v1alpha1

package
v1.0.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 7, 2024 License: Apache-2.0 Imports: 6 Imported by: 2

Documentation

Overview

+k8s:deepcopy-gen=package Package v1alpha1 is the v1alpha1 version of the acm.services.k8s.aws API. +groupName=acm.services.k8s.aws

Index

Constants

This section is empty.

Variables

View Source 
var (
	// GroupVersion is the API Group Version used to register the objects
	GroupVersion = schema.GroupVersion{Group: "acm.services.k8s.aws", Version: "v1alpha1"}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)

Functions

This section is empty.

Types

type Certificate 

type Certificate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CertificateSpec   `json:"spec,omitempty"`
	Status            CertificateStatus `json:"status,omitempty"`
}

Certificate is the Schema for the Certificates API +kubebuilder:object:root=true +kubebuilder:subresource:status

func (*Certificate) DeepCopy 

func (in *Certificate) DeepCopy() *Certificate

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Certificate.

func (*Certificate) DeepCopyInto 

func (in *Certificate) DeepCopyInto(out *Certificate)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Certificate) DeepCopyObject 

func (in *Certificate) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CertificateDetail 

type CertificateDetail struct {
	CertificateARN          *string             `json:"certificateARN,omitempty"`
	CertificateAuthorityARN *string             `json:"certificateAuthorityARN,omitempty"`
	CreatedAt               *metav1.Time        `json:"createdAt,omitempty"`
	DomainName              *string             `json:"domainName,omitempty"`
	DomainValidationOptions []*DomainValidation `json:"domainValidationOptions,omitempty"`
	ExtendedKeyUsages       []*ExtendedKeyUsage `json:"extendedKeyUsages,omitempty"`
	FailureReason           *string             `json:"failureReason,omitempty"`
	ImportedAt              *metav1.Time        `json:"importedAt,omitempty"`
	InUseBy                 []*string           `json:"inUseBy,omitempty"`
	IssuedAt                *metav1.Time        `json:"issuedAt,omitempty"`
	Issuer                  *string             `json:"issuer,omitempty"`
	KeyAlgorithm            *string             `json:"keyAlgorithm,omitempty"`
	KeyUsages               []*KeyUsage         `json:"keyUsages,omitempty"`
	NotAfter                *metav1.Time        `json:"notAfter,omitempty"`
	NotBefore               *metav1.Time        `json:"notBefore,omitempty"`
	// Structure that contains options for your certificate. Currently, you can
	// use this only to specify whether to opt in to or out of certificate transparency
	// logging. Some browsers require that public certificates issued for your domain
	// be recorded in a log. Certificates that are not logged typically generate
	// a browser error. Transparency makes it possible for you to detect SSL/TLS
	// certificates that have been mistakenly or maliciously issued for your domain.
	// For general information, see Certificate Transparency Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency).
	Options            *CertificateOptions `json:"options,omitempty"`
	RenewalEligibility *string             `json:"renewalEligibility,omitempty"`
	// Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
	// for the certificate. This structure exists only when the certificate type
	// is AMAZON_ISSUED.
	RenewalSummary          *RenewalSummary `json:"renewalSummary,omitempty"`
	RevocationReason        *string         `json:"revocationReason,omitempty"`
	RevokedAt               *metav1.Time    `json:"revokedAt,omitempty"`
	Serial                  *string         `json:"serial,omitempty"`
	SignatureAlgorithm      *string         `json:"signatureAlgorithm,omitempty"`
	Status                  *string         `json:"status,omitempty"`
	Subject                 *string         `json:"subject,omitempty"`
	SubjectAlternativeNames []*string       `json:"subjectAlternativeNames,omitempty"`
	Type                    *string         `json:"type_,omitempty"`
}

Contains metadata about an ACM certificate. This structure is returned in the response to a DescribeCertificate request.

func (*CertificateDetail) DeepCopy 

func (in *CertificateDetail) DeepCopy() *CertificateDetail

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateDetail.

