v1alpha3

package
v0.6.9 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 21, 2021 License: Apache-2.0 Imports: 21 Imported by: 17

Documentation

Overview

+gencrdrefdocs:force +groupName=infrastructure.cluster.x-k8s.io

Package v1alpha3 contains API Schema definitions for the infrastructure v1alpha3 API group +kubebuilder:object:generate=true +groupName=infrastructure.cluster.x-k8s.io

Index

Constants

View Source
const (
	// ClusterFinalizer allows ReconcileAWSCluster to clean up AWS resources associated with AWSCluster before
	// removing it from the apiserver.
	ClusterFinalizer = "awscluster.infrastructure.cluster.x-k8s.io"

	// AWSClusterControllerIdentityName is the name of the AWSClusterControllerIdentity singleton
	AWSClusterControllerIdentityName = "default"
)
View Source
const (
	// PrincipalCredentialRetrievedCondition reports on whether Principal credentials could be retrieved successfully.
	// A possible scenario, where retrieval is unsuccessful, is when SourcePrincipal is not authorized for assume role.
	PrincipalCredentialRetrievedCondition clusterv1.ConditionType = "PrincipalCredentialRetrieved"
	// PrincipalCredentialRetrievalFailedReason used when errors occur during identity credential retrieval.
	PrincipalCredentialRetrievalFailedReason = "PrincipalCredentialRetrievalFailed"
	// CredentialProviderBuildFailedReason used when errors occur during building providers before trying credential retrieval.
	CredentialProviderBuildFailedReason = "CredentialProviderBuildFailed"
	// PrincipalUsageAllowedCondition reports on whether Principal and all the nested source identities are allowed to be used in the AWSCluster namespace.
	PrincipalUsageAllowedCondition clusterv1.ConditionType = "PrincipalUsageAllowed"
	// PrincipalUsageUnauthorizedReason used when AWSCluster namespace is not in the identity's allowed namespaces list.
	PrincipalUsageUnauthorizedReason = "PrincipalUsageUnauthorized"
	// SourcePrincipalUsageUnauthorizedReason used when AWSCluster is not in the intersection of source identity allowed namespaces
	// and allowed namespaces of the identities that source identity depends to
	SourcePrincipalUsageUnauthorizedReason = "SourcePrincipalUsageUnauthorized"
)
View Source
const (
	// VpcReady condition reports on the successful reconciliation of a VPC
	VpcReadyCondition clusterv1.ConditionType = "VpcReady"
	// VpcCreationStartedReason used when attempting to create a VPC for a managed cluster.
	// Will not be applied to unmanaged clusters.
	VpcCreationStartedReason = "VpcCreationStarted"
	// VpcReconciliationFailedReason used when errors occur during VPC reconciliation
	VpcReconciliationFailedReason = "VpcReconciliationFailed"
)
View Source
const (
	// SubnetsReady condition reports on the successful reconciliation of subnets.
	SubnetsReadyCondition clusterv1.ConditionType = "SubnetsReady"
	// SubnetsReconciliationFailedReason used to report failures while reconciling subnets
	SubnetsReconciliationFailedReason = "SubnetsReconciliationFailed"
)
View Source
const (
	// InternetGatewayReady condition reports on the successful reconciliation of internet gateways.
	// Only applicable to managed clusters.
	InternetGatewayReadyCondition clusterv1.ConditionType = "InternetGatewayReady"
	// InternetGatewayFailedReason used when errors occur during internet gateway reconciliation
	InternetGatewayFailedReason = "InternetGatewayFailed"
)
View Source
const (
	// NatGatewayReady condition reports successful reconciliation of NAT gateways.
	// Only applicable to managed clusters.
	NatGatewaysReadyCondition clusterv1.ConditionType = "NatGatewaysReady"
	// NatGatewaysCreationStartedReason set once when creating new NAT gateways.
	NatGatewaysCreationStartedReason = "NatGatewaysCreationStarted"
	// NatGatewaysReconciliationFailedReason used when any errors occur during reconciliation of NAT gateways.
	NatGatewaysReconciliationFailedReason = "NatGatewaysReconciliationFailed"
)
View Source
const (
	// RouteTablesReady condition reports successful reconciliation of route tables.
	// Only applicable to managed clusters.
	RouteTablesReadyCondition clusterv1.ConditionType = "RouteTablesReady"
	// RouteTableReconciliationFailedReason used when any errors occur during reconciliation of route tables.
	RouteTableReconciliationFailedReason = "RouteTableReconciliationFailed"
)
View Source
const (
	// SecondaryCidrsReady condition reports successful reconciliation of secondary CIDR blocks.
	// Only applicable to managed clusters.
	SecondaryCidrsReadyCondition clusterv1.ConditionType = "SecondaryCidrsReady"
	// SecondaryCidrReconciliationFailedReason used when any errors occur during reconciliation of secondary CIDR blocks.
	SecondaryCidrReconciliationFailedReason = "SecondaryCidrReconciliationFailed"
)
View Source
const (
	// ClusterSecurityGroupsReady condition reports successful reconciliation of security groups.
	ClusterSecurityGroupsReadyCondition clusterv1.ConditionType = "ClusterSecurityGroupsReady"
	// ClusterSecurityGroupReconciliationFailedReason used when any errors occur during reconciliation of security groups.
	ClusterSecurityGroupReconciliationFailedReason = "SecurityGroupReconciliationFailed"
)
View Source
const (
	// BastionHostReadyCondition reports whether a bastion host is ready. Depending on the configuration, a cluster
	// may not require a bastion host and this condition will be skipped
	BastionHostReadyCondition clusterv1.ConditionType = "BastionHostReady"
	// BastionCreationStartedReason used when creating a new bastion host
	BastionCreationStartedReason = "BastionCreationStarted"
	// BastionHostFailedReason used when an error occurs during the creation of a bastion host
	BastionHostFailedReason = "BastionHostFailed"
)
View Source
const (
	// LoadBalancerReadyCondition reports on whether a control plane load balancer was successfully reconciled.
	LoadBalancerReadyCondition clusterv1.ConditionType = "LoadBalancerReady"
	// WaitForDNSNameReason used while waiting for a DNS name for the API server to be populated
	WaitForDNSNameReason = "WaitForDNSName"
	// WaitForDNSNameResolveReason used while waiting for DNS name to resolve
	WaitForDNSNameResolveReason = "WaitForDNSNameResolve"
	// LoadBalancerFailedReason used when an error occurs during load balancer reconciliation
	LoadBalancerFailedReason = "LoadBalancerFailed"
)
View Source
const (
	// InstanceReadyCondition reports on current status of the EC2 instance. Ready indicates the instance is in a Running state.
	InstanceReadyCondition clusterv1.ConditionType = "InstanceReady"

	// InstanceNotFoundReason used when the instance couldn't be retrieved.
	InstanceNotFoundReason = "InstanceNotFound"
	// InstanceTerminatedReason instance is in a terminated state.
	InstanceTerminatedReason = "InstanceTerminated"
	// InstanceStoppedReason instance is in a stopped state.
	InstanceStoppedReason = "InstanceStopped"
	// InstanceNotReadyReason used when the instance is in a pending state.
	InstanceNotReadyReason = "InstanceNotReady"
	// InstanceProvisionStartedReason set when the provisioning of an instance started.
	InstanceProvisionStartedReason = "InstanceProvisionStarted"
	// InstanceProvisionFailedReason used for failures during instance provisioning.
	InstanceProvisionFailedReason = "InstanceProvisionFailed"
	// WaitingForClusterInfrastructureReason used when machine is waiting for cluster infrastructure to be ready before proceeding.
	WaitingForClusterInfrastructureReason = "WaitingForClusterInfrastructure"
	// WaitingForBootstrapDataReason used when machine is waiting for bootstrap data to be ready before proceeding.
	WaitingForBootstrapDataReason = "WaitingForBootstrapData"
)
View Source
const (
	// SecurityGroupsReadyCondition indicates the security groups are up to date on the AWSMachine.
	SecurityGroupsReadyCondition clusterv1.ConditionType = "SecurityGroupsReady"

	// SecurityGroupsFailedReason used when the security groups could not be synced
	SecurityGroupsFailedReason = "SecurityGroupsSyncFailed"
)
View Source
const (
	// Only applicable to control plane machines. ELBAttachedCondition will report true when a control plane is successfully registered with an ELB
	// When set to false, severity can be an Error if the subnet is not found or unavailable in the instance's AZ
	ELBAttachedCondition clusterv1.ConditionType = "ELBAttached"

	// ELBAttachFailedReason used when a control plane node fails to attach to the ELB
	ELBAttachFailedReason = "ELBAttachFailed"
	// ELBDetachFailedReason used when a control plane node fails to detach from an ELB
	ELBDetachFailedReason = "ELBDetachFailed"
)
View Source
const (
	// ResourceLifecycleOwned is the value we use when tagging resources to indicate
	// that the resource is considered owned and managed by the cluster,
	// and in particular that the lifecycle is tied to the lifecycle of the cluster.
	ResourceLifecycleOwned = ResourceLifecycle("owned")

	// ResourceLifecycleShared is the value we use when tagging resources to indicate
	// that the resource is shared between multiple clusters, and should not be destroyed
	// if the cluster is destroyed.
	ResourceLifecycleShared = ResourceLifecycle("shared")

	// NameKubernetesClusterPrefix is the tag name used by the cloud provider to logically
	// separate independent cluster resources. We use it to identify which resources we expect
	// to be permissive about state changes.
	// logically independent clusters running in the same AZ.
	// The tag key = NameKubernetesAWSCloudProviderPrefix + clusterID
	// The tag value is an ownership value
	NameKubernetesAWSCloudProviderPrefix = "kubernetes.io/cluster/"

