v1alpha1

package
v0.0.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 28, 2023 License: Apache-2.0 Imports: 13 Imported by: 0

Documentation

Overview

+kubebuilder:object:generate=true +groupName=keyvault.azure.kubeform.com +versionName=v1alpha1

Index

Constants

View Source
const (
	CRDGroup   = "keyvault.azure.kubeform.com"
	CRDVersion = "v1alpha1"
)

Package type metadata.

Variables

View Source
var (
	// CRDGroupVersion is the API Group Version used to register the objects
	CRDGroupVersion = schema.GroupVersion{Group: CRDGroup, Version: CRDVersion}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: CRDGroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)
View Source
var (
	Key_Kind             = "Key"
	Key_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: Key_Kind}.String()
	Key_KindAPIVersion   = Key_Kind + "." + CRDGroupVersion.String()
	Key_GroupVersionKind = CRDGroupVersion.WithKind(Key_Kind)
)

Repository type metadata.

View Source
var (
	Vault_Kind             = "Vault"
	Vault_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: Vault_Kind}.String()
	Vault_KindAPIVersion   = Vault_Kind + "." + CRDGroupVersion.String()
	Vault_GroupVersionKind = CRDGroupVersion.WithKind(Vault_Kind)
)

Repository type metadata.

Functions

This section is empty.

Types

type AccessPolicyObservation

type AccessPolicyObservation struct {

	// The object ID of an Application in Azure Active Directory.
	ApplicationID *string `json:"applicationId,omitempty" tf:"application_id,omitempty"`

	// List of certificate permissions, must be one or more from the following: Backup, Create, Delete, DeleteIssuers, Get, GetIssuers, Import, List, ListIssuers, ManageContacts, ManageIssuers, Purge, Recover, Restore, SetIssuers and Update.
	CertificatePermissions []*string `json:"certificatePermissions,omitempty" tf:"certificate_permissions,omitempty"`

	// List of key permissions. Possible values are Backup, Create, Decrypt, Delete, Encrypt, Get, Import, List, Purge, Recover, Restore, Sign, UnwrapKey, Update, Verify, WrapKey, Release, Rotate, GetRotationPolicy and SetRotationPolicy.
	KeyPermissions []*string `json:"keyPermissions,omitempty" tf:"key_permissions,omitempty"`

	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
	ObjectID *string `json:"objectId,omitempty" tf:"object_id,omitempty"`

	// List of secret permissions, must be one or more from the following: Backup, Delete, Get, List, Purge, Recover, Restore and Set.
	SecretPermissions []*string `json:"secretPermissions,omitempty" tf:"secret_permissions,omitempty"`

	// List of storage permissions, must be one or more from the following: Backup, Delete, DeleteSAS, Get, GetSAS, List, ListSAS, Purge, Recover, RegenerateKey, Restore, Set, SetSAS and Update.
	StoragePermissions []*string `json:"storagePermissions,omitempty" tf:"storage_permissions,omitempty"`

	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the tenant_id used above.
	TenantID *string `json:"tenantId,omitempty" tf:"tenant_id,omitempty"`
}

func (*AccessPolicyObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessPolicyObservation.

func (*AccessPolicyObservation) DeepCopyInto

func (in *AccessPolicyObservation) DeepCopyInto(out *AccessPolicyObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AccessPolicyParameters

type AccessPolicyParameters struct {
}

func (*AccessPolicyParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessPolicyParameters.

func (*AccessPolicyParameters) DeepCopyInto

func (in *AccessPolicyParameters) DeepCopyInto(out *AccessPolicyParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AutomaticObservation

type AutomaticObservation struct {

	// Rotate automatically at a duration after create as an ISO 8601 duration.
	TimeAfterCreation *string `json:"timeAfterCreation,omitempty" tf:"time_after_creation,omitempty"`

	// Rotate automatically at a duration before expiry as an ISO 8601 duration.
	TimeBeforeExpiry *string `json:"timeBeforeExpiry,omitempty" tf:"time_before_expiry,omitempty"`
}

func (*AutomaticObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AutomaticObservation.