func (*CertificateDetail) DeepCopyInto 

func (in *CertificateDetail) DeepCopyInto(out *CertificateDetail)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateList 

type CertificateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Certificate `json:"items"`
}

CertificateList contains a list of Certificate +kubebuilder:object:root=true

func (*CertificateList) DeepCopy 

func (in *CertificateList) DeepCopy() *CertificateList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateList.

func (*CertificateList) DeepCopyInto 

func (in *CertificateList) DeepCopyInto(out *CertificateList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateList) DeepCopyObject 

func (in *CertificateList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CertificateOptions 

type CertificateOptions struct {
	CertificateTransparencyLoggingPreference *string `json:"certificateTransparencyLoggingPreference,omitempty"`
}

Structure that contains options for your certificate. Currently, you can use this only to specify whether to opt in to or out of certificate transparency logging. Some browsers require that public certificates issued for your domain be recorded in a log. Certificates that are not logged typically generate a browser error. Transparency makes it possible for you to detect SSL/TLS certificates that have been mistakenly or maliciously issued for your domain. For general information, see Certificate Transparency Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency).

func (*CertificateOptions) DeepCopy 

func (in *CertificateOptions) DeepCopy() *CertificateOptions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateOptions.

func (*CertificateOptions) DeepCopyInto 

func (in *CertificateOptions) DeepCopyInto(out *CertificateOptions)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpec 

type CertificateSpec struct {

	// The Certificate to import into AWS Certificate Manager (ACM) to use with services that are integrated with ACM.
	// This field is only valid when importing an existing certificate into ACM.
	Certificate *ackv1alpha1.SecretKeyReference `json:"certificate,omitempty"`
	// The Amazon Resource Name (ARN) of an imported certificate to replace. This field is only valid when importing
	// an existing certificate into ACM.
	CertificateARN *string `json:"certificateARN,omitempty"`
	// The Amazon Resource Name (ARN) of the private certificate authority (CA)
	// that will be used to issue the certificate. If you do not provide an ARN
	// and you are trying to request a private certificate, ACM will attempt to
	// issue a public certificate. For more information about private CAs, see the
	// Amazon Web Services Private Certificate Authority (https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html)
	// user guide. The ARN must have the following form:
	//
	// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
	CertificateAuthorityARN *string                                  `json:"certificateAuthorityARN,omitempty"`
	CertificateAuthorityRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"certificateAuthorityRef,omitempty"`
	CertificateChain        *ackv1alpha1.SecretKeyReference          `json:"certificateChain,omitempty"`
	// Fully qualified domain name (FQDN), such as www.example.com, that you want
	// to secure with an ACM certificate. Use an asterisk (*) to create a wildcard
	// certificate that protects several sites in the same domain. For example,
	// *.example.com protects www.example.com, site.example.com, and images.example.com.
	//
	// In compliance with RFC 5280 (https://datatracker.ietf.org/doc/html/rfc5280),
	// the length of the domain name (technically, the Common Name) that you provide
	// cannot exceed 64 octets (characters), including periods. To add a longer
	// domain name, specify it in the Subject Alternative Name field, which supports
	// names up to 253 octets in length.
	DomainName *string `json:"domainName,omitempty"`
	// The domain name that you want ACM to use to send you emails so that you can
	// validate domain ownership.
	DomainValidationOptions []*DomainValidationOption `json:"domainValidationOptions,omitempty"`
	// Specifies the algorithm of the public and private key pair that your certificate
	// uses to encrypt data. RSA is the default key algorithm for ACM certificates.
	// Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering
	// security comparable to RSA keys but with greater computing efficiency. However,
	// ECDSA is not supported by all network clients. Some AWS services may require
	// RSA keys, or only support ECDSA keys of a particular size, while others allow
	// the use of either RSA and ECDSA keys to ensure that compatibility is not
	// broken. Check the requirements for the AWS service where you plan to deploy
	// your certificate.
	//
	// Default: RSA_2048
	KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
	// Currently, you can use this parameter to specify whether to add the certificate
	// to a certificate transparency log. Certificate transparency makes it possible
	// to detect SSL/TLS certificates that have been mistakenly or maliciously issued.
	// Certificates that have not been logged typically produce an error message
	// in a browser. For more information, see Opting Out of Certificate Transparency
	// Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency).
	Options *CertificateOptions `json:"options,omitempty"`
	// The private key that matches the public key in the certificate. This field is only valid when importing
	// an existing certificate into ACM.
	PrivateKey *ackv1alpha1.SecretKeyReference `json:"privateKey,omitempty"`
	// Additional FQDNs to be included in the Subject Alternative Name extension
	// of the ACM certificate. For example, add the name www.example.net to a certificate
	// for which the DomainName field is www.example.com if users can reach your
	// site by using either name. The maximum number of domain names that you can
	// add to an ACM certificate is 100. However, the initial quota is 10 domain
	// names. If you need more than 10 names, you must request a quota increase.
	// For more information, see Quotas (https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html).
	//
	// The maximum length of a SAN DNS name is 253 octets. The name is made up of
	// multiple labels separated by periods. No label can be longer than 63 octets.
	// Consider the following examples:
	//
	//   - (63 octets).(63 octets).(63 octets).(61 octets) is legal because the
	//     total length is 253 octets (63+1+63+1+63+1+61) and no label exceeds 63
	//     octets.
	//
	//   - (64 octets).(63 octets).(63 octets).(61 octets) is not legal because
	//     the total length exceeds 253 octets (64+1+63+1+63+1+61) and the first
	//     label exceeds 63 octets.
	//
	//   - (63 octets).(63 octets).(63 octets).(62 octets) is not legal because
	//     the total length of the DNS name (63+1+63+1+63+1+62) exceeds 253 octets.
	SubjectAlternativeNames []*string `json:"subjectAlternativeNames,omitempty"`
	// One or more resource tags to associate with the certificate.
	Tags []*Tag `json:"tags,omitempty"`
}