	// NameAWSProviderPrefix is the tag prefix we use to differentiate
	// cluster-api-provider-aws owned components from other tooling that
	// uses NameKubernetesClusterPrefix
	NameAWSProviderPrefix = "sigs.k8s.io/cluster-api-provider-aws/"

	// NameAWSProviderOwned is the tag name we use to differentiate
	// cluster-api-provider-aws owned components from other tooling that
	// uses NameKubernetesClusterPrefix
	NameAWSProviderOwned = NameAWSProviderPrefix + "cluster/"

	// NameAWSClusterAPIRole is the tag name we use to mark roles for resources
	// dedicated to this cluster api provider implementation.
	NameAWSClusterAPIRole = NameAWSProviderPrefix + "role"

	NameAWSSubnetAssociation = NameAWSProviderPrefix + "association"

	SecondarySubnetTagValue = "secondary"

	// APIServerRoleTagValue describes the value for the apiserver role
	APIServerRoleTagValue = "apiserver"

	// BastionRoleTagValue describes the value for the bastion role
	BastionRoleTagValue = "bastion"

	// CommonRoleTagValue describes the value for the common role
	CommonRoleTagValue = "common"

	// PublicRoleTagValue describes the value for the public role
	PublicRoleTagValue = "public"

	// PrivateRoleTagValue describes the value for the private role
	PrivateRoleTagValue = "private"

	// MachineNameTagKey is the key for machine name
	MachineNameTagKey = "MachineName"
)
View Source
const (
	// DefaultNameSuffix is the default suffix appended to all AWS IAM roles created by clusterawsadm.
	DefaultNameSuffix = ".cluster-api-provider-aws.sigs.k8s.io"
)
View Source
const (
	// MachineFinalizer allows ReconcileAWSMachine to clean up AWS resources associated with AWSMachine before
	// removing it from the apiserver.
	MachineFinalizer = "awsmachine.infrastructure.cluster.x-k8s.io"
)

Variables

View Source
var (
	// ControllerIdentityKind defines identity reference kind as AWSClusterControllerIdentity
	ControllerIdentityKind = AWSIdentityKind("AWSClusterControllerIdentity")

	// ClusterRoleIdentityKind defines identity reference kind as AWSClusterRoleIdentity
	ClusterRoleIdentityKind = AWSIdentityKind("AWSClusterRoleIdentity")

	// ClusterStaticIdentityKind defines identity reference kind as AWSClusterStaticIdentity
	ClusterStaticIdentityKind = AWSIdentityKind("AWSClusterStaticIdentity")
)
View Source
var (
	// SecretBackendSSMParameterStore defines AWS Systems Manager Parameter Store as the secret backend
	SecretBackendSSMParameterStore = SecretBackend("ssm-parameter-store")

	// SecretBackendSecretsManager defines AWS Secrets Manager as the secret backend
	SecretBackendSecretsManager = SecretBackend("secrets-manager")
)
View Source
var (
	// GroupVersion is group version used to register these objects
	GroupVersion = schema.GroupVersion{Group: "infrastructure.cluster.x-k8s.io", Version: "v1alpha3"}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)
View Source
var (
	// ClassicELBSchemeInternetFacing defines an internet-facing, publicly
	// accessible AWS Classic ELB scheme
	ClassicELBSchemeInternetFacing = ClassicELBScheme("internet-facing")

	// ClassicELBSchemeInternal defines an internal-only facing
	// load balancer internal to an ELB.
	ClassicELBSchemeInternal = ClassicELBScheme("internal")

	// ClassicELBSchemeIncorrectInternetFacing was inaccurately used to define an internet-facing LB in v0.6 releases > v0.6.6 and v0.7.0 release.
	ClassicELBSchemeIncorrectInternetFacing = ClassicELBScheme("Internet-facing")
)
View Source
var (
	// ClassicELBProtocolTCP defines the ELB API string representing the TCP protocol
	ClassicELBProtocolTCP = ClassicELBProtocol("TCP")

	// ClassicELBProtocolSSL defines the ELB API string representing the TLS protocol
	ClassicELBProtocolSSL = ClassicELBProtocol("SSL")

	// ClassicELBProtocolHTTP defines the ELB API string representing the HTTP protocol at L7
	ClassicELBProtocolHTTP = ClassicELBProtocol("HTTP")

	// ClassicELBProtocolHTTPS defines the ELB API string representing the HTTP protocol at L7
	ClassicELBProtocolHTTPS = ClassicELBProtocol("HTTPS")
)
View Source
var (
	// AZSelectionSchemeOrdered will select AZs based on alphabetical order
	AZSelectionSchemeOrdered = AZSelectionScheme("Ordered")

	// AZSelectionSchemeRandom will select AZs randomly
	AZSelectionSchemeRandom = AZSelectionScheme("Random")
)
View Source
var (
	// SecurityGroupBastion defines an SSH bastion role
	SecurityGroupBastion = SecurityGroupRole("bastion")

	// SecurityGroupNode defines a Kubernetes workload node role
	SecurityGroupNode = SecurityGroupRole("node")

	// SecurityGroupEKSNodeAdditional defines an extra node group from eks nodes
	SecurityGroupEKSNodeAdditional = SecurityGroupRole("node-eks-additional")

	// SecurityGroupControlPlane defines a Kubernetes control plane node role
	SecurityGroupControlPlane = SecurityGroupRole("controlplane")

	// SecurityGroupAPIServerLB defines a Kubernetes API Server Load Balancer role
	SecurityGroupAPIServerLB = SecurityGroupRole("apiserver-lb")

	// SecurityGroupLB defines a container for the cloud provider to inject its load balancer ingress rules
	SecurityGroupLB = SecurityGroupRole("lb")
)
View Source
var (
	// SecurityGroupProtocolAll is a wildcard for all IP protocols
	SecurityGroupProtocolAll = SecurityGroupProtocol("-1")

	// SecurityGroupProtocolIPinIP represents the IP in IP protocol in ingress rules
	SecurityGroupProtocolIPinIP = SecurityGroupProtocol("4")

	// SecurityGroupProtocolTCP represents the TCP protocol in ingress rules
	SecurityGroupProtocolTCP = SecurityGroupProtocol("tcp")

	// SecurityGroupProtocolUDP represents the UDP protocol in ingress rules
	SecurityGroupProtocolUDP = SecurityGroupProtocol("udp")

	// SecurityGroupProtocolICMP represents the ICMP protocol in ingress rules
	SecurityGroupProtocolICMP = SecurityGroupProtocol("icmp")

	// SecurityGroupProtocolICMPv6 represents the ICMPv6 protocol in ingress rules
	SecurityGroupProtocolICMPv6 = SecurityGroupProtocol("58")
)
View Source
var (
	// InstanceStatePending is the string representing an instance in a pending state
	InstanceStatePending = InstanceState("pending")

	// InstanceStateRunning is the string representing an instance in a running state
	InstanceStateRunning = InstanceState("running")

	// InstanceStateShuttingDown is the string representing an instance shutting down
	InstanceStateShuttingDown = InstanceState("shutting-down")

	// InstanceStateTerminated is the string representing an instance that has been terminated
	InstanceStateTerminated = InstanceState("terminated")

	// InstanceStateStopping is the string representing an instance
	// that is in the process of being stopped and can be restarted
	InstanceStateStopping = InstanceState("stopping")

	// InstanceStateStopped is the string representing an instance
	// that has been stopped and can be restarted
	InstanceStateStopped = InstanceState("stopped")

	// InstanceRunningStates defines the set of states in which an EC2 instance is
	// running or going to be running soon
	InstanceRunningStates = sets.NewString(
		string(InstanceStatePending),
		string(InstanceStateRunning),
	)

	// InstanceOperationalStates defines the set of states in which an EC2 instance is
	// or can return to running, and supports all EC2 operations
	InstanceOperationalStates = InstanceRunningStates.Union(
		sets.NewString(
			string(InstanceStateStopping),
			string(InstanceStateStopped),
		),
	)

	// InstanceKnownStates represents all known EC2 instance states
	InstanceKnownStates = InstanceOperationalStates.Union(
		sets.NewString(
			string(InstanceStateShuttingDown),
			string(InstanceStateTerminated),
		),
	)
)

Functions

func ClusterAWSCloudProviderTagKey

func ClusterAWSCloudProviderTagKey(name string) string

ClusterAWSCloudProviderTagKey generates the key for resources associated a cluster's AWS cloud provider.

func ClusterTagKey

func ClusterTagKey(name string) string

ClusterTagKey generates the key for resources associated with a cluster.

func SetDefaults_Bastion added in v0.6.1

func SetDefaults_Bastion(obj *Bastion)

SetDefaults_Bastion is used by defaulter-gen

func SetDefaults_NetworkSpec added in v0.6.1

func SetDefaults_NetworkSpec(obj *NetworkSpec)

SetDefaults_NetworkSpec is used by defaulter-gen

Types

type AWSCluster

type AWSCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AWSClusterSpec   `json:"spec,omitempty"`
	Status AWSClusterStatus `json:"status,omitempty"`
}

AWSCluster is the Schema for the awsclusters API

func (*AWSCluster) DeepCopy

func (in *AWSCluster) DeepCopy() *AWSCluster

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSCluster.

func (*AWSCluster) DeepCopyInto

func (in *AWSCluster) DeepCopyInto(out *AWSCluster)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSCluster) DeepCopyObject

func (in *AWSCluster) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSCluster) Default added in v0.5.5

func (r *AWSCluster) Default()

func (*AWSCluster) GetConditions added in v0.5.5

func (r *AWSCluster) GetConditions() clusterv1.Conditions

func (*AWSCluster) Hub

func (*AWSCluster) Hub()

Hub marks AWSCluster as a conversion hub.

