v1beta1

package
v1.4.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 2, 2024 License: Apache-2.0 Imports: 14 Imported by: 1

Documentation

Overview

+kubebuilder:object:generate=true +groupName=secretsmanager.aws.upbound.io +versionName=v1beta1

Index

Constants

View Source
const (
	CRDGroup   = "secretsmanager.aws.upbound.io"
	CRDVersion = "v1beta1"
)

Package type metadata.

Variables

View Source
var (
	// CRDGroupVersion is the API Group Version used to register the objects
	CRDGroupVersion = schema.GroupVersion{Group: CRDGroup, Version: CRDVersion}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: CRDGroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)
View Source
var (
	Secret_Kind             = "Secret"
	Secret_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: Secret_Kind}.String()
	Secret_KindAPIVersion   = Secret_Kind + "." + CRDGroupVersion.String()
	Secret_GroupVersionKind = CRDGroupVersion.WithKind(Secret_Kind)
)

Repository type metadata.

View Source
var (
	SecretPolicy_Kind             = "SecretPolicy"
	SecretPolicy_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: SecretPolicy_Kind}.String()
	SecretPolicy_KindAPIVersion   = SecretPolicy_Kind + "." + CRDGroupVersion.String()
	SecretPolicy_GroupVersionKind = CRDGroupVersion.WithKind(SecretPolicy_Kind)
)

Repository type metadata.

View Source
var (
	SecretRotation_Kind             = "SecretRotation"
	SecretRotation_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: SecretRotation_Kind}.String()
	SecretRotation_KindAPIVersion   = SecretRotation_Kind + "." + CRDGroupVersion.String()
	SecretRotation_GroupVersionKind = CRDGroupVersion.WithKind(SecretRotation_Kind)
)

Repository type metadata.

View Source
var (
	SecretVersion_Kind             = "SecretVersion"
	SecretVersion_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: SecretVersion_Kind}.String()
	SecretVersion_KindAPIVersion   = SecretVersion_Kind + "." + CRDGroupVersion.String()
	SecretVersion_GroupVersionKind = CRDGroupVersion.WithKind(SecretVersion_Kind)
)

Repository type metadata.

Functions

This section is empty.

Types

type ReplicaInitParameters added in v0.38.0

type ReplicaInitParameters struct {

	// ARN, Key ID, or Alias of the AWS KMS key within the region secret is replicated to. If one is not specified, then Secrets Manager defaults to using the AWS account's default KMS key (aws/secretsmanager) in the region or creates one for use if non-existent.
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`
}

func (*ReplicaInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ReplicaInitParameters.

func (*ReplicaInitParameters) DeepCopyInto added in v0.38.0

func (in *ReplicaInitParameters) DeepCopyInto(out *ReplicaInitParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ReplicaObservation

type ReplicaObservation struct {

	// ARN, Key ID, or Alias of the AWS KMS key within the region secret is replicated to. If one is not specified, then Secrets Manager defaults to using the AWS account's default KMS key (aws/secretsmanager) in the region or creates one for use if non-existent.
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`

	// Date that you last accessed the secret in the Region.
	LastAccessedDate *string `json:"lastAccessedDate,omitempty" tf:"last_accessed_date,omitempty"`

	// Region for replicating the secret.
	Region *string `json:"region,omitempty" tf:"region,omitempty"`

	// Status can be InProgress, Failed, or InSync.
	Status *string `json:"status,omitempty" tf:"status,omitempty"`

	// Message such as Replication succeeded or Secret with this name already exists in this region.
	StatusMessage *string `json:"statusMessage,omitempty" tf:"status_message,omitempty"`
}

func (*ReplicaObservation) DeepCopy

func (in *ReplicaObservation) DeepCopy() *ReplicaObservation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ReplicaObservation.

func (*ReplicaObservation) DeepCopyInto

func (in *ReplicaObservation) DeepCopyInto(out *ReplicaObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ReplicaParameters

type ReplicaParameters struct {

	// ARN, Key ID, or Alias of the AWS KMS key within the region secret is replicated to. If one is not specified, then Secrets Manager defaults to using the AWS account's default KMS key (aws/secretsmanager) in the region or creates one for use if non-existent.
	// +kubebuilder:validation:Optional
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`

	// Region for replicating the secret.
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"region,omitempty"`
}

func (*ReplicaParameters) DeepCopy

func (in *ReplicaParameters) DeepCopy() *ReplicaParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ReplicaParameters.

func (*ReplicaParameters) DeepCopyInto

func (in *ReplicaParameters) DeepCopyInto(out *ReplicaParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RotationRulesInitParameters added in v0.38.0

type RotationRulesInitParameters struct {

	// Specifies the number of days between automatic scheduled rotations of the secret. Either automatically_after_days or schedule_expression must be specified.
	AutomaticallyAfterDays *float64 `json:"automaticallyAfterDays,omitempty" tf:"automatically_after_days,omitempty"`

	// - The length of the rotation window in hours. For example, 3h for a three hour window.
	Duration *string `json:"duration,omitempty" tf:"duration,omitempty"`

	// A cron() or rate() expression that defines the schedule for rotating your secret. Either automatically_after_days or schedule_expression must be specified.
	ScheduleExpression *string `json:"scheduleExpression,omitempty" tf:"schedule_expression,omitempty"`
}

func (*RotationRulesInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotationRulesInitParameters.

func (*RotationRulesInitParameters) DeepCopyInto added in v0.38.0

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RotationRulesObservation

type RotationRulesObservation struct {

	// Specifies the number of days between automatic scheduled rotations of the secret. Either automatically_after_days or schedule_expression must be specified.
	AutomaticallyAfterDays *float64 `json:"automaticallyAfterDays,omitempty" tf:"automatically_after_days,omitempty"`