CertificateSpec defines the desired state of Certificate.

func (*CertificateSpec) DeepCopy 

func (in *CertificateSpec) DeepCopy() *CertificateSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpec.

func (*CertificateSpec) DeepCopyInto 

func (in *CertificateSpec) DeepCopyInto(out *CertificateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateStatus 

type CertificateStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRS managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The time at which the certificate was requested.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// Contains information about the initial validation of each domain name that
	// occurs as a result of the RequestCertificate request. This field exists only
	// when the certificate type is AMAZON_ISSUED.
	// +kubebuilder:validation:Optional
	DomainValidations []*DomainValidation `json:"domainValidations,omitempty"`
	// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
	// specifies a purpose for which the certificate public key can be used and
	// consists of a name and an object identifier (OID).
	// +kubebuilder:validation:Optional
	ExtendedKeyUsages []*ExtendedKeyUsage `json:"extendedKeyUsages,omitempty"`
	// The reason the certificate request failed. This value exists only when the
	// certificate status is FAILED. For more information, see Certificate Request
	// Failed (https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed)
	// in the Certificate Manager User Guide.
	// +kubebuilder:validation:Optional
	FailureReason *string `json:"failureReason,omitempty"`
	// The date and time when the certificate was imported. This value exists only
	// when the certificate type is IMPORTED.
	// +kubebuilder:validation:Optional
	ImportedAt *metav1.Time `json:"importedAt,omitempty"`
	// A list of ARNs for the Amazon Web Services resources that are using the certificate.
	// A certificate can be used by multiple Amazon Web Services resources.
	// +kubebuilder:validation:Optional
	InUseBy []*string `json:"inUseBy,omitempty"`
	// The time at which the certificate was issued. This value exists only when
	// the certificate type is AMAZON_ISSUED.
	// +kubebuilder:validation:Optional
	IssuedAt *metav1.Time `json:"issuedAt,omitempty"`
	// The name of the certificate authority that issued and signed the certificate.
	// +kubebuilder:validation:Optional
	Issuer *string `json:"issuer,omitempty"`
	// A list of Key Usage X.509 v3 extension objects. Each object is a string value
	// that identifies the purpose of the public key contained in the certificate.
	// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION,
	// and more.
	// +kubebuilder:validation:Optional
	KeyUsages []*KeyUsage `json:"keyUsages,omitempty"`
	// The time after which the certificate is not valid.
	// +kubebuilder:validation:Optional
	NotAfter *metav1.Time `json:"notAfter,omitempty"`
	// The time before which the certificate is not valid.
	// +kubebuilder:validation:Optional
	NotBefore *metav1.Time `json:"notBefore,omitempty"`
	// Specifies whether the certificate is eligible for renewal. At this time,
	// only exported private certificates can be renewed with the RenewCertificate
	// command.
	// +kubebuilder:validation:Optional
	RenewalEligibility *string `json:"renewalEligibility,omitempty"`
	// Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
