1apiVersion: apiextensions.k8s.io/v1
2kind: CustomResourceDefinition
3metadata:
4 annotations:
5 cnrm.cloud.google.com/version: 0.0.0-dev
6 creationTimestamp: null
7 labels:
8 cnrm.cloud.google.com/managed-by-kcc: "true"
9 cnrm.cloud.google.com/stability-level: alpha
10 cnrm.cloud.google.com/system: "true"
11 cnrm.cloud.google.com/tf2crd: "true"
12 name: bigquerydatasetaccesses.bigquery.cnrm.cloud.google.com
13spec:
14 group: bigquery.cnrm.cloud.google.com
15 names:
16 categories:
17 - gcp
18 kind: BigQueryDatasetAccess
19 plural: bigquerydatasetaccesses
20 shortNames:
21 - gcpbigquerydatasetaccess
22 - gcpbigquerydatasetaccesses
23 singular: bigquerydatasetaccess
24 preserveUnknownFields: false
25 scope: Namespaced
26 versions:
27 - additionalPrinterColumns:
28 - jsonPath: .metadata.creationTimestamp
29 name: Age
30 type: date
31 - description: When 'True', the most recent reconcile of the resource succeeded
32 jsonPath: .status.conditions[?(@.type=='Ready')].status
33 name: Ready
34 type: string
35 - description: The reason for the value in 'Ready'
36 jsonPath: .status.conditions[?(@.type=='Ready')].reason
37 name: Status
38 type: string
39 - description: The last transition time for the value in 'Status'
40 jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
41 name: Status Age
42 type: date
43 name: v1alpha1
44 schema:
45 openAPIV3Schema:
46 properties:
47 apiVersion:
48 description: 'apiVersion defines the versioned schema of this representation
49 of an object. Servers should convert recognized schemas to the latest
50 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
51 type: string
52 kind:
53 description: 'kind is a string value representing the REST resource this
54 object represents. Servers may infer this from the endpoint the client
55 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
56 type: string
57 metadata:
58 type: object
59 spec:
60 properties:
61 dataset:
62 description: Immutable. Grants all resources of particular types in
63 a particular dataset read access to the current dataset.
64 properties:
65 dataset:
66 description: Immutable. The dataset this entry applies to.
67 properties:
68 datasetId:
69 description: Immutable. The ID of the dataset containing this
70 table.
71 type: string
72 projectId:
73 description: Immutable. The ID of the project containing this
74 table.
75 type: string
76 required:
77 - datasetId
78 - projectId
79 type: object
80 targetTypes:
81 description: |-
82 Immutable. Which resources in the dataset this entry applies to. Currently, only views are supported,
83 but additional target types may be added in the future. Possible values: VIEWS.
84 items:
85 type: string
86 type: array
87 required:
88 - dataset
89 - targetTypes
90 type: object
91 datasetId:
92 description: |-
93 Immutable. A unique ID for this dataset, without the project name. The ID
94 must contain only letters (a-z, A-Z), numbers (0-9), or
95 underscores (_). The maximum length is 1,024 characters.
96 type: string
97 domain:
98 description: |-
99 Immutable. A domain to grant access to. Any users signed in with the
100 domain specified will be granted the specified access.
101 type: string
102 groupByEmail:
103 description: Immutable. An email address of a Google Group to grant
104 access to.
105 type: string
106 iamMember:
107 description: |-
108 Immutable. Some other type of member that appears in the IAM Policy but isn't a user,
109 group, domain, or special group. For example: 'allUsers'.
110 type: string
111 projectRef:
112 description: The project that this resource belongs to.
113 oneOf:
114 - not:
115 required:
116 - external
117 required:
118 - name
119 - not:
120 anyOf:
121 - required:
122 - name
123 - required:
124 - namespace
125 required:
126 - external
127 properties:
128 external:
129 description: 'Allowed value: The `name` field of a `Project` resource.'
130 type: string
131 name:
132 description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
133 type: string
134 namespace:
135 description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
136 type: string
137 type: object
138 resourceID:
139 description: Immutable. Optional. The routine of the resource. Used
140 for creation and acquisition. When unset, the value of `metadata.name`
141 is used as the default.
142 type: string
143 role:
144 description: |-
145 Immutable. Describes the rights granted to the user specified by the other
146 member of the access object. Basic, predefined, and custom roles are
147 supported. Predefined roles that have equivalent basic roles are
148 swapped by the API to their basic counterparts, and will show a diff
149 post-create. See
150 [official docs](https://cloud.google.com/bigquery/docs/access-control).
151 type: string
152 specialGroup:
153 description: |-
154 Immutable. A special group to grant access to. Possible values include:
155
156
157 * 'projectOwners': Owners of the enclosing project.
158
159
160 * 'projectReaders': Readers of the enclosing project.
161
162
163 * 'projectWriters': Writers of the enclosing project.
164
165
166 * 'allAuthenticatedUsers': All authenticated BigQuery users.
167 type: string
168 userByEmail:
169 description: |-
170 Immutable. An email address of a user to grant access to. For example:
171 fred@example.com.
172 type: string
173 view:
174 description: |-
175 Immutable. A view from a different dataset to grant access to. Queries
176 executed against that view will have read access to tables in
177 this dataset. The role field is not required when this field is
178 set. If that view is updated by any user, access to the view
179 needs to be granted again via an update operation.
180 properties:
181 datasetId:
182 description: Immutable. The ID of the dataset containing this
183 table.
184 type: string
185 projectId:
186 description: Immutable. The ID of the project containing this
187 table.
188 type: string
189 tableId:
190 description: |-
191 Immutable. The ID of the table. The ID must contain only letters (a-z,
192 A-Z), numbers (0-9), or underscores (_). The maximum length
193 is 1,024 characters.
194 type: string
195 required:
196 - datasetId
197 - projectId
198 - tableId
199 type: object
200 required:
201 - datasetId
202 - projectRef
203 type: object
204 status:
205 properties:
206 apiUpdatedMember:
207 description: If true, represents that that the iam_member in the config
208 was translated to a different member type by the API, and is stored
209 in state as a different member type.
210 type: boolean
211 conditions:
212 description: Conditions represent the latest available observation
213 of the resource's current state.
214 items:
215 properties:
216 lastTransitionTime:
217 description: Last time the condition transitioned from one status
218 to another.
219 type: string
220 message:
221 description: Human-readable message indicating details about
222 last transition.
223 type: string
224 reason:
225 description: Unique, one-word, CamelCase reason for the condition's
226 last transition.
227 type: string
228 status:
229 description: Status is the status of the condition. Can be True,
230 False, Unknown.
231 type: string
232 type:
233 description: Type is the type of the condition.
234 type: string
235 type: object
236 type: array
237 observedGeneration:
238 description: ObservedGeneration is the generation of the resource
239 that was most recently observed by the Config Connector controller.
240 If this is equal to metadata.generation, then that means that the
241 current reported status reflects the most recent desired state of
242 the resource.
243 type: integer
244 type: object
245 required:
246 - spec
247 type: object
248 served: true
249 storage: true
250 subresources:
251 status: {}
252status:
253 acceptedNames:
254 kind: ""
255 plural: ""
256 conditions: []
257 storedVersions: []
View as plain text