func (*AutomaticObservation) DeepCopyInto

func (in *AutomaticObservation) DeepCopyInto(out *AutomaticObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AutomaticParameters

type AutomaticParameters struct {

	// Rotate automatically at a duration after create as an ISO 8601 duration.
	// +kubebuilder:validation:Optional
	TimeAfterCreation *string `json:"timeAfterCreation,omitempty" tf:"time_after_creation,omitempty"`

	// Rotate automatically at a duration before expiry as an ISO 8601 duration.
	// +kubebuilder:validation:Optional
	TimeBeforeExpiry *string `json:"timeBeforeExpiry,omitempty" tf:"time_before_expiry,omitempty"`
}

func (*AutomaticParameters) DeepCopy

func (in *AutomaticParameters) DeepCopy() *AutomaticParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AutomaticParameters.

func (*AutomaticParameters) DeepCopyInto

func (in *AutomaticParameters) DeepCopyInto(out *AutomaticParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ContactObservation

type ContactObservation struct {

	// E-mail address of the contact.
	Email *string `json:"email,omitempty" tf:"email,omitempty"`

	// Name of the contact.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Phone number of the contact.
	Phone *string `json:"phone,omitempty" tf:"phone,omitempty"`
}

func (*ContactObservation) DeepCopy

func (in *ContactObservation) DeepCopy() *ContactObservation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ContactObservation.

func (*ContactObservation) DeepCopyInto

func (in *ContactObservation) DeepCopyInto(out *ContactObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ContactParameters

type ContactParameters struct {

	// E-mail address of the contact.
	// +kubebuilder:validation:Required
	Email *string `json:"email" tf:"email,omitempty"`

	// Name of the contact.
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Phone number of the contact.
	// +kubebuilder:validation:Optional
	Phone *string `json:"phone,omitempty" tf:"phone,omitempty"`
}

func (*ContactParameters) DeepCopy

func (in *ContactParameters) DeepCopy() *ContactParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ContactParameters.

func (*ContactParameters) DeepCopyInto

func (in *ContactParameters) DeepCopyInto(out *ContactParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Key

type Key struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.keyOpts)",message="keyOpts is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.keyType)",message="keyType is a required parameter"
	Spec   KeySpec   `json:"spec"`
	Status KeyStatus `json:"status,omitempty"`
}

Key is the Schema for the Keys API. Manages a Key Vault Key. +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:subresource:status +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,azure}

func (*Key) DeepCopy

func (in *Key) DeepCopy() *Key

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Key.

func (*Key) DeepCopyInto

func (in *Key) DeepCopyInto(out *Key)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Key) DeepCopyObject

func (in *Key) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Key) GetCondition

func (mg *Key) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this Key.

func (*Key) GetConnectionDetailsMapping

func (tr *Key) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this Key

func (*Key) GetDeletionPolicy

func (mg *Key) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this Key.

func (*Key) GetID

func (tr *Key) GetID() string

GetID returns ID of underlying Terraform resource of this Key

func (*Key) GetManagementPolicy

func (mg *Key) GetManagementPolicy() xpv1.ManagementPolicy

GetManagementPolicy of this Key.

func (*Key) GetObservation

func (tr *Key) GetObservation() (map[string]any, error)

GetObservation of this Key

func (*Key) GetParameters

func (tr *Key) GetParameters() (map[string]any, error)

GetParameters of this Key

func (*Key) GetProviderConfigReference

func (mg *Key) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this Key.

func (*Key) GetProviderReference

func (mg *Key) GetProviderReference() *xpv1.Reference

GetProviderReference of this Key. Deprecated: Use GetProviderConfigReference.

func (*Key) GetPublishConnectionDetailsTo

func (mg *Key) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this Key.

func (*Key) GetTerraformResourceType

func (mg *Key) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this Key

func (*Key) GetTerraformSchemaVersion

func (tr *Key) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*Key) GetWriteConnectionSecretToReference

func (mg *Key) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this Key.