	// for the certificate. This field exists only when the certificate type is
	// AMAZON_ISSUED.
	// +kubebuilder:validation:Optional
	RenewalSummary *RenewalSummary `json:"renewalSummary,omitempty"`
	// The reason the certificate was revoked. This value exists only when the certificate
	// status is REVOKED.
	// +kubebuilder:validation:Optional
	RevocationReason *string `json:"revocationReason,omitempty"`
	// The time at which the certificate was revoked. This value exists only when
	// the certificate status is REVOKED.
	// +kubebuilder:validation:Optional
	RevokedAt *metav1.Time `json:"revokedAt,omitempty"`
	// The serial number of the certificate.
	// +kubebuilder:validation:Optional
	Serial *string `json:"serial,omitempty"`
	// The algorithm that was used to sign the certificate.
	// +kubebuilder:validation:Optional
	SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty"`
	// The status of the certificate.
	//
	// A certificate enters status PENDING_VALIDATION upon being requested, unless
	// it fails for any of the reasons given in the troubleshooting topic Certificate
	// request fails (https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html).
	// ACM makes repeated attempts to validate a certificate for 72 hours and then
	// times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT,
	// delete the request, correct the issue with DNS validation (https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html)
	// or Email validation (https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html),
	// and try again. If validation succeeds, the certificate enters status ISSUED.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
	// The name of the entity that is associated with the public key contained in
	// the certificate.
	// +kubebuilder:validation:Optional
	Subject *string `json:"subject,omitempty"`
	// The source of the certificate. For certificates provided by ACM, this value
	// is AMAZON_ISSUED. For certificates that you imported with ImportCertificate,
	// this value is IMPORTED. ACM does not provide managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
	// for imported certificates. For more information about the differences between
	// certificates that you import and those that ACM provides, see Importing Certificates
	// (https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html)
	// in the Certificate Manager User Guide.
	// +kubebuilder:validation:Optional
	Type *string `json:"type_,omitempty"`
}

CertificateStatus defines the observed state of Certificate

func (*CertificateStatus) DeepCopy 

func (in *CertificateStatus) DeepCopy() *CertificateStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateStatus.

func (*CertificateStatus) DeepCopyInto 

func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateStatus_SDK 

type CertificateStatus_SDK string
const (
	CertificateStatus_SDK_PENDING_VALIDATION   CertificateStatus_SDK = "PENDING_VALIDATION"
	CertificateStatus_SDK_ISSUED               CertificateStatus_SDK = "ISSUED"
	CertificateStatus_SDK_INACTIVE             CertificateStatus_SDK = "INACTIVE"
	CertificateStatus_SDK_EXPIRED              CertificateStatus_SDK = "EXPIRED"
	CertificateStatus_SDK_VALIDATION_TIMED_OUT CertificateStatus_SDK = "VALIDATION_TIMED_OUT"
	CertificateStatus_SDK_REVOKED              CertificateStatus_SDK = "REVOKED"
	CertificateStatus_SDK_FAILED               CertificateStatus_SDK = "FAILED"
)