	// - The length of the rotation window in hours. For example, 3h for a three hour window.
	Duration *string `json:"duration,omitempty" tf:"duration,omitempty"`

	// A cron() or rate() expression that defines the schedule for rotating your secret. Either automatically_after_days or schedule_expression must be specified.
	ScheduleExpression *string `json:"scheduleExpression,omitempty" tf:"schedule_expression,omitempty"`
}

func (*RotationRulesObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotationRulesObservation.

func (*RotationRulesObservation) DeepCopyInto

func (in *RotationRulesObservation) DeepCopyInto(out *RotationRulesObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RotationRulesParameters

type RotationRulesParameters struct {

	// Specifies the number of days between automatic scheduled rotations of the secret. Either automatically_after_days or schedule_expression must be specified.
	// +kubebuilder:validation:Optional
	AutomaticallyAfterDays *float64 `json:"automaticallyAfterDays,omitempty" tf:"automatically_after_days,omitempty"`

	// - The length of the rotation window in hours. For example, 3h for a three hour window.
	// +kubebuilder:validation:Optional
	Duration *string `json:"duration,omitempty" tf:"duration,omitempty"`

	// A cron() or rate() expression that defines the schedule for rotating your secret. Either automatically_after_days or schedule_expression must be specified.
	// +kubebuilder:validation:Optional
	ScheduleExpression *string `json:"scheduleExpression,omitempty" tf:"schedule_expression,omitempty"`
}

func (*RotationRulesParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotationRulesParameters.

func (*RotationRulesParameters) DeepCopyInto

func (in *RotationRulesParameters) DeepCopyInto(out *RotationRulesParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Secret

type Secret struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              SecretSpec   `json:"spec"`
	Status            SecretStatus `json:"status,omitempty"`
}

Secret is the Schema for the Secrets API. Provides a resource to manage AWS Secrets Manager secret metadata +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,aws}

func (*Secret) DeepCopy

func (in *Secret) DeepCopy() *Secret

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Secret.

func (*Secret) DeepCopyInto

func (in *Secret) DeepCopyInto(out *Secret)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Secret) DeepCopyObject

func (in *Secret) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Secret) GetCondition

func (mg *Secret) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this Secret.

func (*Secret) GetConnectionDetailsMapping

func (tr *Secret) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this Secret

func (*Secret) GetDeletionPolicy

func (mg *Secret) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this Secret.

func (*Secret) GetID

func (tr *Secret) GetID() string

GetID returns ID of underlying Terraform resource of this Secret

func (*Secret) GetInitParameters added in v0.38.0

func (tr *Secret) GetInitParameters() (map[string]any, error)

GetInitParameters of this Secret

func (*Secret) GetManagementPolicies added in v0.38.0

func (mg *Secret) GetManagementPolicies() xpv1.ManagementPolicies

GetManagementPolicies of this Secret.

func (*Secret) GetMergedParameters added in v0.44.0

func (tr *Secret) GetMergedParameters(shouldMergeInitProvider bool) (map[string]any, error)

GetInitParameters of this Secret

func (*Secret) GetObservation

func (tr *Secret) GetObservation() (map[string]any, error)

GetObservation of this Secret

func (*Secret) GetParameters

func (tr *Secret) GetParameters() (map[string]any, error)

GetParameters of this Secret

func (*Secret) GetProviderConfigReference

func (mg *Secret) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this Secret.

func (*Secret) GetPublishConnectionDetailsTo

func (mg *Secret) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this Secret.

func (*Secret) GetTerraformResourceType

func (mg *Secret) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this Secret

func (*Secret) GetTerraformSchemaVersion

func (tr *Secret) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*Secret) GetWriteConnectionSecretToReference

func (mg *Secret) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this Secret.

func (*Secret) Hub added in v0.47.2

func (tr *Secret) Hub()

Hub marks this type as a conversion hub.

func (*Secret) LateInitialize

func (tr *Secret) LateInitialize(attrs []byte) (bool, error)

LateInitialize this Secret using its observed tfState. returns True if there are any spec changes for the resource.

func (*Secret) ResolveReferences

func (mg *Secret) ResolveReferences(ctx context.Context, c client.Reader) error

func (*Secret) SetConditions

func (mg *Secret) SetConditions(c ...xpv1.Condition)

SetConditions of this Secret.

func (*Secret) SetDeletionPolicy

func (mg *Secret) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this Secret.

func (*Secret) SetManagementPolicies added in v0.38.0

func (mg *Secret) SetManagementPolicies(r xpv1.ManagementPolicies)

SetManagementPolicies of this Secret.

func (*Secret) SetObservation

func (tr *Secret) SetObservation(obs map[string]any) error

SetObservation for this Secret

func (*Secret) SetParameters

func (tr *Secret) SetParameters(params map[string]any) error

SetParameters for this Secret

func (*Secret) SetProviderConfigReference

func (mg *Secret) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this Secret.

func (*Secret) SetPublishConnectionDetailsTo

func (mg *Secret) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this Secret.

func (*Secret) SetWriteConnectionSecretToReference

func (mg *Secret) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this Secret.

type SecretInitParameters added in v0.38.0

type SecretInitParameters struct {

	// Description of the secret.
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Accepts boolean value to specify whether to overwrite a secret with the same name in the destination Region.
	ForceOverwriteReplicaSecret *bool `json:"forceOverwriteReplicaSecret,omitempty" tf:"force_overwrite_replica_secret,omitempty"`

	// ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. If you need to reference a CMK in a different account, you can use only the key ARN. If you don't specify this value, then Secrets Manager defaults to using the AWS account's default KMS key (the one named aws/secretsmanager). If the default KMS key with that name doesn't yet exist, then AWS Secrets Manager creates it for you automatically the first time.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kms/v1beta1.Key
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`

	// Reference to a Key in kms to populate kmsKeyId.
	// +kubebuilder:validation:Optional
	KMSKeyIDRef *v1.Reference `json:"kmsKeyIdRef,omitempty" tf:"-"`

	// Selector for a Key in kms to populate kmsKeyId.
	// +kubebuilder:validation:Optional
	KMSKeyIDSelector *v1.Selector `json:"kmsKeyIdSelector,omitempty" tf:"-"`

	// Friendly name of the new secret. The secret name can consist of uppercase letters, lowercase letters, digits, and any of the following characters: /_+=.@- Conflicts with name_prefix.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Number of days that AWS Secrets Manager waits before it can delete the secret. This value can be 0 to force deletion without recovery or range from 7 to 30 days. The default value is 30.
	RecoveryWindowInDays *float64 `json:"recoveryWindowInDays,omitempty" tf:"recovery_window_in_days,omitempty"`

	// Configuration block to support secret replication. See details below.
	Replica []ReplicaInitParameters `json:"replica,omitempty" tf:"replica,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}

func (*SecretInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretInitParameters.

func (*SecretInitParameters) DeepCopyInto added in v0.38.0

func (in *SecretInitParameters) DeepCopyInto(out *SecretInitParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretList

type SecretList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Secret `json:"items"`
}

SecretList contains a list of Secrets

func (*SecretList) DeepCopy

func (in *SecretList) DeepCopy() *SecretList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretList.

func (*SecretList) DeepCopyInto

func (in *SecretList) DeepCopyInto(out *SecretList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretList) DeepCopyObject

func (in *SecretList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretList) GetItems

func (l *SecretList) GetItems() []resource.Managed

GetItems of this SecretList.

type SecretObservation

type SecretObservation struct {

	// ARN of the secret.
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Description of the secret.
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Accepts boolean value to specify whether to overwrite a secret with the same name in the destination Region.
	ForceOverwriteReplicaSecret *bool `json:"forceOverwriteReplicaSecret,omitempty" tf:"force_overwrite_replica_secret,omitempty"`

	// ARN of the secret.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. If you need to reference a CMK in a different account, you can use only the key ARN. If you don't specify this value, then Secrets Manager defaults to using the AWS account's default KMS key (the one named aws/secretsmanager). If the default KMS key with that name doesn't yet exist, then AWS Secrets Manager creates it for you automatically the first time.
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`

	// Friendly name of the new secret. The secret name can consist of uppercase letters, lowercase letters, digits, and any of the following characters: /_+=.@- Conflicts with name_prefix.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Valid JSON document representing a resource policy. Removing policy from your configuration or setting policy to null or an empty string (i.e., policy = "") will not delete the policy since it could have been set by aws_secretsmanager_secret_policy. To delete the policy, set it to "{}" (an empty JSON document).
	Policy *string `json:"policy,omitempty" tf:"policy,omitempty"`

	// Number of days that AWS Secrets Manager waits before it can delete the secret. This value can be 0 to force deletion without recovery or range from 7 to 30 days. The default value is 30.
	RecoveryWindowInDays *float64 `json:"recoveryWindowInDays,omitempty" tf:"recovery_window_in_days,omitempty"`

	// Configuration block to support secret replication. See details below.
	Replica []ReplicaObservation `json:"replica,omitempty" tf:"replica,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
	// +mapType=granular
	TagsAll map[string]*string `json:"tagsAll,omitempty" tf:"tags_all,omitempty"`
}

func (*SecretObservation) DeepCopy

func (in *SecretObservation) DeepCopy() *SecretObservation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretObservation.

func (*SecretObservation) DeepCopyInto

func (in *SecretObservation) DeepCopyInto(out *SecretObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretParameters

type SecretParameters struct {

	// Description of the secret.
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Accepts boolean value to specify whether to overwrite a secret with the same name in the destination Region.
	// +kubebuilder:validation:Optional
	ForceOverwriteReplicaSecret *bool `json:"forceOverwriteReplicaSecret,omitempty" tf:"force_overwrite_replica_secret,omitempty"`

	// ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. If you need to reference a CMK in a different account, you can use only the key ARN. If you don't specify this value, then Secrets Manager defaults to using the AWS account's default KMS key (the one named aws/secretsmanager). If the default KMS key with that name doesn't yet exist, then AWS Secrets Manager creates it for you automatically the first time.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kms/v1beta1.Key
	// +kubebuilder:validation:Optional
	KMSKeyID *string `json:"kmsKeyId,omitempty" tf:"kms_key_id,omitempty"`

	// Reference to a Key in kms to populate kmsKeyId.
	// +kubebuilder:validation:Optional
	KMSKeyIDRef *v1.Reference `json:"kmsKeyIdRef,omitempty" tf:"-"`

	// Selector for a Key in kms to populate kmsKeyId.
	// +kubebuilder:validation:Optional
	KMSKeyIDSelector *v1.Selector `json:"kmsKeyIdSelector,omitempty" tf:"-"`

	// Friendly name of the new secret. The secret name can consist of uppercase letters, lowercase letters, digits, and any of the following characters: /_+=.@- Conflicts with name_prefix.
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Number of days that AWS Secrets Manager waits before it can delete the secret. This value can be 0 to force deletion without recovery or range from 7 to 30 days. The default value is 30.
	// +kubebuilder:validation:Optional
	RecoveryWindowInDays *float64 `json:"recoveryWindowInDays,omitempty" tf:"recovery_window_in_days,omitempty"`