func (*Key) LateInitialize

func (tr *Key) LateInitialize(attrs []byte) (bool, error)

LateInitialize this Key using its observed tfState. returns True if there are any spec changes for the resource.

func (*Key) ResolveReferences

func (mg *Key) ResolveReferences(ctx context.Context, c client.Reader) error

ResolveReferences of this Key.

func (*Key) SetConditions

func (mg *Key) SetConditions(c ...xpv1.Condition)

SetConditions of this Key.

func (*Key) SetDeletionPolicy

func (mg *Key) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this Key.

func (*Key) SetManagementPolicy

func (mg *Key) SetManagementPolicy(r xpv1.ManagementPolicy)

SetManagementPolicy of this Key.

func (*Key) SetObservation

func (tr *Key) SetObservation(obs map[string]any) error

SetObservation for this Key

func (*Key) SetParameters

func (tr *Key) SetParameters(params map[string]any) error

SetParameters for this Key

func (*Key) SetProviderConfigReference

func (mg *Key) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this Key.

func (*Key) SetProviderReference

func (mg *Key) SetProviderReference(r *xpv1.Reference)

SetProviderReference of this Key. Deprecated: Use SetProviderConfigReference.

func (*Key) SetPublishConnectionDetailsTo

func (mg *Key) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this Key.

func (*Key) SetWriteConnectionSecretToReference

func (mg *Key) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this Key.

type KeyList

type KeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Key `json:"items"`
}

KeyList contains a list of Keys

func (*KeyList) DeepCopy

func (in *KeyList) DeepCopy() *KeyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyList.

func (*KeyList) DeepCopyInto

func (in *KeyList) DeepCopyInto(out *KeyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*KeyList) DeepCopyObject

func (in *KeyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*KeyList) GetItems

func (l *KeyList) GetItems() []resource.Managed

GetItems of this KeyList.

type KeyObservation

type KeyObservation struct {

	// Specifies the curve to use when creating an EC key. Possible values are P-256, P-256K, P-384, and P-521. This field will be required in a future release if key_type is EC or EC-HSM. The API will default to P-256 if nothing is specified. Changing this forces a new resource to be created.
	Curve *string `json:"curve,omitempty" tf:"curve,omitempty"`

	// The RSA public exponent of this Key Vault Key.
	E *string `json:"e,omitempty" tf:"e,omitempty"`

	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate *string `json:"expirationDate,omitempty" tf:"expiration_date,omitempty"`

	// The Key Vault Key ID.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// A list of JSON web key operations. Possible values include: decrypt, encrypt, sign, unwrapKey, verify and wrapKey. Please note these values are case sensitive.
	KeyOpts []*string `json:"keyOpts,omitempty" tf:"key_opts,omitempty"`

	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. Note: This field is required if key_type is RSA or RSA-HSM. Changing this forces a new resource to be created.
	KeySize *float64 `json:"keySize,omitempty" tf:"key_size,omitempty"`

	// Specifies the Key Type to use for this Key Vault Key. Possible values are EC (Elliptic Curve), EC-HSM, RSA and RSA-HSM. Changing this forces a new resource to be created.
	KeyType *string `json:"keyType,omitempty" tf:"key_type,omitempty"`

	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultID *string `json:"keyVaultId,omitempty" tf:"key_vault_id,omitempty"`

	// The RSA modulus of this Key Vault Key.
	N *string `json:"n,omitempty" tf:"n,omitempty"`

	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate *string `json:"notBeforeDate,omitempty" tf:"not_before_date,omitempty"`

	// The OpenSSH encoded public key of this Key Vault Key.
	PublicKeyOpenssh *string `json:"publicKeyOpenssh,omitempty" tf:"public_key_openssh,omitempty"`

	// The PEM encoded public key of this Key Vault Key.
	PublicKeyPem *string `json:"publicKeyPem,omitempty" tf:"public_key_pem,omitempty"`