type CertificateSummary 

type CertificateSummary struct {
	CertificateARN                       *string      `json:"certificateARN,omitempty"`
	CreatedAt                            *metav1.Time `json:"createdAt,omitempty"`
	DomainName                           *string      `json:"domainName,omitempty"`
	Exported                             *bool        `json:"exported,omitempty"`
	ExtendedKeyUsages                    []*string    `json:"extendedKeyUsages,omitempty"`
	HasAdditionalSubjectAlternativeNames *bool        `json:"hasAdditionalSubjectAlternativeNames,omitempty"`
	ImportedAt                           *metav1.Time `json:"importedAt,omitempty"`
	InUse                                *bool        `json:"inUse,omitempty"`
	IssuedAt                             *metav1.Time `json:"issuedAt,omitempty"`
	KeyAlgorithm                         *string      `json:"keyAlgorithm,omitempty"`
	KeyUsages                            []*string    `json:"keyUsages,omitempty"`
	NotAfter                             *metav1.Time `json:"notAfter,omitempty"`
	NotBefore                            *metav1.Time `json:"notBefore,omitempty"`
	RenewalEligibility                   *string      `json:"renewalEligibility,omitempty"`
	RevokedAt                            *metav1.Time `json:"revokedAt,omitempty"`
	Status                               *string      `json:"status,omitempty"`
	SubjectAlternativeNameSummaries      []*string    `json:"subjectAlternativeNameSummaries,omitempty"`
	Type                                 *string      `json:"type_,omitempty"`
}

This structure is returned in the response object of ListCertificates action.

func (*CertificateSummary) DeepCopy 

func (in *CertificateSummary) DeepCopy() *CertificateSummary

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSummary.

func (*CertificateSummary) DeepCopyInto 

func (in *CertificateSummary) DeepCopyInto(out *CertificateSummary)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTransparencyLoggingPreference 

type CertificateTransparencyLoggingPreference string
const (
	CertificateTransparencyLoggingPreference_ENABLED  CertificateTransparencyLoggingPreference = "ENABLED"
	CertificateTransparencyLoggingPreference_DISABLED CertificateTransparencyLoggingPreference = "DISABLED"
)

type CertificateType 

type CertificateType string
const (
	CertificateType_IMPORTED      CertificateType = "IMPORTED"
	CertificateType_AMAZON_ISSUED CertificateType = "AMAZON_ISSUED"
	CertificateType_PRIVATE       CertificateType = "PRIVATE"
)

type DomainStatus 

type DomainStatus string
const (
	DomainStatus_PENDING_VALIDATION DomainStatus = "PENDING_VALIDATION"
	DomainStatus_SUCCESS            DomainStatus = "SUCCESS"
	DomainStatus_FAILED             DomainStatus = "FAILED"
)

type DomainValidation 

type DomainValidation struct {
	DomainName *string `json:"domainName,omitempty"`
	// Contains a DNS record value that you can use to validate ownership or control
	// of a domain. This is used by the DescribeCertificate action.
	ResourceRecord   *ResourceRecord `json:"resourceRecord,omitempty"`
	ValidationDomain *string         `json:"validationDomain,omitempty"`
	ValidationEmails []*string       `json:"validationEmails,omitempty"`
	ValidationMethod *string         `json:"validationMethod,omitempty"`
	ValidationStatus *string         `json:"validationStatus,omitempty"`
}

Contains information about the validation of each domain name in the certificate.

func (*DomainValidation) DeepCopy 

func (in *DomainValidation) DeepCopy() *DomainValidation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainValidation.

func (*DomainValidation) DeepCopyInto 

func (in *DomainValidation) DeepCopyInto(out *DomainValidation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DomainValidationOption 

type DomainValidationOption struct {
	DomainName       *string `json:"domainName,omitempty"`
	ValidationDomain *string `json:"validationDomain,omitempty"`
}

Contains information about the domain names that you want ACM to use to send you emails that enable you to validate domain ownership.

func (*DomainValidationOption) DeepCopy 

func (in *DomainValidationOption) DeepCopy() *DomainValidationOption

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainValidationOption.

func (*DomainValidationOption) DeepCopyInto 

func (in *DomainValidationOption) DeepCopyInto(out *DomainValidationOption)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ExtendedKeyUsage 

type ExtendedKeyUsage struct {
	Name *string `json:"name,omitempty"`
	OID  *string `json:"oid,omitempty"`
}

The Extended Key Usage X.509 v3 extension defines one or more purposes for which the public key can be used. This is in addition to or in place of the basic purposes specified by the Key Usage extension.

func (*ExtendedKeyUsage) DeepCopy 

func (in *ExtendedKeyUsage) DeepCopy() *ExtendedKeyUsage

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExtendedKeyUsage.

func (*ExtendedKeyUsage) DeepCopyInto 

func (in *ExtendedKeyUsage) DeepCopyInto(out *ExtendedKeyUsage)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ExtendedKeyUsageName 

type ExtendedKeyUsageName string
const (
	ExtendedKeyUsageName_TLS_WEB_SERVER_AUTHENTICATION ExtendedKeyUsageName = "TLS_WEB_SERVER_AUTHENTICATION"
	ExtendedKeyUsageName_TLS_WEB_CLIENT_AUTHENTICATION ExtendedKeyUsageName = "TLS_WEB_CLIENT_AUTHENTICATION"
	ExtendedKeyUsageName_CODE_SIGNING                  ExtendedKeyUsageName = "CODE_SIGNING"
	ExtendedKeyUsageName_EMAIL_PROTECTION              ExtendedKeyUsageName = "EMAIL_PROTECTION"
	ExtendedKeyUsageName_TIME_STAMPING                 ExtendedKeyUsageName = "TIME_STAMPING"
	ExtendedKeyUsageName_OCSP_SIGNING                  ExtendedKeyUsageName = "OCSP_SIGNING"
	ExtendedKeyUsageName_IPSEC_END_SYSTEM              ExtendedKeyUsageName = "IPSEC_END_SYSTEM"
	ExtendedKeyUsageName_IPSEC_TUNNEL                  ExtendedKeyUsageName = "IPSEC_TUNNEL"
	ExtendedKeyUsageName_IPSEC_USER                    ExtendedKeyUsageName = "IPSEC_USER"
	ExtendedKeyUsageName_ANY                           ExtendedKeyUsageName = "ANY"
	ExtendedKeyUsageName_NONE                          ExtendedKeyUsageName = "NONE"
	ExtendedKeyUsageName_CUSTOM                        ExtendedKeyUsageName = "CUSTOM"
)

type FailureReason 

type FailureReason string
const (
	FailureReason_NO_AVAILABLE_CONTACTS            FailureReason = "NO_AVAILABLE_CONTACTS"
	FailureReason_ADDITIONAL_VERIFICATION_REQUIRED FailureReason = "ADDITIONAL_VERIFICATION_REQUIRED"
	FailureReason_DOMAIN_NOT_ALLOWED               FailureReason = "DOMAIN_NOT_ALLOWED"
	FailureReason_INVALID_PUBLIC_DOMAIN            FailureReason = "INVALID_PUBLIC_DOMAIN"
	FailureReason_DOMAIN_VALIDATION_DENIED         FailureReason = "DOMAIN_VALIDATION_DENIED"
	FailureReason_CAA_ERROR                        FailureReason = "CAA_ERROR"
	FailureReason_PCA_LIMIT_EXCEEDED               FailureReason = "PCA_LIMIT_EXCEEDED"
	FailureReason_PCA_INVALID_ARN                  FailureReason = "PCA_INVALID_ARN"
	FailureReason_PCA_INVALID_STATE                FailureReason = "PCA_INVALID_STATE"
	FailureReason_PCA_REQUEST_FAILED               FailureReason = "PCA_REQUEST_FAILED"
	FailureReason_PCA_NAME_CONSTRAINTS_VALIDATION  FailureReason = "PCA_NAME_CONSTRAINTS_VALIDATION"
	FailureReason_PCA_RESOURCE_NOT_FOUND           FailureReason = "PCA_RESOURCE_NOT_FOUND"
	FailureReason_PCA_INVALID_ARGS                 FailureReason = "PCA_INVALID_ARGS"
	FailureReason_PCA_INVALID_DURATION             FailureReason = "PCA_INVALID_DURATION"
	FailureReason_PCA_ACCESS_DENIED                FailureReason = "PCA_ACCESS_DENIED"
	FailureReason_SLR_NOT_FOUND                    FailureReason = "SLR_NOT_FOUND"
	FailureReason_OTHER                            FailureReason = "OTHER"
)

