---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.17.2
  name: accounts.cloud.pingcap.com
spec:
  group: cloud.pingcap.com
  names:
    kind: Account
    listKind: AccountList
    plural: accounts
    singular: account
  preserveUnknownFields: false
  scope: Cluster
  versions:
  - additionalPrinterColumns:
    - jsonPath: .spec.provider
      name: PROVIDER
      type: string
    - jsonPath: .metadata.creationTimestamp
      name: AGE
      type: date
    name: v1
    schema:
      openAPIV3Schema:
        description: Account is the Schema for the accounts API
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: AccountSpec defines the desired state of Account
            properties:
              aws:
                description: AWS is the AWS account configuration.
                properties:
                  accountID:
                    description: AccountID is the AWS account ID.
                    type: string
                  assumeRoleARN:
                    description: |-
                      AssumeRoleARN is the ARN of the IAM role that provides permissions
                      for EKS-Provider to assume.
                    type: string
                  externalID:
                    description: ExternalID is the external ID that third-party should
                      provide when assuming the role.
                    type: string
                required:
                - accountID
                - assumeRoleARN
                type: object
              gcp:
                description: GCP is the GCP account configuration.
                properties:
                  projectID:
                    description: ProjectID is the GCP project ID.
                    type: string
                  serviceAccount:
                    description: ServiceAccount is the GCP service account.
                    type: string
                required:
                - projectID
                type: object
              provider:
                description: Provider is the cloud provider of the account.
                type: string
            required:
            - provider
            type: object
          status:
            description: AccountStatus defines the observed state of Account
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}