	// The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceID *string `json:"resourceId,omitempty" tf:"resource_id,omitempty"`

	// The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.
	ResourceVersionlessID *string `json:"resourceVersionlessId,omitempty" tf:"resource_versionless_id,omitempty"`

	// A rotation_policy block as defined below.
	RotationPolicy []RotationPolicyObservation `json:"rotationPolicy,omitempty" tf:"rotation_policy,omitempty"`

	// A mapping of tags to assign to the resource.
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// The current version of the Key Vault Key.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`

	// The Base ID of the Key Vault Key.
	VersionlessID *string `json:"versionlessId,omitempty" tf:"versionless_id,omitempty"`

	// The EC X component of this Key Vault Key.
	X *string `json:"x,omitempty" tf:"x,omitempty"`

	// The EC Y component of this Key Vault Key.
	Y *string `json:"y,omitempty" tf:"y,omitempty"`
}

func (*KeyObservation) DeepCopy

func (in *KeyObservation) DeepCopy() *KeyObservation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyObservation.

func (*KeyObservation) DeepCopyInto

func (in *KeyObservation) DeepCopyInto(out *KeyObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KeyParameters

type KeyParameters struct {

	// Specifies the curve to use when creating an EC key. Possible values are P-256, P-256K, P-384, and P-521. This field will be required in a future release if key_type is EC or EC-HSM. The API will default to P-256 if nothing is specified. Changing this forces a new resource to be created.
	// +kubebuilder:validation:Optional
	Curve *string `json:"curve,omitempty" tf:"curve,omitempty"`

	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	// +kubebuilder:validation:Optional
	ExpirationDate *string `json:"expirationDate,omitempty" tf:"expiration_date,omitempty"`

	// A list of JSON web key operations. Possible values include: decrypt, encrypt, sign, unwrapKey, verify and wrapKey. Please note these values are case sensitive.
	// +kubebuilder:validation:Optional
	KeyOpts []*string `json:"keyOpts,omitempty" tf:"key_opts,omitempty"`

	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. Note: This field is required if key_type is RSA or RSA-HSM. Changing this forces a new resource to be created.
	// +kubebuilder:validation:Optional
	KeySize *float64 `json:"keySize,omitempty" tf:"key_size,omitempty"`

	// Specifies the Key Type to use for this Key Vault Key. Possible values are EC (Elliptic Curve), EC-HSM, RSA and RSA-HSM. Changing this forces a new resource to be created.
	// +kubebuilder:validation:Optional
	KeyType *string `json:"keyType,omitempty" tf:"key_type,omitempty"`

	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	// +crossplane:generate:reference:type=Vault
	// +crossplane:generate:reference:extractor=kubeform.dev/provider-azure/apis/rconfig.ExtractResourceID()
	// +kubebuilder:validation:Optional
	KeyVaultID *string `json:"keyVaultId,omitempty" tf:"key_vault_id,omitempty"`

	// Reference to a Vault to populate keyVaultId.
	// +kubebuilder:validation:Optional
	KeyVaultIDRef *v1.Reference `json:"keyVaultIdRef,omitempty" tf:"-"`

	// Selector for a Vault to populate keyVaultId.
	// +kubebuilder:validation:Optional
	KeyVaultIDSelector *v1.Selector `json:"keyVaultIdSelector,omitempty" tf:"-"`

	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	// +kubebuilder:validation:Optional
	NotBeforeDate *string `json:"notBeforeDate,omitempty" tf:"not_before_date,omitempty"`

	// A rotation_policy block as defined below.
	// +kubebuilder:validation:Optional
	RotationPolicy []RotationPolicyParameters `json:"rotationPolicy,omitempty" tf:"rotation_policy,omitempty"`

	// A mapping of tags to assign to the resource.
	// +kubebuilder:validation:Optional
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}

func (*KeyParameters) DeepCopy

func (in *KeyParameters) DeepCopy() *KeyParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyParameters.