func (*AWSCluster) SetConditions added in v0.5.5

func (r *AWSCluster) SetConditions(conditions clusterv1.Conditions)

func (*AWSCluster) SetupWebhookWithManager

func (r *AWSCluster) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*AWSCluster) ValidateCreate added in v0.5.3

func (r *AWSCluster) ValidateCreate() error

func (*AWSCluster) ValidateDelete added in v0.5.3

func (r *AWSCluster) ValidateDelete() error

func (*AWSCluster) ValidateUpdate added in v0.5.3

func (r *AWSCluster) ValidateUpdate(old runtime.Object) error

type AWSClusterControllerIdentity added in v0.6.5

type AWSClusterControllerIdentity struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Spec for this AWSClusterControllerIdentity.
	Spec AWSClusterControllerIdentitySpec `json:"spec,omitempty"`
}

AWSClusterControllerIdentity is the Schema for the awsclustercontrolleridentities API It is used to grant access to use Cluster API Provider AWS Controller credentials.

func (*AWSClusterControllerIdentity) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterControllerIdentity.

func (*AWSClusterControllerIdentity) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterControllerIdentity) DeepCopyObject added in v0.6.5

func (in *AWSClusterControllerIdentity) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSClusterControllerIdentity) Default added in v0.6.5

func (r *AWSClusterControllerIdentity) Default()

func (*AWSClusterControllerIdentity) SetupWebhookWithManager added in v0.6.5

func (r *AWSClusterControllerIdentity) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*AWSClusterControllerIdentity) ValidateCreate added in v0.6.5

func (r *AWSClusterControllerIdentity) ValidateCreate() error

func (*AWSClusterControllerIdentity) ValidateDelete added in v0.6.5

func (r *AWSClusterControllerIdentity) ValidateDelete() error

func (*AWSClusterControllerIdentity) ValidateUpdate added in v0.6.5

func (r *AWSClusterControllerIdentity) ValidateUpdate(old runtime.Object) error

type AWSClusterControllerIdentityList added in v0.6.5

type AWSClusterControllerIdentityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSClusterControllerIdentity `json:"items"`
}

AWSClusterControllerIdentityList contains a list of AWSClusterControllerIdentity

func (*AWSClusterControllerIdentityList) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterControllerIdentityList.

func (*AWSClusterControllerIdentityList) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterControllerIdentityList) DeepCopyObject added in v0.6.5

func (in *AWSClusterControllerIdentityList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSClusterControllerIdentityList) SetupWebhookWithManager added in v0.6.5

func (r *AWSClusterControllerIdentityList) SetupWebhookWithManager(mgr ctrl.Manager) error

type AWSClusterControllerIdentitySpec added in v0.6.5

type AWSClusterControllerIdentitySpec struct {
	AWSClusterIdentitySpec `json:",inline"`
}

func (*AWSClusterControllerIdentitySpec) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterControllerIdentitySpec.

func (*AWSClusterControllerIdentitySpec) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSClusterIdentitySpec added in v0.6.5

type AWSClusterIdentitySpec struct {
	// AllowedNamespaces is used to identify which namespaces are allowed to use the identity from.
	// Namespaces can be selected either using an array of namespaces or with label selector.
	// An empty allowedNamespaces object indicates that AWSClusters can use this identity from any namespace.
	// If this object is nil, no namespaces will be allowed (default behaviour, if this field is not provided)
	// A namespace should be either in the NamespaceList or match with Selector to use the identity.
	//
	// +optional
	// +nullable
	AllowedNamespaces *AllowedNamespaces `json:"allowedNamespaces"`
}

func (*AWSClusterIdentitySpec) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterIdentitySpec.

func (*AWSClusterIdentitySpec) DeepCopyInto added in v0.6.5

func (in *AWSClusterIdentitySpec) DeepCopyInto(out *AWSClusterIdentitySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSClusterList

type AWSClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSCluster `json:"items"`
}

AWSClusterList contains a list of AWSCluster

func (*AWSClusterList) DeepCopy

func (in *AWSClusterList) DeepCopy() *AWSClusterList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterList.

func (*AWSClusterList) DeepCopyInto

func (in *AWSClusterList) DeepCopyInto(out *AWSClusterList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterList) DeepCopyObject

func (in *AWSClusterList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSClusterList) Hub

func (*AWSClusterList) Hub()

Hub marks AWSClusterList as a conversion hub.

func (*AWSClusterList) SetupWebhookWithManager

func (r *AWSClusterList) SetupWebhookWithManager(mgr ctrl.Manager) error

type AWSClusterRoleIdentity added in v0.6.5

type AWSClusterRoleIdentity struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Spec for this AWSClusterRoleIdentity.
	Spec AWSClusterRoleIdentitySpec `json:"spec,omitempty"`
}

AWSClusterRoleIdentity is the Schema for the awsclusterroleidentities API It is used to assume a role using the provided sourceRef.

func (*AWSClusterRoleIdentity) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterRoleIdentity.

func (*AWSClusterRoleIdentity) DeepCopyInto added in v0.6.5

func (in *AWSClusterRoleIdentity) DeepCopyInto(out *AWSClusterRoleIdentity)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterRoleIdentity) DeepCopyObject added in v0.6.5

func (in *AWSClusterRoleIdentity) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSClusterRoleIdentity) Default added in v0.6.5

func (r *AWSClusterRoleIdentity) Default()

func (*AWSClusterRoleIdentity) SetupWebhookWithManager added in v0.6.5

func (r *AWSClusterRoleIdentity) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*AWSClusterRoleIdentity) ValidateCreate added in v0.6.5

func (r *AWSClusterRoleIdentity) ValidateCreate() error

func (*AWSClusterRoleIdentity) ValidateDelete added in v0.6.5

func (r *AWSClusterRoleIdentity) ValidateDelete() error

func (*AWSClusterRoleIdentity) ValidateUpdate added in v0.6.5

func (r *AWSClusterRoleIdentity) ValidateUpdate(old runtime.Object) error

type AWSClusterRoleIdentityList added in v0.6.5

type AWSClusterRoleIdentityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSClusterRoleIdentity `json:"items"`
}

AWSClusterRoleIdentityList contains a list of AWSClusterRoleIdentity

func (*AWSClusterRoleIdentityList) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterRoleIdentityList.

func (*AWSClusterRoleIdentityList) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterRoleIdentityList) DeepCopyObject added in v0.6.5

func (in *AWSClusterRoleIdentityList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSClusterRoleIdentityList) SetupWebhookWithManager added in v0.6.5

func (r *AWSClusterRoleIdentityList) SetupWebhookWithManager(mgr ctrl.Manager) error

type AWSClusterRoleIdentitySpec added in v0.6.5

type AWSClusterRoleIdentitySpec struct {
	AWSClusterIdentitySpec `json:",inline"`
	AWSRoleSpec            `json:",inline"`
	// A unique identifier that might be required when you assume a role in another account.
	// If the administrator of the account to which the role belongs provided you with an
	// external ID, then provide that value in the ExternalId parameter. This value can be
	// any string, such as a passphrase or account number. A cross-account role is usually
	// set up to trust everyone in an account. Therefore, the administrator of the trusting
	// account might send an external ID to the administrator of the trusted account. That
	// way, only someone with the ID can assume the role, rather than everyone in the
	// account. For more information about the external ID, see How to Use an External ID
	// When Granting Access to Your AWS Resources to a Third Party in the IAM User Guide.
	// +optional
	ExternalID string `json:"externalID,omitempty"`

	// SourceIdentityRef is a reference to another identity which will be chained to do
	// role assumption. All identity types are accepted.
	SourceIdentityRef *AWSIdentityReference `json:"sourceIdentityRef,omitempty"`
}

func (*AWSClusterRoleIdentitySpec) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterRoleIdentitySpec.

func (*AWSClusterRoleIdentitySpec) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSClusterSpec

type AWSClusterSpec struct {
	// NetworkSpec encapsulates all things related to AWS network.
	NetworkSpec NetworkSpec `json:"networkSpec,omitempty"`

	// The AWS Region the cluster lives in.
	Region string `json:"region,omitempty"`

	// SSHKeyName is the name of the ssh key to attach to the bastion host. Valid values are empty string (do not use SSH keys), a valid SSH key name, or omitted (use the default SSH key name)
	// +optional
	SSHKeyName *string `json:"sshKeyName,omitempty"`

	// ControlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +optional
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint"`

	// AdditionalTags is an optional set of tags to add to AWS resources managed by the AWS provider, in addition to the
	// ones added by default.
	// +optional
	AdditionalTags Tags `json:"additionalTags,omitempty"`

	// ControlPlaneLoadBalancer is optional configuration for customizing control plane behavior.
	// +optional
	ControlPlaneLoadBalancer *AWSLoadBalancerSpec `json:"controlPlaneLoadBalancer,omitempty"`

	// ImageLookupFormat is the AMI naming format to look up machine images when
	// a machine does not specify an AMI. When set, this will be used for all
	// cluster machines unless a machine specifies a different ImageLookupOrg.
	// Supports substitutions for {{.BaseOS}} and {{.K8sVersion}} with the base
	// OS and kubernetes version, respectively. The BaseOS will be the value in
	// ImageLookupBaseOS or ubuntu (the default), and the kubernetes version as
	// defined by the packages produced by kubernetes/release without v as a
	// prefix: 1.13.0, 1.12.5-mybuild.1, or 1.17.3. For example, the default
	// image format of capa-ami-{{.BaseOS}}-?{{.K8sVersion}}-* will end up
	// searching for AMIs that match the pattern capa-ami-ubuntu-?1.18.0-* for a
	// Machine that is targeting kubernetes v1.18.0 and the ubuntu base OS. See
	// also: https://golang.org/pkg/text/template/
	// +optional
	ImageLookupFormat string `json:"imageLookupFormat,omitempty"`

