1# Copyright 2020 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: apiextensions.k8s.io/v1
16kind: CustomResourceDefinition
17metadata:
18 annotations:
19 cnrm.cloud.google.com/version: 1.106.0
20 creationTimestamp: null
21 labels:
22 cnrm.cloud.google.com/managed-by-kcc: "true"
23 cnrm.cloud.google.com/stability-level: alpha
24 cnrm.cloud.google.com/system: "true"
25 cnrm.cloud.google.com/tf2crd: "true"
26 name: kmssecretciphertexts.kms.cnrm.cloud.google.com
27spec:
28 group: kms.cnrm.cloud.google.com
29 names:
30 categories:
31 - gcp
32 kind: KMSSecretCiphertext
33 plural: kmssecretciphertexts
34 shortNames:
35 - gcpkmssecretciphertext
36 - gcpkmssecretciphertexts
37 singular: kmssecretciphertext
38 scope: Namespaced
39 versions:
40 - additionalPrinterColumns:
41 - jsonPath: .metadata.creationTimestamp
42 name: Age
43 type: date
44 - description: When 'True', the most recent reconcile of the resource succeeded
45 jsonPath: .status.conditions[?(@.type=='Ready')].status
46 name: Ready
47 type: string
48 - description: The reason for the value in 'Ready'
49 jsonPath: .status.conditions[?(@.type=='Ready')].reason
50 name: Status
51 type: string
52 - description: The last transition time for the value in 'Status'
53 jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
54 name: Status Age
55 type: date
56 name: v1alpha1
57 schema:
58 openAPIV3Schema:
59 properties:
60 apiVersion:
61 description: 'apiVersion defines the versioned schema of this representation
62 of an object. Servers should convert recognized schemas to the latest
63 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
64 type: string
65 kind:
66 description: 'kind is a string value representing the REST resource this
67 object represents. Servers may infer this from the endpoint the client
68 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
69 type: string
70 metadata:
71 type: object
72 spec:
73 properties:
74 additionalAuthenticatedData:
75 description: Immutable. The additional authenticated data used for
76 integrity checks during encryption and decryption.
77 oneOf:
78 - not:
79 required:
80 - valueFrom
81 required:
82 - value
83 - not:
84 required:
85 - value
86 required:
87 - valueFrom
88 properties:
89 value:
90 description: Value of the field. Cannot be used if 'valueFrom'
91 is specified.
92 type: string
93 valueFrom:
94 description: Source for the field's value. Cannot be used if 'value'
95 is specified.
96 properties:
97 secretKeyRef:
98 description: Reference to a value with the given key in the
99 given Secret in the resource's namespace.
100 properties:
101 key:
102 description: Key that identifies the value to be extracted.
103 type: string
104 name:
105 description: Name of the Secret to extract a value from.
106 type: string
107 required:
108 - name
109 - key
110 type: object
111 type: object
112 type: object
113 cryptoKey:
114 description: |-
115 Immutable. The full name of the CryptoKey that will be used to encrypt the provided plaintext.
116 Format: ''projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{cryptoKey}}''.
117 type: string
118 plaintext:
119 description: Immutable. The plaintext to be encrypted.
120 oneOf:
121 - not:
122 required:
123 - valueFrom
124 required:
125 - value
126 - not:
127 required:
128 - value
129 required:
130 - valueFrom
131 properties:
132 value:
133 description: Value of the field. Cannot be used if 'valueFrom'
134 is specified.
135 type: string
136 valueFrom:
137 description: Source for the field's value. Cannot be used if 'value'
138 is specified.
139 properties:
140 secretKeyRef:
141 description: Reference to a value with the given key in the
142 given Secret in the resource's namespace.
143 properties:
144 key:
145 description: Key that identifies the value to be extracted.
146 type: string
147 name:
148 description: Name of the Secret to extract a value from.
149 type: string
150 required:
151 - name
152 - key
153 type: object
154 type: object
155 type: object
156 resourceID:
157 description: Immutable. Optional. The service-generated ciphertext
158 of the resource. Used for acquisition only. Leave unset to create
159 a new resource.
160 type: string
161 required:
162 - cryptoKey
163 - plaintext
164 type: object
165 status:
166 properties:
167 ciphertext:
168 description: Contains the result of encrypting the provided plaintext,
169 encoded in base64.
170 type: string
171 conditions:
172 description: Conditions represent the latest available observation
173 of the resource's current state.
174 items:
175 properties:
176 lastTransitionTime:
177 description: Last time the condition transitioned from one status
178 to another.
179 type: string
180 message:
181 description: Human-readable message indicating details about
182 last transition.
183 type: string
184 reason:
185 description: Unique, one-word, CamelCase reason for the condition's
186 last transition.
187 type: string
188 status:
189 description: Status is the status of the condition. Can be True,
190 False, Unknown.
191 type: string
192 type:
193 description: Type is the type of the condition.
194 type: string
195 type: object
196 type: array
197 observedGeneration:
198 description: ObservedGeneration is the generation of the resource
199 that was most recently observed by the Config Connector controller.
200 If this is equal to metadata.generation, then that means that the
201 current reported status reflects the most recent desired state of
202 the resource.
203 type: integer
204 type: object
205 required:
206 - spec
207 type: object
208 served: true
209 storage: true
210 subresources:
211 status: {}
212status:
213 acceptedNames:
214 kind: ""
215 plural: ""
216 conditions: []
217 storedVersions: []
View as plain text