func (*KeyParameters) DeepCopyInto

func (in *KeyParameters) DeepCopyInto(out *KeyParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KeySpec

type KeySpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     KeyParameters `json:"forProvider"`
}

KeySpec defines the desired state of Key

func (*KeySpec) DeepCopy

func (in *KeySpec) DeepCopy() *KeySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeySpec.

func (*KeySpec) DeepCopyInto

func (in *KeySpec) DeepCopyInto(out *KeySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KeyStatus

type KeyStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        KeyObservation `json:"atProvider,omitempty"`
}

KeyStatus defines the observed state of Key.

func (*KeyStatus) DeepCopy

func (in *KeyStatus) DeepCopy() *KeyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyStatus.

func (*KeyStatus) DeepCopyInto

func (in *KeyStatus) DeepCopyInto(out *KeyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NetworkAclsObservation

type NetworkAclsObservation struct {

	// Specifies which traffic can bypass the network rules. Possible values are AzureServices and None.
	Bypass *string `json:"bypass,omitempty" tf:"bypass,omitempty"`

	// The Default Action to use when no rules match from ip_rules / virtual_network_subnet_ids. Possible values are Allow and Deny.
	DefaultAction *string `json:"defaultAction,omitempty" tf:"default_action,omitempty"`

	// One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
	IPRules []*string `json:"ipRules,omitempty" tf:"ip_rules,omitempty"`

	// One or more Subnet IDs which should be able to access this Key Vault.
	VirtualNetworkSubnetIds []*string `json:"virtualNetworkSubnetIds,omitempty" tf:"virtual_network_subnet_ids,omitempty"`
}

func (*NetworkAclsObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkAclsObservation.

func (*NetworkAclsObservation) DeepCopyInto

func (in *NetworkAclsObservation) DeepCopyInto(out *NetworkAclsObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NetworkAclsParameters

type NetworkAclsParameters struct {

	// Specifies which traffic can bypass the network rules. Possible values are AzureServices and None.
	// +kubebuilder:validation:Required
	Bypass *string `json:"bypass" tf:"bypass,omitempty"`

	// The Default Action to use when no rules match from ip_rules / virtual_network_subnet_ids. Possible values are Allow and Deny.
	// +kubebuilder:validation:Required
	DefaultAction *string `json:"defaultAction" tf:"default_action,omitempty"`

	// One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
	// +kubebuilder:validation:Optional
	IPRules []*string `json:"ipRules,omitempty" tf:"ip_rules,omitempty"`

	// One or more Subnet IDs which should be able to access this Key Vault.
	// +kubebuilder:validation:Optional
	VirtualNetworkSubnetIds []*string `json:"virtualNetworkSubnetIds,omitempty" tf:"virtual_network_subnet_ids,omitempty"`
}

func (*NetworkAclsParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkAclsParameters.

func (*NetworkAclsParameters) DeepCopyInto

func (in *NetworkAclsParameters) DeepCopyInto(out *NetworkAclsParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RotationPolicyObservation

type RotationPolicyObservation struct {

	// An automatic block as defined below.
	Automatic []AutomaticObservation `json:"automatic,omitempty" tf:"automatic,omitempty"`

	// Expire a Key Vault Key after given duration as an ISO 8601 duration.
	ExpireAfter *string `json:"expireAfter,omitempty" tf:"expire_after,omitempty"`

	// Notify at a given duration before expiry as an ISO 8601 duration. Default is P30D.
	NotifyBeforeExpiry *string `json:"notifyBeforeExpiry,omitempty" tf:"notify_before_expiry,omitempty"`
}

func (*RotationPolicyObservation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotationPolicyObservation.

func (*RotationPolicyObservation) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RotationPolicyParameters

type RotationPolicyParameters struct {

	// An automatic block as defined below.
	// +kubebuilder:validation:Optional
	Automatic []AutomaticParameters `json:"automatic,omitempty" tf:"automatic,omitempty"`

	// Expire a Key Vault Key after given duration as an ISO 8601 duration.
	// +kubebuilder:validation:Optional
	ExpireAfter *string `json:"expireAfter,omitempty" tf:"expire_after,omitempty"`

	// Notify at a given duration before expiry as an ISO 8601 duration. Default is P30D.
	// +kubebuilder:validation:Optional
	NotifyBeforeExpiry *string `json:"notifyBeforeExpiry,omitempty" tf:"notify_before_expiry,omitempty"`
}

func (*RotationPolicyParameters) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotationPolicyParameters.

func (*RotationPolicyParameters) DeepCopyInto

func (in *RotationPolicyParameters) DeepCopyInto(out *RotationPolicyParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Vault

type Vault struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.location)",message="location is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.skuName)",message="skuName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.tenantId)",message="tenantId is a required parameter"
	Spec   VaultSpec   `json:"spec"`
	Status VaultStatus `json:"status,omitempty"`
}

Vault is the Schema for the Vaults API. Manages a Key Vault. +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +kubebuilder:subresource:status +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,azure}

func (*Vault) DeepCopy

func (in *Vault) DeepCopy() *Vault

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Vault.

func (*Vault) DeepCopyInto

func (in *Vault) DeepCopyInto(out *Vault)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Vault) DeepCopyObject

func (in *Vault) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Vault) GetCondition

func (mg *Vault) GetCondition(ct xpv1.ConditionType) xpv1.Condition

GetCondition of this Vault.

func (*Vault) GetConnectionDetailsMapping

func (tr *Vault) GetConnectionDetailsMapping() map[string]string

GetConnectionDetailsMapping for this Vault

func (*Vault) GetDeletionPolicy

func (mg *Vault) GetDeletionPolicy() xpv1.DeletionPolicy

GetDeletionPolicy of this Vault.

func (*Vault) GetID

func (tr *Vault) GetID() string

GetID returns ID of underlying Terraform resource of this Vault

func (*Vault) GetManagementPolicy

func (mg *Vault) GetManagementPolicy() xpv1.ManagementPolicy

GetManagementPolicy of this Vault.

func (*Vault) GetObservation

func (tr *Vault) GetObservation() (map[string]any, error)

GetObservation of this Vault

func (*Vault) GetParameters

func (tr *Vault) GetParameters() (map[string]any, error)

GetParameters of this Vault

func (*Vault) GetProviderConfigReference

func (mg *Vault) GetProviderConfigReference() *xpv1.Reference

GetProviderConfigReference of this Vault.

func (*Vault) GetProviderReference

func (mg *Vault) GetProviderReference() *xpv1.Reference

GetProviderReference of this Vault. Deprecated: Use GetProviderConfigReference.

func (*Vault) GetPublishConnectionDetailsTo

func (mg *Vault) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo

GetPublishConnectionDetailsTo of this Vault.

func (*Vault) GetTerraformResourceType

func (mg *Vault) GetTerraformResourceType() string

GetTerraformResourceType returns Terraform resource type for this Vault

func (*Vault) GetTerraformSchemaVersion

func (tr *Vault) GetTerraformSchemaVersion() int

GetTerraformSchemaVersion returns the associated Terraform schema version

func (*Vault) GetWriteConnectionSecretToReference

func (mg *Vault) GetWriteConnectionSecretToReference() *xpv1.SecretReference

GetWriteConnectionSecretToReference of this Vault.

func (*Vault) LateInitialize

func (tr *Vault) LateInitialize(attrs []byte) (bool, error)

LateInitialize this Vault using its observed tfState. returns True if there are any spec changes for the resource.

func (*Vault) SetConditions

func (mg *Vault) SetConditions(c ...xpv1.Condition)

SetConditions of this Vault.

func (*Vault) SetDeletionPolicy

func (mg *Vault) SetDeletionPolicy(r xpv1.DeletionPolicy)

SetDeletionPolicy of this Vault.

func (*Vault) SetManagementPolicy

func (mg *Vault) SetManagementPolicy(r xpv1.ManagementPolicy)

SetManagementPolicy of this Vault.

func (*Vault) SetObservation

func (tr *Vault) SetObservation(obs map[string]any) error

SetObservation for this Vault

func (*Vault) SetParameters

func (tr *Vault) SetParameters(params map[string]any) error

SetParameters for this Vault

func (*Vault) SetProviderConfigReference

func (mg *Vault) SetProviderConfigReference(r *xpv1.Reference)

SetProviderConfigReference of this Vault.

func (*Vault) SetProviderReference

func (mg *Vault) SetProviderReference(r *xpv1.Reference)

SetProviderReference of this Vault. Deprecated: Use SetProviderConfigReference.

func (*Vault) SetPublishConnectionDetailsTo

func (mg *Vault) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo)

SetPublishConnectionDetailsTo of this Vault.

func (*Vault) SetWriteConnectionSecretToReference

func (mg *Vault) SetWriteConnectionSecretToReference(r *xpv1.SecretReference)

SetWriteConnectionSecretToReference of this Vault.

type VaultList

type VaultList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Vault `json:"items"`
}

VaultList contains a list of Vaults

func (*VaultList) DeepCopy

func (in *VaultList) DeepCopy() *VaultList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultList.

func (*VaultList) DeepCopyInto

func (in *VaultList) DeepCopyInto(out *VaultList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*VaultList) DeepCopyObject

func (in *VaultList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*VaultList) GetItems

func (l *VaultList) GetItems() []resource.Managed

GetItems of this VaultList.

type VaultObservation

type VaultObservation struct {

	// A list of up to 1024 objects describing access policies, as described below.
	AccessPolicy []AccessPolicyObservation `json:"accessPolicy,omitempty" tf:"access_policy,omitempty"`

	// One or more contact block as defined below.
	Contact []ContactObservation `json:"contact,omitempty" tf:"contact,omitempty"`

	// Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.
	EnableRbacAuthorization *bool `json:"enableRbacAuthorization,omitempty" tf:"enable_rbac_authorization,omitempty"`

	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
	EnabledForDeployment *bool `json:"enabledForDeployment,omitempty" tf:"enabled_for_deployment,omitempty"`

	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
	EnabledForDiskEncryption *bool `json:"enabledForDiskEncryption,omitempty" tf:"enabled_for_disk_encryption,omitempty"`

	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
	EnabledForTemplateDeployment *bool `json:"enabledForTemplateDeployment,omitempty" tf:"enabled_for_template_deployment,omitempty"`

	// The ID of the Key Vault.
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location *string `json:"location,omitempty" tf:"location,omitempty"`

	// A network_acls block as defined below.
	NetworkAcls []NetworkAclsObservation `json:"networkAcls,omitempty" tf:"network_acls,omitempty"`

	// Whether public network access is allowed for this Key Vault. Defaults to true.
	PublicNetworkAccessEnabled *bool `json:"publicNetworkAccessEnabled,omitempty" tf:"public_network_access_enabled,omitempty"`

	// Is Purge Protection enabled for this Key Vault?
	PurgeProtectionEnabled *bool `json:"purgeProtectionEnabled,omitempty" tf:"purge_protection_enabled,omitempty"`

	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	ResourceGroupName *string `json:"resourceGroupName,omitempty" tf:"resource_group_name,omitempty"`

	// The Name of the SKU used for this Key Vault. Possible values are standard and premium.
	SkuName *string `json:"skuName,omitempty" tf:"sku_name,omitempty"`

	// The number of days that items should be retained for once soft-deleted. This value can be between 7 and 90 (the default) days.
	SoftDeleteRetentionDays *float64 `json:"softDeleteRetentionDays,omitempty" tf:"soft_delete_retention_days,omitempty"`

	// A mapping of tags to assign to the resource.
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	TenantID *string `json:"tenantId,omitempty" tf:"tenant_id,omitempty"`

	// The URI of the Key Vault, used for performing operations on keys and secrets.
	VaultURI *string `json:"vaultUri,omitempty" tf:"vault_uri,omitempty"`
}

func (*VaultObservation) DeepCopy

func (in *VaultObservation) DeepCopy() *VaultObservation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultObservation.

func (*VaultObservation) DeepCopyInto

func (in *VaultObservation) DeepCopyInto(out *VaultObservation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type VaultParameters

type VaultParameters struct {

	// One or more contact block as defined below.
	// +kubebuilder:validation:Optional
	Contact []ContactParameters `json:"contact,omitempty" tf:"contact,omitempty"`

	// Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.
	// +kubebuilder:validation:Optional
	EnableRbacAuthorization *bool `json:"enableRbacAuthorization,omitempty" tf:"enable_rbac_authorization,omitempty"`

	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
	// +kubebuilder:validation:Optional
	EnabledForDeployment *bool `json:"enabledForDeployment,omitempty" tf:"enabled_for_deployment,omitempty"`

	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
	// +kubebuilder:validation:Optional
	EnabledForDiskEncryption *bool `json:"enabledForDiskEncryption,omitempty" tf:"enabled_for_disk_encryption,omitempty"`

	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
	// +kubebuilder:validation:Optional
	EnabledForTemplateDeployment *bool `json:"enabledForTemplateDeployment,omitempty" tf:"enabled_for_template_deployment,omitempty"`

	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	// +kubebuilder:validation:Optional
	Location *string `json:"location,omitempty" tf:"location,omitempty"`

	// A network_acls block as defined below.
	// +kubebuilder:validation:Optional
	NetworkAcls []NetworkAclsParameters `json:"networkAcls,omitempty" tf:"network_acls,omitempty"`

	// Whether public network access is allowed for this Key Vault. Defaults to true.
	// +kubebuilder:validation:Optional
	PublicNetworkAccessEnabled *bool `json:"publicNetworkAccessEnabled,omitempty" tf:"public_network_access_enabled,omitempty"`

	// Is Purge Protection enabled for this Key Vault?
	// +kubebuilder:validation:Optional
	PurgeProtectionEnabled *bool `json:"purgeProtectionEnabled,omitempty" tf:"purge_protection_enabled,omitempty"`

	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	// +kubebuilder:validation:Required
	ResourceGroupName *string `json:"resourceGroupName" tf:"resource_group_name,omitempty"`

	// The Name of the SKU used for this Key Vault. Possible values are standard and premium.
	// +kubebuilder:validation:Optional
	SkuName *string `json:"skuName,omitempty" tf:"sku_name,omitempty"`

	// The number of days that items should be retained for once soft-deleted. This value can be between 7 and 90 (the default) days.
	// +kubebuilder:validation:Optional
	SoftDeleteRetentionDays *float64 `json:"softDeleteRetentionDays,omitempty" tf:"soft_delete_retention_days,omitempty"`

	// A mapping of tags to assign to the resource.
	// +kubebuilder:validation:Optional
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	// +kubebuilder:validation:Optional
	TenantID *string `json:"tenantId,omitempty" tf:"tenant_id,omitempty"`
}

func (*VaultParameters) DeepCopy

func (in *VaultParameters) DeepCopy() *VaultParameters

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultParameters.

func (*VaultParameters) DeepCopyInto

func (in *VaultParameters) DeepCopyInto(out *VaultParameters)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type VaultSpec

type VaultSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     VaultParameters `json:"forProvider"`
}

VaultSpec defines the desired state of Vault

func (*VaultSpec) DeepCopy

func (in *VaultSpec) DeepCopy() *VaultSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultSpec.

func (*VaultSpec) DeepCopyInto

func (in *VaultSpec) DeepCopyInto(out *VaultSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type VaultStatus

type VaultStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        VaultObservation `json:"atProvider,omitempty"`
}

VaultStatus defines the observed state of Vault.

func (*VaultStatus) DeepCopy

func (in *VaultStatus) DeepCopy() *VaultStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultStatus.

func (*VaultStatus) DeepCopyInto

func (in *VaultStatus) DeepCopyInto(out *VaultStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL