Skip to content

Commit 9b40996

Browse files
author
Egor Novikov
committed
Add assume role for Issuer
Signed-off-by: Egor Novikov <[email protected]>
1 parent e44343e commit 9b40996

File tree

9 files changed

+235
-220
lines changed

9 files changed

+235
-220
lines changed

‎charts/aws-pca-issuer/crds/awspca.cert-manager.io_awspcaclusterissuers.yaml‎

Lines changed: 51 additions & 51 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,9 @@
1-
21
---
32
apiVersion: apiextensions.k8s.io/v1
43
kind: CustomResourceDefinition
54
metadata:
65
annotations:
7-
controller-gen.kubebuilder.io/version: v0.4.1
8-
creationTimestamp: null
6+
controller-gen.kubebuilder.io/version: v0.17.3
97
name: awspcaclusterissuers.awspca.cert-manager.io
108
spec:
119
group: awspca.cert-manager.io
@@ -23,14 +21,19 @@ spec:
2321
API
2422
properties:
2523
apiVersion:
26-
description: 'APIVersion defines the versioned schema of this representation
27-
of an object. Servers should convert recognized schemas to the latest
28-
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
24+
description: |-
25+
APIVersion defines the versioned schema of this representation of an object.
26+
Servers should convert recognized schemas to the latest internal value, and
27+
may reject unrecognized values.
28+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2929
type: string
3030
kind:
31-
description: 'Kind is a string value representing the REST resource this
32-
object represents. Servers may infer this from the endpoint the client
33-
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
31+
description: |-
32+
Kind is a string value representing the REST resource this object represents.
33+
Servers may infer this from the endpoint the client submits requests to.
34+
Cannot be updated.
35+
In CamelCase.
36+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3437
type: string
3538
metadata:
3639
type: object
@@ -43,6 +46,9 @@ spec:
4346
region:
4447
description: Should contain the AWS region if it cannot be inferred
4548
type: string
49+
role:
50+
description: Specifies the role to assume when issuing certificates.
51+
type: string
4652
secretRef:
4753
description: Needs to be specified if you want to authorize with AWS
4854
using an access and secret key
@@ -56,8 +62,13 @@ spec:
5662
a valid secret key.
5763
type: string
5864
name:
59-
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
60-
TODO: Add other useful fields. apiVersion, kind, uid?'
65+
default: ""
66+
description: |-
67+
Name of the referent.
68+
This field is effectively required, but due to backwards compatibility is
69+
allowed to be empty. Instances of this type with an empty value here are
70+
almost certainly wrong.
71+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
6172
type: string
6273
optional:
6374
description: Specify whether the Secret or its key must be
@@ -66,12 +77,13 @@ spec:
6677
required:
6778
- key
6879
type: object
80+
x-kubernetes-map-type: atomic
6981
name:
70-
description: Name is unique within a namespace to reference a
82+
description: name is unique within a namespace to reference a
7183
secret resource.
7284
type: string
7385
namespace:
74-
description: Namespace defines the space within which the secret
86+
description: namespace defines the space within which the secret
7587
name must be unique.
7688
type: string
7789
secretAccessKeySelector:
@@ -83,8 +95,13 @@ spec:
8395
a valid secret key.
8496
type: string
8597
name:
86-
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
87-
TODO: Add other useful fields. apiVersion, kind, uid?'
98+
default: ""
99+
description: |-
100+
Name of the referent.
101+
This field is effectively required, but due to backwards compatibility is
102+
allowed to be empty. Instances of this type with an empty value here are
103+
almost certainly wrong.
104+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
88105
type: string
89106
optional:
90107
description: Specify whether the Secret or its key must be
@@ -93,51 +110,44 @@ spec:
93110
required:
94111
- key
95112
type: object
113+
x-kubernetes-map-type: atomic
96114
type: object
115+
x-kubernetes-map-type: atomic
97116
type: object
98117
status:
99118
description: AWSPCAIssuerStatus defines the observed state of AWSPCAIssuer
100119
properties:
101120
conditions:
102121
items:
103-
description: "Condition contains details for one aspect of the current
104-
state of this API Resource. --- This struct is intended for direct
105-
use as an array at the field path .status.conditions. For example,
106-
type FooStatus struct{ // Represents the observations of a
107-
foo's current state. // Known .status.conditions.type are:
108-
\"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type
109-
\ // +patchStrategy=merge // +listType=map // +listMapKey=type
110-
\ Conditions []metav1.Condition `json:\"conditions,omitempty\"
111-
patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
112-
\n // other fields }"
122+
description: Condition contains details for one aspect of the current
123+
state of this API Resource.
113124
properties:
114125
lastTransitionTime:
115-
description: lastTransitionTime is the last time the condition
116-
transitioned from one status to another. This should be when
117-
the underlying condition changed. If that is not known, then
118-
using the time when the API field changed is acceptable.
126+
description: |-
127+
lastTransitionTime is the last time the condition transitioned from one status to another.
128+
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
119129
format: date-time
120130
type: string
121131
message:
122-
description: message is a human readable message indicating
123-
details about the transition. This may be an empty string.
132+
description: |-
133+
message is a human readable message indicating details about the transition.
134+
This may be an empty string.
124135
maxLength: 32768
125136
type: string
126137
observedGeneration:
127-
description: observedGeneration represents the .metadata.generation
128-
that the condition was set based upon. For instance, if .metadata.generation
129-
is currently 12, but the .status.conditions[x].observedGeneration
130-
is 9, the condition is out of date with respect to the current
131-
state of the instance.
138+
description: |-
139+
observedGeneration represents the .metadata.generation that the condition was set based upon.
140+
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
141+
with respect to the current state of the instance.
132142
format: int64
133143
minimum: 0
134144
type: integer
135145
reason:
136-
description: reason contains a programmatic identifier indicating
137-
the reason for the condition's last transition. Producers
138-
of specific condition types may define expected values and
139-
meanings for this field, and whether the values are considered
140-
a guaranteed API. The value should be a CamelCase string.
146+
description: |-
147+
reason contains a programmatic identifier indicating the reason for the condition's last transition.
148+
Producers of specific condition types may define expected values and meanings for this field,
149+
and whether the values are considered a guaranteed API.
150+
The value should be a CamelCase string.
141151
This field may not be empty.
142152
maxLength: 1024
143153
minLength: 1
@@ -152,10 +162,6 @@ spec:
152162
type: string
153163
type:
154164
description: type of condition in CamelCase or in foo.example.com/CamelCase.
155-
--- Many .condition.type values are consistent across resources
156-
like Available, but because arbitrary conditions can be useful
157-
(see .node.status.conditions), the ability to deconflict is
158-
important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
159165
maxLength: 316
160166
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
161167
type: string
@@ -173,9 +179,3 @@ spec:
173179
storage: true
174180
subresources:
175181
status: {}
176-
status:
177-
acceptedNames:
178-
kind: ""
179-
plural: ""
180-
conditions: []
181-
storedVersions: []

0 commit comments

Comments
 (0)