	// Region for replicating the secret.
	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Configuration block to support secret replication. See details below.
	// +kubebuilder:validation:Optional
	Replica []ReplicaParameters `json:"replica,omitempty" tf:"replica,omitempty"`

	// Key-value map of resource tags.
	// +kubebuilder:validation:Optional
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}

func (*SecretParameters) DeepCopy

func (in *SecretParameters) DeepCopy() *SecretParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretParameters.

func (*SecretParameters) DeepCopyInto

func (in *SecretParameters) DeepCopyInto(out *SecretParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretPolicy

type SecretPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.policy) || (has(self.initProvider) && has(self.initProvider.policy))",message="spec.forProvider.policy is a required parameter"
	Spec   SecretPolicySpec   `json:"spec"`
	Status SecretPolicyStatus `json:"status,omitempty"`
}

SecretPolicy is the Schema for the SecretPolicys API. Provides a resource to manage AWS Secrets Manager secret policy +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,aws}

func (*SecretPolicy) DeepCopy

func (in *SecretPolicy) DeepCopy() *SecretPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicy.

func (*SecretPolicy) DeepCopyInto

func (in *SecretPolicy) DeepCopyInto(out *SecretPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretPolicy) DeepCopyObject

func (in *SecretPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretPolicy) GetCondition

func (mg *SecretPolicy) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this SecretPolicy.

func (*SecretPolicy) GetConnectionDetailsMapping

func (tr *SecretPolicy) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this SecretPolicy

func (*SecretPolicy) GetDeletionPolicy

func (mg *SecretPolicy) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this SecretPolicy.

func (*SecretPolicy) GetID

func (tr *SecretPolicy) GetID() string

GetID returns ID of underlying Terraform resource of this SecretPolicy

func (*SecretPolicy) GetInitParameters added in v0.38.0

func (tr *SecretPolicy) GetInitParameters() (map[string]any, error)

GetInitParameters of this SecretPolicy

func (*SecretPolicy) GetManagementPolicies added in v0.38.0

func (mg *SecretPolicy) GetManagementPolicies() xpv1.ManagementPolicies

GetManagementPolicies of this SecretPolicy.

func (*SecretPolicy) GetMergedParameters added in v0.44.0

func (tr *SecretPolicy) GetMergedParameters(shouldMergeInitProvider bool) (map[string]any, error)

GetInitParameters of this SecretPolicy

func (*SecretPolicy) GetObservation

func (tr *SecretPolicy) GetObservation() (map[string]any, error)

GetObservation of this SecretPolicy

func (*SecretPolicy) GetParameters

func (tr *SecretPolicy) GetParameters() (map[string]any, error)

GetParameters of this SecretPolicy

func (*SecretPolicy) GetProviderConfigReference

func (mg *SecretPolicy) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this SecretPolicy.

func (*SecretPolicy) GetPublishConnectionDetailsTo

func (mg *SecretPolicy) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this SecretPolicy.

func (*SecretPolicy) GetTerraformResourceType

func (mg *SecretPolicy) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this SecretPolicy

func (*SecretPolicy) GetTerraformSchemaVersion

func (tr *SecretPolicy) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*SecretPolicy) GetWriteConnectionSecretToReference

func (mg *SecretPolicy) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this SecretPolicy.

func (*SecretPolicy) Hub added in v0.47.2

func (tr *SecretPolicy) Hub()

Hub marks this type as a conversion hub.

func (*SecretPolicy) LateInitialize

func (tr *SecretPolicy) LateInitialize(attrs []byte) (bool, error)

LateInitialize this SecretPolicy using its observed tfState. returns True if there are any spec changes for the resource.

func (*SecretPolicy) ResolveReferences

func (mg *SecretPolicy) ResolveReferences(ctx context.Context, c client.Reader) error

ResolveReferences of this SecretPolicy.

func (*SecretPolicy) SetConditions

func (mg *SecretPolicy) SetConditions(c ...xpv1.Condition)

SetConditions of this SecretPolicy.

func (*SecretPolicy) SetDeletionPolicy

func (mg *SecretPolicy) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this SecretPolicy.

func (*SecretPolicy) SetManagementPolicies added in v0.38.0

func (mg *SecretPolicy) SetManagementPolicies(r xpv1.ManagementPolicies)

SetManagementPolicies of this SecretPolicy.

func (*SecretPolicy) SetObservation

func (tr *SecretPolicy) SetObservation(obs map[string]any) error

SetObservation for this SecretPolicy

func (*SecretPolicy) SetParameters

func (tr *SecretPolicy) SetParameters(params map[string]any) error

SetParameters for this SecretPolicy

func (*SecretPolicy) SetProviderConfigReference

func (mg *SecretPolicy) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this SecretPolicy.

func (*SecretPolicy) SetPublishConnectionDetailsTo

func (mg *SecretPolicy) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this SecretPolicy.

func (*SecretPolicy) SetWriteConnectionSecretToReference

func (mg *SecretPolicy) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this SecretPolicy.

type SecretPolicyInitParameters added in v0.38.0

type SecretPolicyInitParameters struct {

	// Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret.
	BlockPublicPolicy *bool `json:"blockPublicPolicy,omitempty" tf:"block_public_policy,omitempty"`

	// Valid JSON document representing a resource policy. Unlike aws_secretsmanager_secret, where policy can be set to "{}" to delete the policy, "{}" is not a valid policy since policy is required.
	Policy *string `json:"policy,omitempty" tf:"policy,omitempty"`

