1apiVersion: apiextensions.k8s.io/v1
2kind: CustomResourceDefinition
3metadata:
4 annotations:
5 cnrm.cloud.google.com/version: 0.0.0-dev
6 creationTimestamp: null
7 labels:
8 cnrm.cloud.google.com/managed-by-kcc: "true"
9 cnrm.cloud.google.com/stability-level: alpha
10 cnrm.cloud.google.com/system: "true"
11 cnrm.cloud.google.com/tf2crd: "true"
12 name: kmssecretciphertexts.kms.cnrm.cloud.google.com
13spec:
14 group: kms.cnrm.cloud.google.com
15 names:
16 categories:
17 - gcp
18 kind: KMSSecretCiphertext
19 plural: kmssecretciphertexts
20 shortNames:
21 - gcpkmssecretciphertext
22 - gcpkmssecretciphertexts
23 singular: kmssecretciphertext
24 preserveUnknownFields: false
25 scope: Namespaced
26 versions:
27 - additionalPrinterColumns:
28 - jsonPath: .metadata.creationTimestamp
29 name: Age
30 type: date
31 - description: When 'True', the most recent reconcile of the resource succeeded
32 jsonPath: .status.conditions[?(@.type=='Ready')].status
33 name: Ready
34 type: string
35 - description: The reason for the value in 'Ready'
36 jsonPath: .status.conditions[?(@.type=='Ready')].reason
37 name: Status
38 type: string
39 - description: The last transition time for the value in 'Status'
40 jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
41 name: Status Age
42 type: date
43 name: v1alpha1
44 schema:
45 openAPIV3Schema:
46 properties:
47 apiVersion:
48 description: 'apiVersion defines the versioned schema of this representation
49 of an object. Servers should convert recognized schemas to the latest
50 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
51 type: string
52 kind:
53 description: 'kind is a string value representing the REST resource this
54 object represents. Servers may infer this from the endpoint the client
55 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
56 type: string
57 metadata:
58 type: object
59 spec:
60 properties:
61 additionalAuthenticatedData:
62 description: Immutable. The additional authenticated data used for
63 integrity checks during encryption and decryption.
64 oneOf:
65 - not:
66 required:
67 - valueFrom
68 required:
69 - value
70 - not:
71 required:
72 - value
73 required:
74 - valueFrom
75 properties:
76 value:
77 description: Value of the field. Cannot be used if 'valueFrom'
78 is specified.
79 type: string
80 valueFrom:
81 description: Source for the field's value. Cannot be used if 'value'
82 is specified.
83 properties:
84 secretKeyRef:
85 description: Reference to a value with the given key in the
86 given Secret in the resource's namespace.
87 properties:
88 key:
89 description: Key that identifies the value to be extracted.
90 type: string
91 name:
92 description: Name of the Secret to extract a value from.
93 type: string
94 required:
95 - name
96 - key
97 type: object
98 type: object
99 type: object
100 cryptoKey:
101 description: |-
102 Immutable. The full name of the CryptoKey that will be used to encrypt the provided plaintext.
103 Format: ''projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{cryptoKey}}''.
104 type: string
105 plaintext:
106 description: Immutable. The plaintext to be encrypted.
107 oneOf:
108 - not:
109 required:
110 - valueFrom
111 required:
112 - value
113 - not:
114 required:
115 - value
116 required:
117 - valueFrom
118 properties:
119 value:
120 description: Value of the field. Cannot be used if 'valueFrom'
121 is specified.
122 type: string
123 valueFrom:
124 description: Source for the field's value. Cannot be used if 'value'
125 is specified.
126 properties:
127 secretKeyRef:
128 description: Reference to a value with the given key in the
129 given Secret in the resource's namespace.
130 properties:
131 key:
132 description: Key that identifies the value to be extracted.
133 type: string
134 name:
135 description: Name of the Secret to extract a value from.
136 type: string
137 required:
138 - name
139 - key
140 type: object
141 type: object
142 type: object
143 resourceID:
144 description: Immutable. Optional. The service-generated ciphertext
145 of the resource. Used for acquisition only. Leave unset to create
146 a new resource.
147 type: string
148 required:
149 - cryptoKey
150 - plaintext
151 type: object
152 status:
153 properties:
154 ciphertext:
155 description: Contains the result of encrypting the provided plaintext,
156 encoded in base64.
157 type: string
158 conditions:
159 description: Conditions represent the latest available observation
160 of the resource's current state.
161 items:
162 properties:
163 lastTransitionTime:
164 description: Last time the condition transitioned from one status
165 to another.
166 type: string
167 message:
168 description: Human-readable message indicating details about
169 last transition.
170 type: string
171 reason:
172 description: Unique, one-word, CamelCase reason for the condition's
173 last transition.
174 type: string
175 status:
176 description: Status is the status of the condition. Can be True,
177 False, Unknown.
178 type: string
179 type:
180 description: Type is the type of the condition.
181 type: string
182 type: object
183 type: array
184 observedGeneration:
185 description: ObservedGeneration is the generation of the resource
186 that was most recently observed by the Config Connector controller.
187 If this is equal to metadata.generation, then that means that the
188 current reported status reflects the most recent desired state of
189 the resource.
190 type: integer
191 type: object
192 required:
193 - spec
194 type: object
195 served: true
196 storage: true
197 subresources:
198 status: {}
199status:
200 acceptedNames:
201 kind: ""
202 plural: ""
203 conditions: []
204 storedVersions: []
View as plain text