apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.6.2 creationTimestamp: null name: vpcendpoints.ec2.aws.crossplane.io spec: group: ec2.aws.crossplane.io names: categories: - crossplane - managed - aws kind: VPCEndpoint listKind: VPCEndpointList plural: vpcendpoints singular: vpcendpoint scope: Cluster versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=='Ready')].status name: READY type: string - jsonPath: .status.conditions[?(@.type=='Synced')].status name: SYNCED type: string - jsonPath: .metadata.annotations.crossplane\.io/external-name name: EXTERNAL-NAME type: string name: v1alpha1 schema: openAPIV3Schema: description: VPCEndpoint is the Schema for the VPCEndpoints API properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' type: string kind: description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' type: string metadata: type: object spec: description: VPCEndpointSpec defines the desired state of VPCEndpoint properties: deletionPolicy: default: Delete description: DeletionPolicy specifies what will happen to the underlying external when this managed resource is deleted - either "Delete" or "Orphan" the external resource. enum: - Orphan - Delete type: string forProvider: description: VPCEndpointParameters defines the desired state of VPCEndpoint properties: clientToken: description: Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see How to Ensure Idempotency (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html). type: string policyDocument: description: (Interface and gateway endpoints) A policy to attach to the endpoint that controls access to the service. The policy must be in valid JSON format. If this parameter is not specified, we attach a default policy that allows full access to the service. type: string privateDNSEnabled: description: "(Interface endpoint) Indicates whether to associate a private hosted zone with the specified VPC. The private hosted zone contains a record set for the default public DNS name for the service for the Region (for example, kinesis.us-east-1.amazonaws.com), which resolves to the private IP addresses of the endpoint network interfaces in the VPC. This enables you to make requests to the default public DNS name for the service instead of the public DNS names that are automatically generated by the VPC endpoint service. \n To use a private hosted zone, you must set the following VPC attributes to true: enableDnsHostnames and enableDnsSupport. Use ModifyVpcAttribute to set the VPC attributes. \n Private DNS is not supported for Amazon S3 interface endpoints. \n Default: true for supported endpoints" type: boolean region: description: Region is which region the VPCEndpoint will be created. type: string routeTableIdRefs: description: RouteTableIDRefs is a list of references to RouteTables used to set the RouteTableIDs. items: description: A Reference to a named object. properties: name: description: Name of the referenced object. type: string required: - name type: object type: array routeTableIdSelector: description: RouteTableIDsSelector selects references to RouteTables used to set the RouteTableIDs. properties: matchControllerRef: description: MatchControllerRef ensures an object with the same controller reference as the selecting object is selected. type: boolean matchLabels: additionalProperties: type: string description: MatchLabels ensures an object with matching labels is selected. type: object type: object routeTableIds: description: (Gateway endpoint) One or more route table IDs. items: type: string type: array securityGroupIdRefs: description: SecurityGroupIDRefs is a list of references to SecurityGroups used to set the SecurityGroupIDs. items: description: A Reference to a named object. properties: name: description: Name of the referenced object. type: string required: - name type: object type: array securityGroupIdSelector: description: SecurityGroupIDsSelector selects references to SecurityGroupID used to set the SecurityGroupIDs. properties: matchControllerRef: description: MatchControllerRef ensures an object with the same controller reference as the selecting object is selected. type: boolean matchLabels: additionalProperties: type: string description: MatchLabels ensures an object with matching labels is selected. type: object type: object securityGroupIds: description: (Interface endpoint) The ID of one or more security groups to associate with the endpoint network interface. items: type: string type: array serviceName: description: The service name. To get a list of available services, use the DescribeVpcEndpointServices request, or get the name from the service provider. type: string subnetIdRefs: description: SubnetIDRefs is a list of references to Subnets used to set the SubnetIDs. items: description: A Reference to a named object. properties: name: description: Name of the referenced object. type: string required: - name type: object type: array subnetIdSelector: description: SubnetIDsSelector selects references to Subnets used to set the SubnetIDs. properties: matchControllerRef: description: MatchControllerRef ensures an object with the same controller reference as the selecting object is selected. type: boolean matchLabels: additionalProperties: type: string description: MatchLabels ensures an object with matching labels is selected. type: object type: object subnetIds: description: (Interface and Gateway Load Balancer endpoints) The ID of one or more subnets in which to create an endpoint network interface. For a Gateway Load Balancer endpoint, you can specify one subnet only. items: type: string type: array tagSpecifications: description: The tags to associate with the endpoint. items: properties: resourceType: type: string tags: items: properties: key: type: string value: type: string type: object type: array type: object type: array vpcEndpointType: description: "The type of endpoint. \n Default: Gateway" type: string vpcId: description: The ID of the VPC. You must specify this parameter in the request. type: string vpcIdRef: description: VPCIDRef is a reference to an API used to set the VPCID. properties: name: description: Name of the referenced object. type: string required: - name type: object vpcIdSelector: description: VPCIDSelector selects references to API used to set the VPCID. properties: matchControllerRef: description: MatchControllerRef ensures an object with the same controller reference as the selecting object is selected. type: boolean matchLabels: additionalProperties: type: string description: MatchLabels ensures an object with matching labels is selected. type: object type: object required: - region - serviceName type: object providerConfigRef: default: name: default description: ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured. properties: name: description: Name of the referenced object. type: string required: - name type: object providerRef: description: 'ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. `providerConfigRef`' properties: name: description: Name of the referenced object. type: string required: - name type: object writeConnectionSecretToRef: description: WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. properties: name: description: Name of the secret. type: string namespace: description: Namespace of the secret. type: string required: - name - namespace type: object required: - forProvider type: object status: description: VPCEndpointStatus defines the observed state of VPCEndpoint. properties: atProvider: description: VPCEndpointObservation defines the observed state of VPCEndpoint properties: vpcEndpoint: description: Information about the endpoint. properties: creationTimestamp: format: date-time type: string dnsEntries: items: properties: dnsName: type: string hostedZoneID: type: string type: object type: array groups: items: properties: groupID: type: string groupName: type: string type: object type: array lastError: description: The last error that occurred for a VPC endpoint. properties: code: type: string message: type: string type: object networkInterfaceIDs: items: type: string type: array ownerID: type: string policyDocument: type: string privateDNSEnabled: type: boolean requesterManaged: type: boolean routeTableIDs: items: type: string type: array serviceName: type: string state: type: string subnetIDs: items: type: string type: array tags: items: properties: key: type: string value: type: string type: object type: array vpcEndpointID: type: string vpcEndpointType: type: string vpcID: type: string type: object type: object conditions: description: Conditions of the resource. items: description: A Condition that may apply to a resource. properties: lastTransitionTime: description: LastTransitionTime is the last time this condition transitioned from one status to another. format: date-time type: string message: description: A Message containing details about this condition's last transition from one status to another, if any. type: string reason: description: A Reason for this condition's last transition from one status to another. type: string status: description: Status of this condition; is it currently True, False, or Unknown? type: string type: description: Type of this condition. At most one of each condition type may apply to a resource at any point in time. type: string required: - lastTransitionTime - reason - status - type type: object type: array type: object required: - spec type: object served: true storage: true subresources: status: {} status: acceptedNames: kind: "" plural: "" conditions: [] storedVersions: []