	// Secret ARN.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("arn",true)
	SecretArn *string `json:"secretArn,omitempty" tf:"secret_arn,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretArn.
	// +kubebuilder:validation:Optional
	SecretArnRef *v1.Reference `json:"secretArnRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretArn.
	// +kubebuilder:validation:Optional
	SecretArnSelector *v1.Selector `json:"secretArnSelector,omitempty" tf:"-"`
}

func (*SecretPolicyInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicyInitParameters.

func (*SecretPolicyInitParameters) DeepCopyInto added in v0.38.0

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretPolicyList

type SecretPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SecretPolicy `json:"items"`
}

SecretPolicyList contains a list of SecretPolicys

func (*SecretPolicyList) DeepCopy

func (in *SecretPolicyList) DeepCopy() *SecretPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicyList.

func (*SecretPolicyList) DeepCopyInto

func (in *SecretPolicyList) DeepCopyInto(out *SecretPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretPolicyList) DeepCopyObject

func (in *SecretPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretPolicyList) GetItems

func (l *SecretPolicyList) GetItems() []resource.Managed

GetItems of this SecretPolicyList.

type SecretPolicyObservation

type SecretPolicyObservation struct {

	// Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret.
	BlockPublicPolicy *bool `json:"blockPublicPolicy,omitempty" tf:"block_public_policy,omitempty"`

	// Amazon Resource Name (ARN) of the secret.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Valid JSON document representing a resource policy. Unlike aws_secretsmanager_secret, where policy can be set to "{}" to delete the policy, "{}" is not a valid policy since policy is required.
	Policy *string `json:"policy,omitempty" tf:"policy,omitempty"`

	// Secret ARN.
	SecretArn *string `json:"secretArn,omitempty" tf:"secret_arn,omitempty"`
}

func (*SecretPolicyObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicyObservation.

func (*SecretPolicyObservation) DeepCopyInto

func (in *SecretPolicyObservation) DeepCopyInto(out *SecretPolicyObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretPolicyParameters

type SecretPolicyParameters struct {

	// Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret.
	// +kubebuilder:validation:Optional
	BlockPublicPolicy *bool `json:"blockPublicPolicy,omitempty" tf:"block_public_policy,omitempty"`

	// Valid JSON document representing a resource policy. Unlike aws_secretsmanager_secret, where policy can be set to "{}" to delete the policy, "{}" is not a valid policy since policy is required.
	// +kubebuilder:validation:Optional
	Policy *string `json:"policy,omitempty" tf:"policy,omitempty"`

	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Secret ARN.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("arn",true)
	// +kubebuilder:validation:Optional
	SecretArn *string `json:"secretArn,omitempty" tf:"secret_arn,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretArn.
	// +kubebuilder:validation:Optional
	SecretArnRef *v1.Reference `json:"secretArnRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretArn.
	// +kubebuilder:validation:Optional
	SecretArnSelector *v1.Selector `json:"secretArnSelector,omitempty" tf:"-"`
}

func (*SecretPolicyParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicyParameters.

func (*SecretPolicyParameters) DeepCopyInto

func (in *SecretPolicyParameters) DeepCopyInto(out *SecretPolicyParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretPolicySpec

type SecretPolicySpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     SecretPolicyParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider SecretPolicyInitParameters `json:"initProvider,omitempty"`
}

SecretPolicySpec defines the desired state of SecretPolicy

func (*SecretPolicySpec) DeepCopy

func (in *SecretPolicySpec) DeepCopy() *SecretPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicySpec.

func (*SecretPolicySpec) DeepCopyInto

func (in *SecretPolicySpec) DeepCopyInto(out *SecretPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretPolicyStatus

type SecretPolicyStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        SecretPolicyObservation `json:"atProvider,omitempty"`
}

SecretPolicyStatus defines the observed state of SecretPolicy.

func (*SecretPolicyStatus) DeepCopy

func (in *SecretPolicyStatus) DeepCopy() *SecretPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretPolicyStatus.

func (*SecretPolicyStatus) DeepCopyInto

func (in *SecretPolicyStatus) DeepCopyInto(out *SecretPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRotation

type SecretRotation struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.rotationRules) || (has(self.initProvider) && has(self.initProvider.rotationRules))",message="spec.forProvider.rotationRules is a required parameter"
	Spec   SecretRotationSpec   `json:"spec"`
	Status SecretRotationStatus `json:"status,omitempty"`
}

SecretRotation is the Schema for the SecretRotations API. Provides a resource to manage AWS Secrets Manager secret rotation +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,aws}

func (*SecretRotation) DeepCopy

func (in *SecretRotation) DeepCopy() *SecretRotation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotation.

func (*SecretRotation) DeepCopyInto

func (in *SecretRotation) DeepCopyInto(out *SecretRotation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretRotation) DeepCopyObject

func (in *SecretRotation) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretRotation) GetCondition

func (mg *SecretRotation) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this SecretRotation.

func (*SecretRotation) GetConnectionDetailsMapping

func (tr *SecretRotation) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this SecretRotation

func (*SecretRotation) GetDeletionPolicy

func (mg *SecretRotation) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this SecretRotation.

func (*SecretRotation) GetID

func (tr *SecretRotation) GetID() string

GetID returns ID of underlying Terraform resource of this SecretRotation

func (*SecretRotation) GetInitParameters added in v0.38.0

func (tr *SecretRotation) GetInitParameters() (map[string]any, error)

GetInitParameters of this SecretRotation

func (*SecretRotation) GetManagementPolicies added in v0.38.0

func (mg *SecretRotation) GetManagementPolicies() xpv1.ManagementPolicies

GetManagementPolicies of this SecretRotation.

func (*SecretRotation) GetMergedParameters added in v0.44.0

func (tr *SecretRotation) GetMergedParameters(shouldMergeInitProvider bool) (map[string]any, error)

GetInitParameters of this SecretRotation

func (*SecretRotation) GetObservation

func (tr *SecretRotation) GetObservation() (map[string]any, error)

GetObservation of this SecretRotation

func (*SecretRotation) GetParameters

func (tr *SecretRotation) GetParameters() (map[string]any, error)

GetParameters of this SecretRotation

func (*SecretRotation) GetProviderConfigReference

func (mg *SecretRotation) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this SecretRotation.

func (*SecretRotation) GetPublishConnectionDetailsTo

func (mg *SecretRotation) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this SecretRotation.

func (*SecretRotation) GetTerraformResourceType

func (mg *SecretRotation) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this SecretRotation

func (*SecretRotation) GetTerraformSchemaVersion

func (tr *SecretRotation) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*SecretRotation) GetWriteConnectionSecretToReference

func (mg *SecretRotation) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this SecretRotation.

func (*SecretRotation) Hub added in v0.47.2

func (tr *SecretRotation) Hub()

Hub marks this type as a conversion hub.

func (*SecretRotation) LateInitialize

func (tr *SecretRotation) LateInitialize(attrs []byte) (bool, error)

LateInitialize this SecretRotation using its observed tfState. returns True if there are any spec changes for the resource.

func (*SecretRotation) ResolveReferences

func (mg *SecretRotation) ResolveReferences(ctx context.Context, c client.Reader) error

ResolveReferences of this SecretRotation.

func (*SecretRotation) SetConditions

func (mg *SecretRotation) SetConditions(c ...xpv1.Condition)

SetConditions of this SecretRotation.

func (*SecretRotation) SetDeletionPolicy

func (mg *SecretRotation) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this SecretRotation.

func (*SecretRotation) SetManagementPolicies added in v0.38.0

func (mg *SecretRotation) SetManagementPolicies(r xpv1.ManagementPolicies)

SetManagementPolicies of this SecretRotation.

func (*SecretRotation) SetObservation

func (tr *SecretRotation) SetObservation(obs map[string]any) error

SetObservation for this SecretRotation

func (*SecretRotation) SetParameters

func (tr *SecretRotation) SetParameters(params map[string]any) error

SetParameters for this SecretRotation

func (*SecretRotation) SetProviderConfigReference

func (mg *SecretRotation) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this SecretRotation.

func (*SecretRotation) SetPublishConnectionDetailsTo

func (mg *SecretRotation) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this SecretRotation.

func (*SecretRotation) SetWriteConnectionSecretToReference

func (mg *SecretRotation) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this SecretRotation.

type SecretRotationInitParameters added in v0.38.0

type SecretRotationInitParameters struct {

	// Specifies the ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/lambda/v1beta1.Function
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("arn",true)
	RotationLambdaArn *string `json:"rotationLambdaArn,omitempty" tf:"rotation_lambda_arn,omitempty"`

	// Reference to a Function in lambda to populate rotationLambdaArn.
	// +kubebuilder:validation:Optional
	RotationLambdaArnRef *v1.Reference `json:"rotationLambdaArnRef,omitempty" tf:"-"`

	// Selector for a Function in lambda to populate rotationLambdaArn.
	// +kubebuilder:validation:Optional
	RotationLambdaArnSelector *v1.Selector `json:"rotationLambdaArnSelector,omitempty" tf:"-"`

	// A structure that defines the rotation configuration for this secret. Defined below.
	RotationRules []RotationRulesInitParameters `json:"rotationRules,omitempty" tf:"rotation_rules,omitempty"`

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDRef *v1.Reference `json:"secretIdRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDSelector *v1.Selector `json:"secretIdSelector,omitempty" tf:"-"`
}

func (*SecretRotationInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationInitParameters.

func (*SecretRotationInitParameters) DeepCopyInto added in v0.38.0

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRotationList

type SecretRotationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SecretRotation `json:"items"`
}

SecretRotationList contains a list of SecretRotations

func (*SecretRotationList) DeepCopy

func (in *SecretRotationList) DeepCopy() *SecretRotationList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationList.

func (*SecretRotationList) DeepCopyInto

func (in *SecretRotationList) DeepCopyInto(out *SecretRotationList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretRotationList) DeepCopyObject

func (in *SecretRotationList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretRotationList) GetItems

func (l *SecretRotationList) GetItems() []resource.Managed

GetItems of this SecretRotationList.

type SecretRotationObservation

type SecretRotationObservation struct {

	// Amazon Resource Name (ARN) of the secret.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Specifies whether automatic rotation is enabled for this secret.
	RotationEnabled *bool `json:"rotationEnabled,omitempty" tf:"rotation_enabled,omitempty"`

	// Specifies the ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.
	RotationLambdaArn *string `json:"rotationLambdaArn,omitempty" tf:"rotation_lambda_arn,omitempty"`

	// A structure that defines the rotation configuration for this secret. Defined below.
	RotationRules []RotationRulesObservation `json:"rotationRules,omitempty" tf:"rotation_rules,omitempty"`

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`
}

func (*SecretRotationObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationObservation.

func (*SecretRotationObservation) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRotationParameters

type SecretRotationParameters struct {

	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Specifies the ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/lambda/v1beta1.Function
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("arn",true)
	// +kubebuilder:validation:Optional
	RotationLambdaArn *string `json:"rotationLambdaArn,omitempty" tf:"rotation_lambda_arn,omitempty"`

	// Reference to a Function in lambda to populate rotationLambdaArn.
	// +kubebuilder:validation:Optional
	RotationLambdaArnRef *v1.Reference `json:"rotationLambdaArnRef,omitempty" tf:"-"`

	// Selector for a Function in lambda to populate rotationLambdaArn.
	// +kubebuilder:validation:Optional
	RotationLambdaArnSelector *v1.Selector `json:"rotationLambdaArnSelector,omitempty" tf:"-"`

	// A structure that defines the rotation configuration for this secret. Defined below.
	// +kubebuilder:validation:Optional
	RotationRules []RotationRulesParameters `json:"rotationRules,omitempty" tf:"rotation_rules,omitempty"`

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
	// +kubebuilder:validation:Optional
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDRef *v1.Reference `json:"secretIdRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDSelector *v1.Selector `json:"secretIdSelector,omitempty" tf:"-"`
}

func (*SecretRotationParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationParameters.

func (*SecretRotationParameters) DeepCopyInto

func (in *SecretRotationParameters) DeepCopyInto(out *SecretRotationParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRotationSpec

type SecretRotationSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     SecretRotationParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider SecretRotationInitParameters `json:"initProvider,omitempty"`
}

SecretRotationSpec defines the desired state of SecretRotation

func (*SecretRotationSpec) DeepCopy

func (in *SecretRotationSpec) DeepCopy() *SecretRotationSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationSpec.

func (*SecretRotationSpec) DeepCopyInto

func (in *SecretRotationSpec) DeepCopyInto(out *SecretRotationSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRotationStatus

type SecretRotationStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        SecretRotationObservation `json:"atProvider,omitempty"`
}

SecretRotationStatus defines the observed state of SecretRotation.

func (*SecretRotationStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRotationStatus.

func (*SecretRotationStatus) DeepCopyInto

func (in *SecretRotationStatus) DeepCopyInto(out *SecretRotationStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretSpec

type SecretSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     SecretParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider SecretInitParameters `json:"initProvider,omitempty"`
}

SecretSpec defines the desired state of Secret

func (*SecretSpec) DeepCopy

func (in *SecretSpec) DeepCopy() *SecretSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretSpec.

func (*SecretSpec) DeepCopyInto

func (in *SecretSpec) DeepCopyInto(out *SecretSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretStatus

type SecretStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        SecretObservation `json:"atProvider,omitempty"`
}

SecretStatus defines the observed state of Secret.

func (*SecretStatus) DeepCopy

func (in *SecretStatus) DeepCopy() *SecretStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretStatus.

func (*SecretStatus) DeepCopyInto

func (in *SecretStatus) DeepCopyInto(out *SecretStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretVersion

type SecretVersion struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              SecretVersionSpec   `json:"spec"`
	Status            SecretVersionStatus `json:"status,omitempty"`
}

SecretVersion is the Schema for the SecretVersions API. Provides a resource to manage AWS Secrets Manager secret version including its secret value +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,aws}

func (*SecretVersion) DeepCopy

func (in *SecretVersion) DeepCopy() *SecretVersion

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersion.

func (*SecretVersion) DeepCopyInto

func (in *SecretVersion) DeepCopyInto(out *SecretVersion)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretVersion) DeepCopyObject

func (in *SecretVersion) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretVersion) GetCondition

func (mg *SecretVersion) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this SecretVersion.

func (*SecretVersion) GetConnectionDetailsMapping

func (tr *SecretVersion) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this SecretVersion

func (*SecretVersion) GetDeletionPolicy

func (mg *SecretVersion) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this SecretVersion.

func (*SecretVersion) GetID

func (tr *SecretVersion) GetID() string

GetID returns ID of underlying Terraform resource of this SecretVersion

func (*SecretVersion) GetInitParameters added in v0.38.0

func (tr *SecretVersion) GetInitParameters() (map[string]any, error)

GetInitParameters of this SecretVersion

func (*SecretVersion) GetManagementPolicies added in v0.38.0

func (mg *SecretVersion) GetManagementPolicies() xpv1.ManagementPolicies

GetManagementPolicies of this SecretVersion.

func (*SecretVersion) GetMergedParameters added in v0.44.0

func (tr *SecretVersion) GetMergedParameters(shouldMergeInitProvider bool) (map[string]any, error)

GetInitParameters of this SecretVersion

func (*SecretVersion) GetObservation

func (tr *SecretVersion) GetObservation() (map[string]any, error)

GetObservation of this SecretVersion

func (*SecretVersion) GetParameters

func (tr *SecretVersion) GetParameters() (map[string]any, error)

GetParameters of this SecretVersion

func (*SecretVersion) GetProviderConfigReference

func (mg *SecretVersion) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this SecretVersion.

func (*SecretVersion) GetPublishConnectionDetailsTo

func (mg *SecretVersion) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this SecretVersion.

func (*SecretVersion) GetTerraformResourceType

func (mg *SecretVersion) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this SecretVersion

func (*SecretVersion) GetTerraformSchemaVersion

func (tr *SecretVersion) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*SecretVersion) GetWriteConnectionSecretToReference

func (mg *SecretVersion) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this SecretVersion.

func (*SecretVersion) Hub added in v0.47.2

func (tr *SecretVersion) Hub()

Hub marks this type as a conversion hub.

func (*SecretVersion) LateInitialize

func (tr *SecretVersion) LateInitialize(attrs []byte) (bool, error)

LateInitialize this SecretVersion using its observed tfState. returns True if there are any spec changes for the resource.

func (*SecretVersion) ResolveReferences

func (mg *SecretVersion) ResolveReferences(ctx context.Context, c client.Reader) error

ResolveReferences of this SecretVersion.

func (*SecretVersion) SetConditions

func (mg *SecretVersion) SetConditions(c ...xpv1.Condition)

SetConditions of this SecretVersion.

func (*SecretVersion) SetDeletionPolicy

func (mg *SecretVersion) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this SecretVersion.

func (*SecretVersion) SetManagementPolicies added in v0.38.0

func (mg *SecretVersion) SetManagementPolicies(r xpv1.ManagementPolicies)

SetManagementPolicies of this SecretVersion.

func (*SecretVersion) SetObservation

func (tr *SecretVersion) SetObservation(obs map[string]any) error

SetObservation for this SecretVersion

func (*SecretVersion) SetParameters

func (tr *SecretVersion) SetParameters(params map[string]any) error

SetParameters for this SecretVersion

func (*SecretVersion) SetProviderConfigReference

func (mg *SecretVersion) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this SecretVersion.

func (*SecretVersion) SetPublishConnectionDetailsTo

func (mg *SecretVersion) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this SecretVersion.

func (*SecretVersion) SetWriteConnectionSecretToReference

func (mg *SecretVersion) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this SecretVersion.

type SecretVersionInitParameters added in v0.38.0

type SecretVersionInitParameters struct {

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDRef *v1.Reference `json:"secretIdRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDSelector *v1.Selector `json:"secretIdSelector,omitempty" tf:"-"`

	// Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label AWSCURRENT to this new version on creation.
	// +listType=set
	VersionStages []*string `json:"versionStages,omitempty" tf:"version_stages,omitempty"`
}

func (*SecretVersionInitParameters) DeepCopy added in v0.38.0

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionInitParameters.

func (*SecretVersionInitParameters) DeepCopyInto added in v0.38.0

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretVersionList

type SecretVersionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SecretVersion `json:"items"`
}

SecretVersionList contains a list of SecretVersions

func (*SecretVersionList) DeepCopy

func (in *SecretVersionList) DeepCopy() *SecretVersionList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionList.

func (*SecretVersionList) DeepCopyInto

func (in *SecretVersionList) DeepCopyInto(out *SecretVersionList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecretVersionList) DeepCopyObject

func (in *SecretVersionList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SecretVersionList) GetItems

func (l *SecretVersionList) GetItems() []resource.Managed

GetItems of this SecretVersionList.

type SecretVersionObservation

type SecretVersionObservation struct {

	// The ARN of the secret.
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// A pipe delimited combination of secret ID and version ID.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`

	// The unique identifier of the version of the secret.
	VersionID *string `json:"versionId,omitempty" tf:"version_id,omitempty"`

	// Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label AWSCURRENT to this new version on creation.
	// +listType=set
	VersionStages []*string `json:"versionStages,omitempty" tf:"version_stages,omitempty"`
}

func (*SecretVersionObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionObservation.

func (*SecretVersionObservation) DeepCopyInto

func (in *SecretVersionObservation) DeepCopyInto(out *SecretVersionObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretVersionParameters

type SecretVersionParameters struct {

	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Specifies binary data that you want to encrypt and store in this version of the secret. This is required if secret_string is not set. Needs to be encoded to base64.
	// +kubebuilder:validation:Optional
	SecretBinarySecretRef *v1.SecretKeySelector `json:"secretBinarySecretRef,omitempty" tf:"-"`

	// Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/secretsmanager/v1beta1.Secret
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID()
	// +kubebuilder:validation:Optional
	SecretID *string `json:"secretId,omitempty" tf:"secret_id,omitempty"`

	// Reference to a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDRef *v1.Reference `json:"secretIdRef,omitempty" tf:"-"`

	// Selector for a Secret in secretsmanager to populate secretId.
	// +kubebuilder:validation:Optional
	SecretIDSelector *v1.Selector `json:"secretIdSelector,omitempty" tf:"-"`

	// Specifies text data that you want to encrypt and store in this version of the secret. This is required if secret_binary is not set.
	// +kubebuilder:validation:Optional
	SecretStringSecretRef *v1.SecretKeySelector `json:"secretStringSecretRef,omitempty" tf:"-"`

	// Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label AWSCURRENT to this new version on creation.
	// +kubebuilder:validation:Optional
	// +listType=set
	VersionStages []*string `json:"versionStages,omitempty" tf:"version_stages,omitempty"`
}

func (*SecretVersionParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionParameters.

func (*SecretVersionParameters) DeepCopyInto

func (in *SecretVersionParameters) DeepCopyInto(out *SecretVersionParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretVersionSpec

type SecretVersionSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     SecretVersionParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider SecretVersionInitParameters `json:"initProvider,omitempty"`
}

SecretVersionSpec defines the desired state of SecretVersion

func (*SecretVersionSpec) DeepCopy

func (in *SecretVersionSpec) DeepCopy() *SecretVersionSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionSpec.

func (*SecretVersionSpec) DeepCopyInto

func (in *SecretVersionSpec) DeepCopyInto(out *SecretVersionSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretVersionStatus

type SecretVersionStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        SecretVersionObservation `json:"atProvider,omitempty"`
}

SecretVersionStatus defines the observed state of SecretVersion.

func (*SecretVersionStatus) DeepCopy

func (in *SecretVersionStatus) DeepCopy() *SecretVersionStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretVersionStatus.

func (*SecretVersionStatus) DeepCopyInto

func (in *SecretVersionStatus) DeepCopyInto(out *SecretVersionStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL