroupKind = schema.GroupKind{Group: CRDGroup, Kind: SecretCiphertext_Kind}.String()
SecretCiphertext_KindAPIVersion = SecretCiphertext_Kind + "." + CRDGroupVersion.String()
SecretCiphertext_GroupVersionKind = CRDGroupVersion.WithKind(SecretCiphertext_Kind)
)
func init() {
SchemeBuilder.Register(&SecretCiphertext{}, &SecretCiphertextList{})
}