1---
2apiVersion: apiextensions.k8s.io/v1
3kind: CustomResourceDefinition
4metadata:
5 annotations:
6 controller-gen.kubebuilder.io/version: (unknown)
7 name: iamserviceaccounts.iam.cnrm.cloud.google.com
8spec:
9 group: iam.cnrm.cloud.google.com
10 names:
11 kind: IAMServiceAccount
12 listKind: IAMServiceAccountList
13 plural: iamserviceaccounts
14 singular: iamserviceaccount
15 scope: Namespaced
16 versions:
17 - name: v1beta1
18 schema:
19 openAPIV3Schema:
20 description: IAMServiceAccount is the Schema for the iam API
21 properties:
22 apiVersion:
23 description: |-
24 APIVersion defines the versioned schema of this representation of an object.
25 Servers should convert recognized schemas to the latest internal value, and
26 may reject unrecognized values.
27 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
28 type: string
29 kind:
30 description: |-
31 Kind is a string value representing the REST resource this object represents.
32 Servers may infer this from the endpoint the client submits requests to.
33 Cannot be updated.
34 In CamelCase.
35 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
36 type: string
37 metadata:
38 type: object
39 spec:
40 properties:
41 description:
42 description: A text description of the service account. Must be less
43 than or equal to 256 UTF-8 bytes.
44 type: string
45 disabled:
46 description: Whether the service account is disabled. Defaults to
47 false.
48 type: boolean
49 displayName:
50 description: The display name for the service account. Can be updated
51 without creating a new resource.
52 type: string
53 resourceID:
54 description: Immutable. Optional. The accountId of the resource. Used
55 for creation and acquisition. When unset, the value of `metadata.name`
56 is used as the default.
57 type: string
58 type: object
59 status:
60 properties:
61 conditions:
62 description: |-
63 Conditions represent the latest available observations of the
64 IAMServiceAccount's current state.
65 items:
66 properties:
67 lastTransitionTime:
68 description: Last time the condition transitioned from one status
69 to another.
70 type: string
71 message:
72 description: Human-readable message indicating details about
73 last transition.
74 type: string
75 reason:
76 description: |-
77 Unique, one-word, CamelCase reason for the condition's last
78 transition.
79 type: string
80 status:
81 description: Status is the status of the condition. Can be True,
82 False, Unknown.
83 type: string
84 type:
85 description: Type is the type of the condition.
86 type: string
87 type: object
88 type: array
89 email:
90 description: The e-mail address of the service account. This value
91 should be referenced from any google_iam_policy data sources that
92 would grant the service account privileges.
93 type: string
94 member:
95 description: The Identity of the service account in the form 'serviceAccount:{email}'.
96 This value is often used to refer to the service account in order
97 to grant IAM permissions.
98 type: string
99 name:
100 description: The fully-qualified name of the service account.
101 type: string
102 observedGeneration:
103 description: ObservedGeneration is the generation of the resource
104 that was most recently observed by the Config Connector controller.
105 If this is equal to metadata.generation, then that means that the
106 current reported status reflects the most recent desired state of
107 the resource.
108 type: integer
109 uniqueId:
110 description: The unique id of the service account.
111 type: string
112 type: object
113 type: object
114 served: true
115 storage: true
View as plain text