	// ImageLookupOrg is the AWS Organization ID to look up machine images when a
	// machine does not specify an AMI. When set, this will be used for all
	// cluster machines unless a machine specifies a different ImageLookupOrg.
	// +optional
	ImageLookupOrg string `json:"imageLookupOrg,omitempty"`

	// ImageLookupBaseOS is the name of the base operating system used to look
	// up machine images when a machine does not specify an AMI. When set, this
	// will be used for all cluster machines unless a machine specifies a
	// different ImageLookupBaseOS.
	ImageLookupBaseOS string `json:"imageLookupBaseOS,omitempty"`

	// Bastion contains options to configure the bastion host.
	// +optional
	Bastion Bastion `json:"bastion"`

	// IdentityRef is a reference to a identity to be used when reconciling this cluster
	// +optional
	IdentityRef *AWSIdentityReference `json:"identityRef,omitempty"`
}

AWSClusterSpec defines the desired state of AWSCluster

func (*AWSClusterSpec) DeepCopy

func (in *AWSClusterSpec) DeepCopy() *AWSClusterSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterSpec.

func (*AWSClusterSpec) DeepCopyInto

func (in *AWSClusterSpec) DeepCopyInto(out *AWSClusterSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSClusterStaticIdentity added in v0.6.5

type AWSClusterStaticIdentity struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Spec for this AWSClusterStaticIdentity
	Spec AWSClusterStaticIdentitySpec `json:"spec,omitempty"`
}

AWSClusterStaticIdentity is the Schema for the awsclusterstaticidentities API It represents a reference to an AWS access key ID and secret access key, stored in a secret.

func (*AWSClusterStaticIdentity) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterStaticIdentity.

func (*AWSClusterStaticIdentity) DeepCopyInto added in v0.6.5

func (in *AWSClusterStaticIdentity) DeepCopyInto(out *AWSClusterStaticIdentity)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterStaticIdentity) DeepCopyObject added in v0.6.5

func (in *AWSClusterStaticIdentity) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type AWSClusterStaticIdentityList added in v0.6.5

type AWSClusterStaticIdentityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSClusterStaticIdentity `json:"items"`
}

AWSClusterStaticIdentityList contains a list of AWSClusterStaticIdentity

func (*AWSClusterStaticIdentityList) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterStaticIdentityList.

func (*AWSClusterStaticIdentityList) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSClusterStaticIdentityList) DeepCopyObject added in v0.6.5

func (in *AWSClusterStaticIdentityList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type AWSClusterStaticIdentitySpec added in v0.6.5

type AWSClusterStaticIdentitySpec struct {
	AWSClusterIdentitySpec `json:",inline"`
	// Reference to a secret containing the credentials. The secret should
	// contain the following data keys:
	//  AccessKeyID: AKIAIOSFODNN7EXAMPLE
	//  SecretAccessKey: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
	//  SessionToken: Optional
	SecretRef corev1.SecretReference `json:"secretRef"`
}

func (*AWSClusterStaticIdentitySpec) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterStaticIdentitySpec.

func (*AWSClusterStaticIdentitySpec) DeepCopyInto added in v0.6.5

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSClusterStatus

type AWSClusterStatus struct {
	// +kubebuilder:default=false
	Ready          bool                     `json:"ready"`
	Network        Network                  `json:"network,omitempty"`
	FailureDomains clusterv1.FailureDomains `json:"failureDomains,omitempty"`
	Bastion        *Instance                `json:"bastion,omitempty"`
	Conditions     clusterv1.Conditions     `json:"conditions,omitempty"`
}

AWSClusterStatus defines the observed state of AWSCluster

func (*AWSClusterStatus) DeepCopy

func (in *AWSClusterStatus) DeepCopy() *AWSClusterStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSClusterStatus.

func (*AWSClusterStatus) DeepCopyInto

func (in *AWSClusterStatus) DeepCopyInto(out *AWSClusterStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSIdentityKind added in v0.6.5

type AWSIdentityKind string

type AWSIdentityReference added in v0.6.5

type AWSIdentityReference struct {
	// Name of the identity.
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// Kind of the identity.
	// +kubebuilder:validation:Enum=AWSClusterControllerIdentity;AWSClusterRoleIdentity;AWSClusterStaticIdentity
	Kind AWSIdentityKind `json:"kind"`
}

AWSIdentityReference specifies a identity.

func (*AWSIdentityReference) DeepCopy added in v0.6.5

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSIdentityReference.

func (*AWSIdentityReference) DeepCopyInto added in v0.6.5

func (in *AWSIdentityReference) DeepCopyInto(out *AWSIdentityReference)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSLoadBalancerSpec

type AWSLoadBalancerSpec struct {
	// Scheme sets the scheme of the load balancer (defaults to internet-facing)
	// +kubebuilder:default=internet-facing
	// +kubebuilder:validation:Enum=internet-facing;Internet-facing;internal
	// +optional
	Scheme *ClassicELBScheme `json:"scheme,omitempty"`

	// CrossZoneLoadBalancing enables the classic ELB cross availability zone balancing.
	//
	// With cross-zone load balancing, each load balancer node for your Classic Load Balancer
	// distributes requests evenly across the registered instances in all enabled Availability Zones.
	// If cross-zone load balancing is disabled, each load balancer node distributes requests evenly across
	// the registered instances in its Availability Zone only.
	//
	// Defaults to false.
	// +optional
	CrossZoneLoadBalancing bool `json:"crossZoneLoadBalancing"`

	// Subnets sets the subnets that should be applied to the control plane load balancer (defaults to discovered subnets for managed VPCs or an empty set for unmanaged VPCs)
	// +optional
	Subnets []string `json:"subnets,omitempty"`

	// AdditionalSecurityGroups sets the security groups used by the load balancer. Expected to be security group IDs.
	// This is optional - if not provided new security groups will be created for the load balancer
	// +optional
	AdditionalSecurityGroups []string `json:"additionalSecurityGroups,omitempty"`
}

AWSLoadBalancerSpec defines the desired state of an AWS load balancer

func (*AWSLoadBalancerSpec) DeepCopy

func (in *AWSLoadBalancerSpec) DeepCopy() *AWSLoadBalancerSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSLoadBalancerSpec.

func (*AWSLoadBalancerSpec) DeepCopyInto

func (in *AWSLoadBalancerSpec) DeepCopyInto(out *AWSLoadBalancerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSMachine

type AWSMachine struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AWSMachineSpec   `json:"spec,omitempty"`
	Status AWSMachineStatus `json:"status,omitempty"`
}

AWSMachine is the Schema for the awsmachines API

func (*AWSMachine) DeepCopy

func (in *AWSMachine) DeepCopy() *AWSMachine

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachine.

func (*AWSMachine) DeepCopyInto

func (in *AWSMachine) DeepCopyInto(out *AWSMachine)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSMachine) DeepCopyObject

func (in *AWSMachine) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSMachine) Default added in v0.6.1

func (r *AWSMachine) Default()

Default implements webhook.Defaulter such that an empty CloudInit will be defined with a default SecureSecretsBackend as SecretBackendSecretsManager iff InsecureSkipSecretsManager is unset

func (*AWSMachine) GetConditions added in v0.5.5

func (r *AWSMachine) GetConditions() clusterv1.Conditions

func (*AWSMachine) Hub

func (*AWSMachine) Hub()

Hub marks AWSMachine as a conversion hub.

func (*AWSMachine) SetConditions added in v0.5.5

func (r *AWSMachine) SetConditions(conditions clusterv1.Conditions)

func (*AWSMachine) SetupWebhookWithManager

func (r *AWSMachine) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*AWSMachine) ValidateCreate

func (r *AWSMachine) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*AWSMachine) ValidateDelete

func (r *AWSMachine) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*AWSMachine) ValidateUpdate

func (r *AWSMachine) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type AWSMachineList

type AWSMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSMachine `json:"items"`
}

AWSMachineList contains a list of AWSMachine

func (*AWSMachineList) DeepCopy

func (in *AWSMachineList) DeepCopy() *AWSMachineList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineList.

func (*AWSMachineList) DeepCopyInto

func (in *AWSMachineList) DeepCopyInto(out *AWSMachineList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSMachineList) DeepCopyObject

func (in *AWSMachineList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSMachineList) Hub

func (*AWSMachineList) Hub()

Hub marks AWSMachineList as a conversion hub.

func (*AWSMachineList) SetupWebhookWithManager

func (r *AWSMachineList) SetupWebhookWithManager(mgr ctrl.Manager) error

type AWSMachineProviderConditionType

type AWSMachineProviderConditionType string

AWSMachineProviderConditionType is a valid value for AWSMachineProviderCondition.Type

const (
	// MachineCreated indicates whether the machine has been created or not. If not,
	// it should include a reason and message for the failure.
	MachineCreated AWSMachineProviderConditionType = "MachineCreated"
)

Valid conditions for an AWS machine instance

type AWSMachineSpec

type AWSMachineSpec struct {
	// ProviderID is the unique identifier as specified by the cloud provider.
	ProviderID *string `json:"providerID,omitempty"`

	// InstanceID is the EC2 instance ID for this machine.
	InstanceID *string `json:"instanceID,omitempty"`

	// AMI is the reference to the AMI from which to create the machine instance.
	AMI AWSResourceReference `json:"ami,omitempty"`

	// ImageLookupFormat is the AMI naming format to look up the image for this
	// machine It will be ignored if an explicit AMI is set. Supports
	// substitutions for {{.BaseOS}} and {{.K8sVersion}} with the base OS and
	// kubernetes version, respectively. The BaseOS will be the value in
	// ImageLookupBaseOS or ubuntu (the default), and the kubernetes version as
	// defined by the packages produced by kubernetes/release without v as a
	// prefix: 1.13.0, 1.12.5-mybuild.1, or 1.17.3. For example, the default
	// image format of capa-ami-{{.BaseOS}}-?{{.K8sVersion}}-* will end up
	// searching for AMIs that match the pattern capa-ami-ubuntu-?1.18.0-* for a
	// Machine that is targeting kubernetes v1.18.0 and the ubuntu base OS. See
	// also: https://golang.org/pkg/text/template/
	// +optional
	ImageLookupFormat string `json:"imageLookupFormat,omitempty"`

	// ImageLookupOrg is the AWS Organization ID to use for image lookup if AMI is not set.
	ImageLookupOrg string `json:"imageLookupOrg,omitempty"`

	// ImageLookupBaseOS is the name of the base operating system to use for
	// image lookup the AMI is not set.
	ImageLookupBaseOS string `json:"imageLookupBaseOS,omitempty"`

	// InstanceType is the type of instance to create. Example: m4.xlarge
	InstanceType string `json:"instanceType,omitempty"`

	// AdditionalTags is an optional set of tags to add to an instance, in addition to the ones added by default by the
	// AWS provider. If both the AWSCluster and the AWSMachine specify the same tag name with different values, the
	// AWSMachine's value takes precedence.
	// +optional
	AdditionalTags Tags `json:"additionalTags,omitempty"`

	// IAMInstanceProfile is a name of an IAM instance profile to assign to the instance
	// +optional
	IAMInstanceProfile string `json:"iamInstanceProfile,omitempty"`

	// PublicIP specifies whether the instance should get a public IP.
	// Precedence for this setting is as follows:
	// 1. This field if set
	// 2. Cluster/flavor setting
	// 3. Subnet default
	// +optional
	PublicIP *bool `json:"publicIP,omitempty"`

	// AdditionalSecurityGroups is an array of references to security groups that should be applied to the
	// instance. These security groups would be set in addition to any security groups defined
	// at the cluster level or in the actuator. It is possible to specify either IDs of Filters. Using Filters
	// will cause additional requests to AWS API and if tags change the attached security groups might change too.
	// +optional
	AdditionalSecurityGroups []AWSResourceReference `json:"additionalSecurityGroups,omitempty"`

	// FailureDomain is the failure domain unique identifier this Machine should be attached to, as defined in Cluster API.
	// For this infrastructure provider, the ID is equivalent to an AWS Availability Zone.
	// If multiple subnets are matched for the availability zone, the first one returned is picked.
	FailureDomain *string `json:"failureDomain,omitempty"`

	// Subnet is a reference to the subnet to use for this instance. If not specified,
	// the cluster subnet will be used.
	// +optional
	Subnet *AWSResourceReference `json:"subnet,omitempty"`

	// SSHKeyName is the name of the ssh key to attach to the instance. Valid values are empty string (do not use SSH keys), a valid SSH key name, or omitted (use the default SSH key name)
	// +optional
	SSHKeyName *string `json:"sshKeyName,omitempty"`

	// RootVolume encapsulates the configuration options for the root volume
	// +optional
	RootVolume *Volume `json:"rootVolume,omitempty"`

	// Configuration options for the non root storage volumes.
	// +optional
	NonRootVolumes []*Volume `json:"nonRootVolumes,omitempty"`

	// NetworkInterfaces is a list of ENIs to associate with the instance.
	// A maximum of 2 may be specified.
	// +optional
	// +kubebuilder:validation:MaxItems=2
	NetworkInterfaces []string `json:"networkInterfaces,omitempty"`

	// UncompressedUserData specify whether the user data is gzip-compressed before it is sent to ec2 instance.
	// cloud-init has built-in support for gzip-compressed user data
	// user data stored in aws secret manager is always gzip-compressed.
	//
	// +optional
	UncompressedUserData *bool `json:"uncompressedUserData,omitempty"`

	// CloudInit defines options related to the bootstrapping systems where
	// CloudInit is used.
	// +optional
	CloudInit CloudInit `json:"cloudInit,omitempty"`

	// SpotMarketOptions allows users to configure instances to be run using AWS Spot instances.
	// +optional
	SpotMarketOptions *SpotMarketOptions `json:"spotMarketOptions,omitempty"`

	// Tenancy indicates if instance should run on shared or single-tenant hardware.
	// +optional
	// +kubebuilder:validation:Enum:=default;dedicated;host
	Tenancy string `json:"tenancy,omitempty"`
}

AWSMachineSpec defines the desired state of AWSMachine

func (*AWSMachineSpec) DeepCopy

func (in *AWSMachineSpec) DeepCopy() *AWSMachineSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineSpec.

func (*AWSMachineSpec) DeepCopyInto

func (in *AWSMachineSpec) DeepCopyInto(out *AWSMachineSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSMachineStatus

type AWSMachineStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	Ready bool `json:"ready"`

	// Interruptible reports that this machine is using spot instances and can therefore be interrupted by CAPI when it receives a notice that the spot instance is to be terminated by AWS.
	// This will be set to true when SpotMarketOptions is not nil (i.e. this machine is using a spot instance).
	// +optional
	Interruptible bool `json:"interruptible,omitempty"`

	// Addresses contains the AWS instance associated addresses.
	Addresses []clusterv1.MachineAddress `json:"addresses,omitempty"`

	// InstanceState is the state of the AWS instance for this machine.
	// +optional
	InstanceState *InstanceState `json:"instanceState,omitempty"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the Machine and will contain a succinct value suitable
	// for machine interpretation.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Machine's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Machines
	// can be added as events to the Machine object and/or logged in the
	// controller's output.
	// +optional
	FailureReason *errors.MachineStatusError `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the Machine and will contain a more verbose string suitable
	// for logging and human consumption.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Machine's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Machines
	// can be added as events to the Machine object and/or logged in the
	// controller's output.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the AWSMachine.
	// +optional
	Conditions clusterv1.Conditions `json:"conditions,omitempty"`
}

AWSMachineStatus defines the observed state of AWSMachine

func (*AWSMachineStatus) DeepCopy

func (in *AWSMachineStatus) DeepCopy() *AWSMachineStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineStatus.

func (*AWSMachineStatus) DeepCopyInto

func (in *AWSMachineStatus) DeepCopyInto(out *AWSMachineStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSMachineTemplate

type AWSMachineTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec AWSMachineTemplateSpec `json:"spec,omitempty"`
}

AWSMachineTemplate is the Schema for the awsmachinetemplates API

func (*AWSMachineTemplate) DeepCopy

func (in *AWSMachineTemplate) DeepCopy() *AWSMachineTemplate

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineTemplate.

func (*AWSMachineTemplate) DeepCopyInto

func (in *AWSMachineTemplate) DeepCopyInto(out *AWSMachineTemplate)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSMachineTemplate) DeepCopyObject

func (in *AWSMachineTemplate) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSMachineTemplate) Hub

func (*AWSMachineTemplate) Hub()

Hub marks AWSMachineTemplate as a conversion hub.

func (*AWSMachineTemplate) SetupWebhookWithManager

func (r *AWSMachineTemplate) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*AWSMachineTemplate) ValidateCreate

func (r *AWSMachineTemplate) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*AWSMachineTemplate) ValidateDelete

func (r *AWSMachineTemplate) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*AWSMachineTemplate) ValidateUpdate

func (r *AWSMachineTemplate) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type AWSMachineTemplateList

type AWSMachineTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AWSMachineTemplate `json:"items"`
}

AWSMachineTemplateList contains a list of AWSMachineTemplate

func (*AWSMachineTemplateList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineTemplateList.

func (*AWSMachineTemplateList) DeepCopyInto

func (in *AWSMachineTemplateList) DeepCopyInto(out *AWSMachineTemplateList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AWSMachineTemplateList) DeepCopyObject

func (in *AWSMachineTemplateList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*AWSMachineTemplateList) Hub

func (*AWSMachineTemplateList) Hub()

Hub marks AWSMachineTemplateList as a conversion hub.

func (*AWSMachineTemplateList) SetupWebhookWithManager

func (r *AWSMachineTemplateList) SetupWebhookWithManager(mgr ctrl.Manager) error

type AWSMachineTemplateResource

type AWSMachineTemplateResource struct {
	// Spec is the specification of the desired behavior of the machine.
	Spec AWSMachineSpec `json:"spec"`
}

AWSMachineTemplateResource describes the data needed to create am AWSMachine from a template

func (*AWSMachineTemplateResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineTemplateResource.

func (*AWSMachineTemplateResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSMachineTemplateSpec

type AWSMachineTemplateSpec struct {
	Template AWSMachineTemplateResource `json:"template"`
}

AWSMachineTemplateSpec defines the desired state of AWSMachineTemplate

func (*AWSMachineTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSMachineTemplateSpec.

func (*AWSMachineTemplateSpec) DeepCopyInto

func (in *AWSMachineTemplateSpec) DeepCopyInto(out *AWSMachineTemplateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSResourceReference

type AWSResourceReference struct {
	// ID of resource
	// +optional
	ID *string `json:"id,omitempty"`

	// ARN of resource
	// +optional
	ARN *string `json:"arn,omitempty"`

	// Filters is a set of key/value pairs used to identify a resource
	// They are applied according to the rules defined by the AWS API:
	// https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Filtering.html
	// +optional
	Filters []Filter `json:"filters,omitempty"`
}

AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.

func (*AWSResourceReference) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSResourceReference.

