--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.8.0 creationTimestamp: null name: serviceaccountkeys.iam.gcp.crossplane.io spec: group: iam.gcp.crossplane.io names: categories: - crossplane - managed - gcp kind: ServiceAccountKey listKind: ServiceAccountKeyList plural: serviceaccountkeys singular: serviceaccountkey scope: Cluster versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=='Ready')].status name: READY type: string - jsonPath: .status.conditions[?(@.type=='Synced')].status name: SYNCED type: string - jsonPath: .status.atProvider.keyId name: KEY_ID type: string - jsonPath: .status.atProvider.validAfterTime name: CREATED_AT type: string - jsonPath: .status.atProvider.validBeforeTime name: EXPIRES_AT type: boolean name: v1alpha1 schema: openAPIV3Schema: description: ServiceAccountKey is a managed resource that represents a Google IAM Service Account Key. properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' type: string kind: description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' type: string metadata: type: object spec: description: ServiceAccountKeySpec defines the desired state of a ServiceAccountKey. properties: deletionPolicy: default: Delete description: DeletionPolicy specifies what will happen to the underlying external when this managed resource is deleted - either "Delete" or "Orphan" the external resource. enum: - Orphan - Delete type: string forProvider: description: ServiceAccountKeyParameters defines parameters for a desired IAM ServiceAccountKey https://cloud.google.com/iam/docs/reference/rest/v1/projects.serviceAccounts.keys properties: keyAlgorithm: description: 'KeyAlgorithm is an optional user-specified string that specifies the type of key and algorithm to use for the key. The default is currently a 2048-bit RSA key. However this may change in the future. Possible values: "KEY_ALG_UNSPECIFIED" - Not specified. "KEY_ALG_RSA_1024" - 1024-bit RSA key "KEY_ALG_RSA_2048" - 2048-bit RSA key' type: string privateKeyType: description: 'PrivateKeyType is an optional specification of the output format of the generated private key. The default value is TYPE_GOOGLE_CREDENTIALS_FILE, which corresponds to the Google Credentials File Format. Possible values: "TYPE_UNSPECIFIED" - Not specified. Equivalent to TYPE_GOOGLE_CREDENTIALS_FILE. "TYPE_PKCS12_FILE" - Private key stored in a RFC7292 PKCS #12 document. Password for the PKCS #12 document is "notasecret". "TYPE_GOOGLE_CREDENTIALS_FILE" - Google Credentials File format.' type: string publicKeyType: default: TYPE_RAW_PUBLIC_KEY description: 'PublicKeyType is an optional specification of the output format for the associated public key. The default value is TYPE_RAW_PUBLIC_KEY. Possible values: "TYPE_NONE" - Not specified. Public key is not retrieved via Google Cloud API. "TYPE_X509_PEM_FILE" - X509 PEM format. "TYPE_RAW_PUBLIC_KEY" - Raw public key.' type: string serviceAccount: description: 'ServiceAccount: The RRN of the referred ServiceAccount RRN is the relative resource name as defined by Google Cloud API design docs here: https://cloud.google.com/apis/design/resource_names#relative_resource_name An example value for the ServiceAccount field is as follows: projects//serviceAccounts/perfect-test-sa@crossplane-playground.iam.gserviceaccount.com' type: string serviceAccountRef: description: ServiceAccountRef references a ServiceAccount and retrieves its URI properties: name: description: Name of the referenced object. type: string required: - name type: object serviceAccountSelector: description: ServiceAccountSelector selects a reference to a ServiceAccount properties: matchControllerRef: description: MatchControllerRef ensures an object with the same controller reference as the selecting object is selected. type: boolean matchLabels: additionalProperties: type: string description: MatchLabels ensures an object with matching labels is selected. type: object type: object type: object providerConfigRef: default: name: default description: ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured. properties: name: description: Name of the referenced object. type: string required: - name type: object providerRef: description: 'ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. `providerConfigRef`' properties: name: description: Name of the referenced object. type: string required: - name type: object publishConnectionDetailsTo: description: PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. properties: configRef: default: name: default description: SecretStoreConfigRef specifies which secret store config should be used for this ConnectionSecret. properties: name: description: Name of the referenced object. type: string required: - name type: object metadata: description: Metadata is the metadata for connection secret. properties: annotations: additionalProperties: type: string description: Annotations are the annotations to be added to connection secret. - For Kubernetes secrets, this will be used as "metadata.annotations". - It is up to Secret Store implementation for others store types. type: object labels: additionalProperties: type: string description: Labels are the labels/tags to be added to connection secret. - For Kubernetes secrets, this will be used as "metadata.labels". - It is up to Secret Store implementation for others store types. type: object type: description: Type is the SecretType for the connection secret. - Only valid for Kubernetes Secret Stores. type: string type: object name: description: Name is the name of the connection secret. type: string required: - name type: object writeConnectionSecretToRef: description: WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other. properties: name: description: Name of the secret. type: string namespace: description: Namespace of the secret. type: string required: - name - namespace type: object required: - forProvider type: object status: description: ServiceAccountKeyStatus represents the observed state of a ServiceAccountKey. properties: atProvider: description: ServiceAccountKeyObservation is used to show the observed state of the ServiceAccountKey resource on GCP. All fields in this structure should only be populated from GCP responses; any changes made to the k8s resource outside of the crossplane gcp controller will be ignored and overwritten. properties: keyAlgorithm: description: KeyAlgorithm is the key algorithm & possibly key size used for public/private key pair generation. type: string keyId: description: KeyID is the generated unique & stable key id for the service account key. type: string keyOrigin: description: 'KeyOrigin is the origin of the key. Possible values: "ORIGIN_UNSPECIFIED" - Unspecified key origin. "USER_PROVIDED" - Key is provided by user. "GOOGLE_PROVIDED" - Key is provided by Google.' type: string keyType: description: 'KeyType is the type of the key. Possible values: "KEY_TYPE_UNSPECIFIED" - Unspecified key type. "USER_MANAGED" - User-managed key (managed and rotated by the user). "SYSTEM_MANAGED" - System-managed key (managed and rotated by Google).' type: string name: description: 'Name is the resource name of the service account key in the following format: projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{external-name}. part of https://godoc.org/google.golang.org/genproto/googleapis/iam/admin/v1#ServiceAccountKey' type: string privateKeyType: description: PrivateKeyType is the output format for the generated private key. Only set in keys.create responses. Determines the encoding for the private key stored in the "connection" secret. type: string validAfterTime: description: ValidAfterTime is the timestamp after which this key can be used in RFC3339 UTC "Zulu" format. type: string validBeforeTime: description: ValidBeforeTime is the timestamp before which this key can be used in RFC3339 UTC "Zulu" format. type: string type: object conditions: description: Conditions of the resource. items: description: A Condition that may apply to a resource. properties: lastTransitionTime: description: LastTransitionTime is the last time this condition transitioned from one status to another. format: date-time type: string message: description: A Message containing details about this condition's last transition from one status to another, if any. type: string reason: description: A Reason for this condition's last transition from one status to another. type: string status: description: Status of this condition; is it currently True, False, or Unknown? type: string type: description: Type of this condition. At most one of each condition type may apply to a resource at any point in time. type: string required: - lastTransitionTime - reason - status - type type: object type: array type: object required: - spec type: object served: true storage: true subresources: status: {} status: acceptedNames: kind: "" plural: "" conditions: [] storedVersions: []