type Filters 

type Filters struct {
	ExtendedKeyUsage []*string `json:"extendedKeyUsage,omitempty"`
	KeyTypes         []*string `json:"keyTypes,omitempty"`
	KeyUsage         []*string `json:"keyUsage,omitempty"`
}

This structure can be used in the ListCertificates action to filter the output of the certificate list.

func (*Filters) DeepCopy 

func (in *Filters) DeepCopy() *Filters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Filters.

func (*Filters) DeepCopyInto 

func (in *Filters) DeepCopyInto(out *Filters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KeyAlgorithm 

type KeyAlgorithm string
const (
	KeyAlgorithm_RSA_1024      KeyAlgorithm = "RSA_1024"
	KeyAlgorithm_RSA_2048      KeyAlgorithm = "RSA_2048"
	KeyAlgorithm_RSA_3072      KeyAlgorithm = "RSA_3072"
	KeyAlgorithm_RSA_4096      KeyAlgorithm = "RSA_4096"
	KeyAlgorithm_EC_prime256v1 KeyAlgorithm = "EC_prime256v1"
	KeyAlgorithm_EC_secp384r1  KeyAlgorithm = "EC_secp384r1"
	KeyAlgorithm_EC_secp521r1  KeyAlgorithm = "EC_secp521r1"
)

type KeyUsage 

type KeyUsage struct {
	Name *string `json:"name,omitempty"`
}

The Key Usage X.509 v3 extension defines the purpose of the public key contained in the certificate.

func (*KeyUsage) DeepCopy 

func (in *KeyUsage) DeepCopy() *KeyUsage

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyUsage.

func (*KeyUsage) DeepCopyInto 

func (in *KeyUsage) DeepCopyInto(out *KeyUsage)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KeyUsageName 

type KeyUsageName string
const (
	KeyUsageName_DIGITAL_SIGNATURE   KeyUsageName = "DIGITAL_SIGNATURE"
	KeyUsageName_NON_REPUDIATION     KeyUsageName = "NON_REPUDIATION"
	KeyUsageName_KEY_ENCIPHERMENT    KeyUsageName = "KEY_ENCIPHERMENT"
	KeyUsageName_DATA_ENCIPHERMENT   KeyUsageName = "DATA_ENCIPHERMENT"
	KeyUsageName_KEY_AGREEMENT       KeyUsageName = "KEY_AGREEMENT"
	KeyUsageName_CERTIFICATE_SIGNING KeyUsageName = "CERTIFICATE_SIGNING"
	KeyUsageName_CRL_SIGNING         KeyUsageName = "CRL_SIGNING"
	KeyUsageName_ENCIPHER_ONLY       KeyUsageName = "ENCIPHER_ONLY"
	KeyUsageName_DECIPHER_ONLY       KeyUsageName = "DECIPHER_ONLY"
	KeyUsageName_ANY                 KeyUsageName = "ANY"
	KeyUsageName_CUSTOM              KeyUsageName = "CUSTOM"
)

type RecordType 

type RecordType string
const (
	RecordType_CNAME RecordType = "CNAME"
)

type RenewalEligibility 

type RenewalEligibility string
const (
	RenewalEligibility_ELIGIBLE   RenewalEligibility = "ELIGIBLE"
	RenewalEligibility_INELIGIBLE RenewalEligibility = "INELIGIBLE"
)

type RenewalStatus 

type RenewalStatus string
const (
	RenewalStatus_PENDING_AUTO_RENEWAL RenewalStatus = "PENDING_AUTO_RENEWAL"
	RenewalStatus_PENDING_VALIDATION   RenewalStatus = "PENDING_VALIDATION"
	RenewalStatus_SUCCESS              RenewalStatus = "SUCCESS"
	RenewalStatus_FAILED               RenewalStatus = "FAILED"
)

type RenewalSummary 

type RenewalSummary struct {
	DomainValidationOptions []*DomainValidation `json:"domainValidationOptions,omitempty"`
	RenewalStatus           *string             `json:"renewalStatus,omitempty"`
	RenewalStatusReason     *string             `json:"renewalStatusReason,omitempty"`
	UpdatedAt               *metav1.Time        `json:"updatedAt,omitempty"`
}

Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html) for the certificate. This structure exists only when the certificate type is AMAZON_ISSUED.

func (*RenewalSummary) DeepCopy 

func (in *RenewalSummary) DeepCopy() *RenewalSummary

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RenewalSummary.

func (*RenewalSummary) DeepCopyInto 

func (in *RenewalSummary) DeepCopyInto(out *RenewalSummary)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ResourceRecord 

type ResourceRecord struct {
	Name  *string `json:"name,omitempty"`
	Type  *string `json:"type_,omitempty"`
	Value *string `json:"value,omitempty"`
}

Contains a DNS record value that you can use to validate ownership or control of a domain. This is used by the DescribeCertificate action.

func (*ResourceRecord) DeepCopy 

func (in *ResourceRecord) DeepCopy() *ResourceRecord

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceRecord.

func (*ResourceRecord) DeepCopyInto 

func (in *ResourceRecord) DeepCopyInto(out *ResourceRecord)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RevocationReason 

type RevocationReason string
const (
	RevocationReason_UNSPECIFIED            RevocationReason = "UNSPECIFIED"
	RevocationReason_KEY_COMPROMISE         RevocationReason = "KEY_COMPROMISE"
	RevocationReason_CA_COMPROMISE          RevocationReason = "CA_COMPROMISE"
	RevocationReason_AFFILIATION_CHANGED    RevocationReason = "AFFILIATION_CHANGED"
	RevocationReason_SUPERCEDED             RevocationReason = "SUPERCEDED"
	RevocationReason_CESSATION_OF_OPERATION RevocationReason = "CESSATION_OF_OPERATION"
	RevocationReason_CERTIFICATE_HOLD       RevocationReason = "CERTIFICATE_HOLD"
	RevocationReason_REMOVE_FROM_CRL        RevocationReason = "REMOVE_FROM_CRL"
	RevocationReason_PRIVILEGE_WITHDRAWN    RevocationReason = "PRIVILEGE_WITHDRAWN"
	RevocationReason_A_A_COMPROMISE         RevocationReason = "A_A_COMPROMISE"
)

type SortBy 

type SortBy string
const (
	SortBy_CREATED_AT SortBy = "CREATED_AT"
)

type SortOrder 

type SortOrder string
const (
	SortOrder_ASCENDING  SortOrder = "ASCENDING"
	SortOrder_DESCENDING SortOrder = "DESCENDING"
)

type Tag 

type Tag struct {
	Key   *string `json:"key,omitempty"`
	Value *string `json:"value,omitempty"`
}

A key-value pair that identifies or specifies metadata about an ACM resource.

func (*Tag) DeepCopy 

func (in *Tag) DeepCopy() *Tag

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Tag.

func (*Tag) DeepCopyInto 

func (in *Tag) DeepCopyInto(out *Tag)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ValidationMethod 

type ValidationMethod string
const (
	ValidationMethod_EMAIL ValidationMethod = "EMAIL"
	ValidationMethod_DNS   ValidationMethod = "DNS"
)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.