func (*AWSResourceReference) DeepCopyInto

func (in *AWSResourceReference) DeepCopyInto(out *AWSResourceReference)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSRoleSpec added in v0.6.5

type AWSRoleSpec struct {
	// The Amazon Resource Name (ARN) of the role to assume.
	RoleArn string `json:"roleARN"`
	// An identifier for the assumed role session
	SessionName string `json:"sessionName,omitempty"`
	// The duration, in seconds, of the role session before it is renewed.
	// +kubebuilder:validation:Minimum:=900
	// +kubebuilder:validation:Maximum:=43200
	DurationSeconds int32 `json:"durationSeconds,omitempty"`
	// An IAM policy as a JSON-encoded string that you want to use as an inline session policy.
	InlinePolicy string `json:"inlinePolicy,omitempty"`

	// The Amazon Resource Names (ARNs) of the IAM managed policies that you want
	// to use as managed session policies.
	// The policies must exist in the same account as the role.
	PolicyARNs []string `json:"policyARNs,omitempty"`
}

func (*AWSRoleSpec) DeepCopy added in v0.6.5

func (in *AWSRoleSpec) DeepCopy() *AWSRoleSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSRoleSpec.

func (*AWSRoleSpec) DeepCopyInto added in v0.6.5

func (in *AWSRoleSpec) DeepCopyInto(out *AWSRoleSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AZSelectionScheme added in v0.5.5

type AZSelectionScheme string

AZSelectionScheme defines the scheme of selecting AZs.

type AllowedNamespaces added in v0.6.5

type AllowedNamespaces struct {
	// An nil or empty list indicates that AWSClusters cannot use the identity from any namespace.
	//
	// +optional
	// +nullable
	NamespaceList []string `json:"list"`

	// AllowedNamespaces is a selector of namespaces that AWSClusters can
	// use this ClusterPrincipal from. This is a standard Kubernetes LabelSelector,
	// a label query over a set of resources. The result of matchLabels and
	// matchExpressions are ANDed.
	//
	// An empty selector indicates that AWSClusters cannot use this
	// AWSClusterIdentity from any namespace.
	// +optional
	Selector metav1.LabelSelector `json:"selector"`
}

func (*AllowedNamespaces) DeepCopy added in v0.6.5

func (in *AllowedNamespaces) DeepCopy() *AllowedNamespaces

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AllowedNamespaces.

func (*AllowedNamespaces) DeepCopyInto added in v0.6.5

func (in *AllowedNamespaces) DeepCopyInto(out *AllowedNamespaces)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Bastion

type Bastion struct {
	// Enabled allows this provider to create a bastion host instance
	// with a public ip to access the VPC private network.
	// +optional
	Enabled bool `json:"enabled"`

	// DisableIngressRules will ensure there are no Ingress rules in the bastion host's security group.
	// Requires AllowedCIDRBlocks to be empty.
	// +optional
	DisableIngressRules bool `json:"disableIngressRules,omitempty"`

	// AllowedCIDRBlocks is a list of CIDR blocks allowed to access the bastion host.
	// They are set as ingress rules for the Bastion host's Security Group (defaults to 0.0.0.0/0).
	// +optional
	AllowedCIDRBlocks []string `json:"allowedCIDRBlocks,omitempty"`

	// InstanceType will use the specified instance type for the bastion. If not specified,
	// Cluster API Provider AWS will use t3.micro for all regions except us-east-1, where t2.micro
	// will be the default.
	InstanceType string `json:"instanceType,omitempty"`

	// AMI will use the specified AMI to boot the bastion. If not specified,
	// the AMI will default to one picked out in public space.
	// +optional
	AMI string `json:"ami,omitempty"`
}

func (*Bastion) DeepCopy

func (in *Bastion) DeepCopy() *Bastion

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Bastion.

func (*Bastion) DeepCopyInto

func (in *Bastion) DeepCopyInto(out *Bastion)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Bastion) Validate added in v0.6.1

func (b *Bastion) Validate() []*field.Error

Validate will validate the bastion fields

type BuildParams

type BuildParams struct {
	// Lifecycle determines the resource lifecycle.
	Lifecycle ResourceLifecycle

	// ClusterName is the cluster associated with the resource.
	ClusterName string

	// ResourceID is the unique identifier of the resource to be tagged.
	ResourceID string

	// Name is the name of the resource, it's applied as the tag "Name" on AWS.
	// +optional
	Name *string

	// Role is the role associated to the resource.
	// +optional
	Role *string

	// Any additional tags to be added to the resource.
	// +optional
	Additional Tags
}

BuildParams is used to build tags around an aws resource.

func (*BuildParams) DeepCopy

func (in *BuildParams) DeepCopy() *BuildParams

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new BuildParams.

func (*BuildParams) DeepCopyInto

func (in *BuildParams) DeepCopyInto(out *BuildParams)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (BuildParams) WithCloudProvider added in v0.6.1

func (b BuildParams) WithCloudProvider(name string) BuildParams

WithCloudProvider tags the cluster ownership for a resource

func (BuildParams) WithMachineName added in v0.6.1

func (b BuildParams) WithMachineName(m *clusterv1.Machine) BuildParams

WithMachineName tags the namespaced machine name The machine name will be tagged with key "MachineName"

type CNIIngressRule added in v0.5.5

type CNIIngressRule struct {
	Description string                `json:"description"`
	Protocol    SecurityGroupProtocol `json:"protocol"`
	FromPort    int64                 `json:"fromPort"`
	ToPort      int64                 `json:"toPort"`
}

CNIIngressRule defines an AWS ingress rule for CNI requirements.

func (*CNIIngressRule) DeepCopy added in v0.5.5

func (in *CNIIngressRule) DeepCopy() *CNIIngressRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CNIIngressRule.

func (*CNIIngressRule) DeepCopyInto added in v0.5.5

func (in *CNIIngressRule) DeepCopyInto(out *CNIIngressRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CNIIngressRules added in v0.5.5

type CNIIngressRules []*CNIIngressRule

CNIIngressRules is a slice of CNIIngressRule

func (CNIIngressRules) DeepCopy added in v0.5.5

func (in CNIIngressRules) DeepCopy() CNIIngressRules

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CNIIngressRules.

func (CNIIngressRules) DeepCopyInto added in v0.5.5

func (in CNIIngressRules) DeepCopyInto(out *CNIIngressRules)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CNISpec added in v0.5.5

type CNISpec struct {
	// CNIIngressRules specify rules to apply to control plane and worker node security groups.
	// The source for the rule will be set to control plane and worker security group IDs.
	CNIIngressRules CNIIngressRules `json:"cniIngressRules,omitempty"`
}

CNISpec defines configuration for CNI

func (*CNISpec) DeepCopy added in v0.5.5

func (in *CNISpec) DeepCopy() *CNISpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CNISpec.

func (*CNISpec) DeepCopyInto added in v0.5.5

func (in *CNISpec) DeepCopyInto(out *CNISpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ClassicELB

type ClassicELB struct {
	// The name of the load balancer. It must be unique within the set of load balancers
	// defined in the region. It also serves as identifier.
	Name string `json:"name,omitempty"`

	// DNSName is the dns name of the load balancer.
	DNSName string `json:"dnsName,omitempty"`

	// Scheme is the load balancer scheme, either internet-facing or private.
	Scheme ClassicELBScheme `json:"scheme,omitempty"`

	// AvailabilityZones is an array of availability zones in the VPC attached to the load balancer.
	AvailabilityZones []string `json:"availabilityZones,omitempty"`

	// SubnetIDs is an array of subnets in the VPC attached to the load balancer.
	SubnetIDs []string `json:"subnetIds,omitempty"`

	// SecurityGroupIDs is an array of security groups assigned to the load balancer.
	SecurityGroupIDs []string `json:"securityGroupIds,omitempty"`

	// Listeners is an array of classic elb listeners associated with the load balancer. There must be at least one.
	Listeners []*ClassicELBListener `json:"listeners,omitempty"`

	// HealthCheck is the classic elb health check associated with the load balancer.
	HealthCheck *ClassicELBHealthCheck `json:"healthChecks,omitempty"`

	// Attributes defines extra attributes associated with the load balancer.
	Attributes ClassicELBAttributes `json:"attributes,omitempty"`

	// Tags is a map of tags associated with the load balancer.
	Tags map[string]string `json:"tags,omitempty"`
}

ClassicELB defines an AWS classic load balancer.

func (*ClassicELB) DeepCopy

func (in *ClassicELB) DeepCopy() *ClassicELB

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClassicELB.

func (*ClassicELB) DeepCopyInto

func (in *ClassicELB) DeepCopyInto(out *ClassicELB)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ClassicELBAttributes

type ClassicELBAttributes struct {
	// IdleTimeout is time that the connection is allowed to be idle (no data
	// has been sent over the connection) before it is closed by the load balancer.
	IdleTimeout time.Duration `json:"idleTimeout,omitempty"`

	// CrossZoneLoadBalancing enables the classic load balancer load balancing.
	// +optional
	CrossZoneLoadBalancing bool `json:"crossZoneLoadBalancing,omitempty"`
}

ClassicELBAttributes defines extra attributes associated with a classic load balancer.

func (*ClassicELBAttributes) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClassicELBAttributes.

func (*ClassicELBAttributes) DeepCopyInto

func (in *ClassicELBAttributes) DeepCopyInto(out *ClassicELBAttributes)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ClassicELBHealthCheck

type ClassicELBHealthCheck struct {
	Target             string        `json:"target"`
	Interval           time.Duration `json:"interval"`
	Timeout            time.Duration `json:"timeout"`
	HealthyThreshold   int64         `json:"healthyThreshold"`
	UnhealthyThreshold int64         `json:"unhealthyThreshold"`
}

ClassicELBHealthCheck defines an AWS classic load balancer health check.

func (*ClassicELBHealthCheck) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClassicELBHealthCheck.

func (*ClassicELBHealthCheck) DeepCopyInto

func (in *ClassicELBHealthCheck) DeepCopyInto(out *ClassicELBHealthCheck)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ClassicELBListener

type ClassicELBListener struct {
	Protocol         ClassicELBProtocol `json:"protocol"`
	Port             int64              `json:"port"`
	InstanceProtocol ClassicELBProtocol `json:"instanceProtocol"`
	InstancePort     int64              `json:"instancePort"`
}

ClassicELBListener defines an AWS classic load balancer listener.

func (*ClassicELBListener) DeepCopy

func (in *ClassicELBListener) DeepCopy() *ClassicELBListener

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClassicELBListener.

func (*ClassicELBListener) DeepCopyInto

func (in *ClassicELBListener) DeepCopyInto(out *ClassicELBListener)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ClassicELBProtocol

type ClassicELBProtocol string

ClassicELBProtocol defines listener protocols for a classic load balancer.

type ClassicELBScheme

type ClassicELBScheme string

ClassicELBScheme defines the scheme of a classic load balancer.

func (ClassicELBScheme) String added in v0.6.9

func (e ClassicELBScheme) String() string

type CloudInit

type CloudInit struct {
	// InsecureSkipSecretsManager, when set to true will not use AWS Secrets Manager
	// or AWS Systems Manager Parameter Store to ensure privacy of userdata.
	// By default, a cloud-init boothook shell script is prepended to download
	// the userdata from Secrets Manager and additionally delete the secret.
	InsecureSkipSecretsManager bool `json:"insecureSkipSecretsManager,omitempty"`

	// SecretCount is the number of secrets used to form the complete secret
	// +optional
	SecretCount int32 `json:"secretCount,omitempty"`

	// SecretPrefix is the prefix for the secret name. This is stored
	// temporarily, and deleted when the machine registers as a node against
	// the workload cluster.
	// +optional
	SecretPrefix string `json:"secretPrefix,omitempty"`

	// SecureSecretsBackend, when set to parameter-store will utilize the AWS Systems Manager
	// Parameter Storage to distribute secrets. By default or with the value of secrets-manager,
	// will use AWS Secrets Manager instead.
	// +optional
	// +kubebuilder:validation:Enum=secrets-manager;ssm-parameter-store
	SecureSecretsBackend SecretBackend `json:"secureSecretsBackend,omitempty"`
}

CloudInit defines options related to the bootstrapping systems where CloudInit is used.

func (*CloudInit) DeepCopy

func (in *CloudInit) DeepCopy() *CloudInit

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CloudInit.

func (*CloudInit) DeepCopyInto

func (in *CloudInit) DeepCopyInto(out *CloudInit)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Filter

type Filter struct {
	// Name of the filter. Filter names are case-sensitive.
	Name string `json:"name"`

	// Values includes one or more filter values. Filter values are case-sensitive.
	Values []string `json:"values"`
}

Filter is a filter used to identify an AWS resource

func (*Filter) DeepCopy

func (in *Filter) DeepCopy() *Filter

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Filter.

func (*Filter) DeepCopyInto

func (in *Filter) DeepCopyInto(out *Filter)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IngressRule

type IngressRule struct {
	Description string                `json:"description"`
	Protocol    SecurityGroupProtocol `json:"protocol"`
	FromPort    int64                 `json:"fromPort"`
	ToPort      int64                 `json:"toPort"`

	// List of CIDR blocks to allow access from. Cannot be specified with SourceSecurityGroupID.
	// +optional
	CidrBlocks []string `json:"cidrBlocks,omitempty"`

	// The security group id to allow access from. Cannot be specified with CidrBlocks.
	// +optional
	SourceSecurityGroupIDs []string `json:"sourceSecurityGroupIds,omitempty"`
}

IngressRule defines an AWS ingress rule for security groups.

func (*IngressRule) DeepCopy

func (in *IngressRule) DeepCopy() *IngressRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressRule.

func (*IngressRule) DeepCopyInto

func (in *IngressRule) DeepCopyInto(out *IngressRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IngressRule) Equals

func (i *IngressRule) Equals(o *IngressRule) bool

Equals returns true if two IngressRule are equal

func (*IngressRule) String

func (i *IngressRule) String() string

String returns a string representation of the ingress rule.

type IngressRules

type IngressRules []*IngressRule

IngressRules is a slice of AWS ingress rules for security groups.

func (IngressRules) DeepCopy

func (in IngressRules) DeepCopy() IngressRules

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressRules.

func (IngressRules) DeepCopyInto

func (in IngressRules) DeepCopyInto(out *IngressRules)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (IngressRules) Difference

func (i IngressRules) Difference(o IngressRules) (out IngressRules)

Difference returns the difference between this slice and the other slice.

type Instance

type Instance struct {
	ID string `json:"id"`

	// The current state of the instance.
	State InstanceState `json:"instanceState,omitempty"`

	// The instance type.
	Type string `json:"type,omitempty"`

	// The ID of the subnet of the instance.
	SubnetID string `json:"subnetId,omitempty"`

	// The ID of the AMI used to launch the instance.
	ImageID string `json:"imageId,omitempty"`

	// The name of the SSH key pair.
	SSHKeyName *string `json:"sshKeyName,omitempty"`

	// SecurityGroupIDs are one or more security group IDs this instance belongs to.
	SecurityGroupIDs []string `json:"securityGroupIds,omitempty"`

	// UserData is the raw data script passed to the instance which is run upon bootstrap.
	// This field must not be base64 encoded and should only be used when running a new instance.
	UserData *string `json:"userData,omitempty"`

	// The name of the IAM instance profile associated with the instance, if applicable.
	IAMProfile string `json:"iamProfile,omitempty"`

	// Addresses contains the AWS instance associated addresses.
	Addresses []clusterv1.MachineAddress `json:"addresses,omitempty"`

	// The private IPv4 address assigned to the instance.
	PrivateIP *string `json:"privateIp,omitempty"`

	// The public IPv4 address assigned to the instance, if applicable.
	PublicIP *string `json:"publicIp,omitempty"`

	// Specifies whether enhanced networking with ENA is enabled.
	ENASupport *bool `json:"enaSupport,omitempty"`

	// Indicates whether the instance is optimized for Amazon EBS I/O.
	EBSOptimized *bool `json:"ebsOptimized,omitempty"`

	// Configuration options for the root storage volume.
	// +optional
	RootVolume *Volume `json:"rootVolume,omitempty"`

	// Configuration options for the non root storage volumes.
	// +optional
	NonRootVolumes []*Volume `json:"nonRootVolumes,omitempty"`

	// Specifies ENIs attached to instance
	NetworkInterfaces []string `json:"networkInterfaces,omitempty"`

	// The tags associated with the instance.
	Tags map[string]string `json:"tags,omitempty"`

	// Availability zone of instance
	AvailabilityZone string `json:"availabilityZone,omitempty"`

	// SpotMarketOptions option for configuring instances to be run using AWS Spot instances.
	SpotMarketOptions *SpotMarketOptions `json:"spotMarketOptions,omitempty"`

	// Tenancy indicates if instance should run on shared or single-tenant hardware.
	// +optional
	Tenancy string `json:"tenancy,omitempty"`
}

Instance describes an AWS instance.

func (*Instance) DeepCopy

func (in *Instance) DeepCopy() *Instance

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Instance.

func (*Instance) DeepCopyInto

func (in *Instance) DeepCopyInto(out *Instance)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type InstanceState

type InstanceState string

InstanceState describes the state of an AWS instance.

type Network

type Network struct {
	// SecurityGroups is a map from the role/kind of the security group to its unique name, if any.
	SecurityGroups map[SecurityGroupRole]SecurityGroup `json:"securityGroups,omitempty"`

	// APIServerELB is the Kubernetes api server classic load balancer.
	APIServerELB ClassicELB `json:"apiServerElb,omitempty"`
}

Network encapsulates AWS networking resources.

func (*Network) DeepCopy

func (in *Network) DeepCopy() *Network

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Network.

func (*Network) DeepCopyInto

func (in *Network) DeepCopyInto(out *Network)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NetworkSpec

type NetworkSpec struct {
	// VPC configuration.
	// +optional
	VPC VPCSpec `json:"vpc,omitempty"`

	// Subnets configuration.
	// +optional
	Subnets Subnets `json:"subnets,omitempty"`

	// CNI configuration
	// +optional
	CNI *CNISpec `json:"cni,omitempty"`

	// SecurityGroupOverrides is an optional set of security groups to use for cluster instances
	// This is optional - if not provided new security groups will be created for the cluster
	// +optional
	SecurityGroupOverrides map[SecurityGroupRole]string `json:"securityGroupOverrides,omitempty"`
}

NetworkSpec encapsulates all things related to AWS network.

func (*NetworkSpec) DeepCopy

func (in *NetworkSpec) DeepCopy() *NetworkSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkSpec.

func (*NetworkSpec) DeepCopyInto

func (in *NetworkSpec) DeepCopyInto(out *NetworkSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ResourceLifecycle

type ResourceLifecycle string

ResourceLifecycle configures the lifecycle of a resource

type RouteTable

type RouteTable struct {
	ID string `json:"id"`
}

RouteTable defines an AWS routing table.

func (*RouteTable) DeepCopy

func (in *RouteTable) DeepCopy() *RouteTable

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RouteTable.

func (*RouteTable) DeepCopyInto

func (in *RouteTable) DeepCopyInto(out *RouteTable)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretBackend added in v0.6.1

type SecretBackend string

SecretBackend defines variants for backend secret storage.

type SecurityGroup

type SecurityGroup struct {
	// ID is a unique identifier.
	ID string `json:"id"`

	// Name is the security group name.
	Name string `json:"name"`

	// IngressRules is the inbound rules associated with the security group.
	// +optional
	IngressRules IngressRules `json:"ingressRule,omitempty"`

	// Tags is a map of tags associated with the security group.
	Tags Tags `json:"tags,omitempty"`
}

SecurityGroup defines an AWS security group.

func (*SecurityGroup) DeepCopy

func (in *SecurityGroup) DeepCopy() *SecurityGroup

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecurityGroup.

func (*SecurityGroup) DeepCopyInto

func (in *SecurityGroup) DeepCopyInto(out *SecurityGroup)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SecurityGroup) String

func (s *SecurityGroup) String() string

String returns a string representation of the security group.

type SecurityGroupProtocol

type SecurityGroupProtocol string

SecurityGroupProtocol defines the protocol type for a security group rule.

type SecurityGroupRole

type SecurityGroupRole string

SecurityGroupRole defines the unique role of a security group.

type SpotMarketOptions added in v0.6.0

type SpotMarketOptions struct {
	// MaxPrice defines the maximum price the user is willing to pay for Spot VM instances
	// +optional
	// +kubebuilder:validation:pattern="^[0-9]+(\.[0-9]+)?$"
	MaxPrice *string `json:"maxPrice,omitempty"`
}

SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.

func (*SpotMarketOptions) DeepCopy added in v0.6.0

func (in *SpotMarketOptions) DeepCopy() *SpotMarketOptions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SpotMarketOptions.

func (*SpotMarketOptions) DeepCopyInto added in v0.6.0

func (in *SpotMarketOptions) DeepCopyInto(out *SpotMarketOptions)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SubnetSpec

type SubnetSpec struct {
	// ID defines a unique identifier to reference this resource.
	ID string `json:"id,omitempty"`

	// CidrBlock is the CIDR block to be used when the provider creates a managed VPC.
	CidrBlock string `json:"cidrBlock,omitempty"`

	// AvailabilityZone defines the availability zone to use for this subnet in the cluster's region.
	AvailabilityZone string `json:"availabilityZone,omitempty"`

	// IsPublic defines the subnet as a public subnet. A subnet is public when it is associated with a route table that has a route to an internet gateway.
	// +optional
	IsPublic bool `json:"isPublic"`

	// RouteTableID is the routing table id associated with the subnet.
	// +optional
	RouteTableID *string `json:"routeTableId,omitempty"`

	// NatGatewayID is the NAT gateway id associated with the subnet.
	// Ignored unless the subnet is managed by the provider, in which case this is set on the public subnet where the NAT gateway resides. It is then used to determine routes for private subnets in the same AZ as the public subnet.
	// +optional
	NatGatewayID *string `json:"natGatewayId,omitempty"`

	// Tags is a collection of tags describing the resource.
	Tags Tags `json:"tags,omitempty"`
}

SubnetSpec configures an AWS Subnet.

func (*SubnetSpec) DeepCopy

func (in *SubnetSpec) DeepCopy() *SubnetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubnetSpec.

func (*SubnetSpec) DeepCopyInto

func (in *SubnetSpec) DeepCopyInto(out *SubnetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SubnetSpec) String

func (s *SubnetSpec) String() string

String returns a string representation of the subnet.

type Subnets

type Subnets []*SubnetSpec

Subnets is a slice of Subnet.

func (Subnets) DeepCopy

func (in Subnets) DeepCopy() Subnets

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Subnets.

func (Subnets) DeepCopyInto

func (in Subnets) DeepCopyInto(out *Subnets)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (Subnets) FilterByZone

func (s Subnets) FilterByZone(zone string) (res Subnets)

FilterByZone returns a slice containing all subnets that live in the availability zone specified.

func (Subnets) FilterPrivate

func (s Subnets) FilterPrivate() (res Subnets)

FilterPrivate returns a slice containing all subnets marked as private.

func (Subnets) FilterPublic

func (s Subnets) FilterPublic() (res Subnets)

FilterPublic returns a slice containing all subnets marked as public.

func (Subnets) FindByID

func (s Subnets) FindByID(id string) *SubnetSpec

FindByID returns a single subnet matching the given id or nil.

func (Subnets) FindEqual added in v0.5.5

func (s Subnets) FindEqual(spec *SubnetSpec) *SubnetSpec

FindEqual returns a subnet spec that is equal to the one passed in. Two subnets are defined equal to each other if their id is equal or if they are in the same vpc and the cidr block is the same.

func (Subnets) GetUniqueZones added in v0.6.0

func (s Subnets) GetUniqueZones() []string

GetUniqueZones returns a slice containing the unique zones of the subnets

func (Subnets) IDs added in v0.6.5

func (s Subnets) IDs() []string

IDs returns a slice of the subnet ids

func (Subnets) ToMap

func (s Subnets) ToMap() map[string]*SubnetSpec

ToMap returns a map from id to subnet.

type Tags

type Tags map[string]string

Tags defines a map of tags.

func Build

func Build(params BuildParams) Tags

Build builds tags including the cluster tag and returns them in map form.

func (Tags) DeepCopy

func (in Tags) DeepCopy() Tags

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Tags.

func (Tags) DeepCopyInto

func (in Tags) DeepCopyInto(out *Tags)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (Tags) Difference

func (t Tags) Difference(other Tags) Tags

Difference returns the difference between this map of tags and the other map of tags. Items are considered equals if key and value are equals.

func (Tags) Equals

func (t Tags) Equals(other Tags) bool

Equals returns true if the tags are equal.

func (Tags) GetRole

func (t Tags) GetRole() string

GetRole returns the Cluster API role for the tagged resource

func (Tags) HasAWSCloudProviderOwned

func (t Tags) HasAWSCloudProviderOwned(cluster string) bool

HasOwned returns true if the tags contains a tag that marks the resource as owned by the cluster from the perspective of the in-tree cloud provider.

func (Tags) HasOwned

func (t Tags) HasOwned(cluster string) bool

HasOwned returns true if the tags contains a tag that marks the resource as owned by the cluster from the perspective of this management tooling.

func (Tags) Merge

func (t Tags) Merge(other Tags)

Merge merges in tags from other. If a tag already exists, it is replaced by the tag in other.

type VPCSpec

type VPCSpec struct {
	// ID is the vpc-id of the VPC this provider should use to create resources.
	ID string `json:"id,omitempty"`

	// CidrBlock is the CIDR block to be used when the provider creates a managed VPC.
	// Defaults to 10.0.0.0/16.
	CidrBlock string `json:"cidrBlock,omitempty"`

	// InternetGatewayID is the id of the internet gateway associated with the VPC.
	// +optional
	InternetGatewayID *string `json:"internetGatewayId,omitempty"`

	// Tags is a collection of tags describing the resource.
	Tags Tags `json:"tags,omitempty"`

	// AvailabilityZoneUsageLimit specifies the maximum number of availability zones (AZ) that
	// should be used in a region when automatically creating subnets. If a region has more
	// than this number of AZs then this number of AZs will be picked randomly when creating
	// default subnets. Defaults to 3
	// +kubebuilder:default=3
	// +kubebuilder:validation:Minimum=1
	AvailabilityZoneUsageLimit *int `json:"availabilityZoneUsageLimit,omitempty"`

	// AvailabilityZoneSelection specifies how AZs should be selected if there are more AZs
	// in a region than specified by AvailabilityZoneUsageLimit. There are 2 selection schemes:
	// Ordered - selects based on alphabetical order
	// Random - selects AZs randomly in a region
	// Defaults to Ordered
	// +kubebuilder:default=Ordered
	// +kubebuilder:validation:Enum=Ordered;Random
	AvailabilityZoneSelection *AZSelectionScheme `json:"availabilityZoneSelection,omitempty"`
}

VPCSpec configures an AWS VPC.

func (*VPCSpec) DeepCopy

func (in *VPCSpec) DeepCopy() *VPCSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VPCSpec.

func (*VPCSpec) DeepCopyInto

func (in *VPCSpec) DeepCopyInto(out *VPCSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*VPCSpec) IsManaged added in v0.5.5

func (v *VPCSpec) IsManaged(clusterName string) bool

IsManaged returns true if VPC is managed.

func (*VPCSpec) IsUnmanaged

func (v *VPCSpec) IsUnmanaged(clusterName string) bool

IsUnmanaged returns true if the VPC is unmanaged.

func (*VPCSpec) String

func (v *VPCSpec) String() string

String returns a string representation of the VPC.

type Volume added in v0.6.0

type Volume struct {
	// Device name
	// +optional
	DeviceName string `json:"deviceName,omitempty"`

	// Size specifies size (in Gi) of the storage device.
	// Must be greater than the image snapshot size or 8 (whichever is greater).
	// +kubebuilder:validation:Minimum=8
	Size int64 `json:"size"`

	// Type is the type of the volume (e.g. gp2, io1, etc...).
	// +optional
	Type string `json:"type,omitempty"`

	// IOPS is the number of IOPS requested for the disk. Not applicable to all types.
	// +optional
	IOPS int64 `json:"iops,omitempty"`

	// Encrypted is whether the volume should be encrypted or not.
	// +optional
	Encrypted bool `json:"encrypted,omitempty"`

	// EncryptionKey is the KMS key to use to encrypt the volume. Can be either a KMS key ID or ARN.
	// If Encrypted is set and this is omitted, the default AWS key will be used.
	// The key must already exist and be accessible by the controller.
	// +optional
	EncryptionKey string `json:"encryptionKey,omitempty"`
}

Volume encapsulates the configuration options for the storage device

func (*Volume) DeepCopy added in v0.6.0

func (in *Volume) DeepCopy() *Volume

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Volume.

func (*Volume) DeepCopyInto added in v0.6.0

func (in *Volume) DeepCopyInto(out *Volume)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL