ListenerListener is the Schema for the Listeners API
TypeMR
Providerprovider-aws
Groupelbv2.aws.crossplane.io
Scopecluster
Versionv1alpha1

1apiVersion: elbv2.aws.crossplane.io/v1alpha1

2kind: Listener

kind
string
metadata
object
spec
object

ListenerSpec defines the desired state of Listener

forProvider
required
object

ListenerParameters defines the desired state of Listener

array

[TLS listeners] The name of the Application-Layer Protocol Negotiation (ALPN) policy. You can specify one policy name. The following are the possible values:

  • HTTP1Only

  • HTTP2Only

  • HTTP2Optional

  • HTTP2Preferred

  • None

For more information, see ALPN policies (https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html#alpn-policies) in the Network Load Balancers Guide.

array

[HTTPS and TLS listeners] The default certificate for the listener. You must provide exactly one certificate. Set CertificateArn to the certificate ARN but do not set IsDefault.

object

Reference to Certificates for Certificate ARN

name
required
string
policy
object

Policies for referencing.

resolve
string
object

Selector for references to Certificate for CertificateArn

policy
object

Policies for selection.

resolve
string
isDefault
boolean
defaultActions
required
array

The actions for the default rule.

actionType
required
string
object

Request parameters to use when integrating with Amazon Cognito to authenticate users.

object

Request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.

object

Information about an action that returns a custom HTTP response.

object

Information about a forward action.

object

Information about the target group stickiness for a rule.

array

One or more target groups. For Network Load Balancers, you can specify a single target group.

object

Reference to TargetGroupARN used to set TargetGroupARN

name
required
string
policy
object

Policies for referencing.

resolve
string
object

Selector for references to TargetGroup for TargetGroupARN

policy
object

Policies for selection.

resolve
string
weight
integer
order
integer
object

Information about a redirect action.

A URI consists of the following components: protocol://hostname:port/path?query. You must modify at least one of the following components to avoid a redirect loop: protocol, hostname, port, or path. Any components that you do not modify retain their original values.

You can reuse URI components using the following reserved keywords:

  • #{protocol}

  • #{host}

  • #{port}

  • #{path} (the leading "/" is removed)

  • #{query}

For example, you can change the path to "/new/#{path}", the hostname to "example.#{host}", or the query to "#{query}&value=xyz".

host
string
path
string
port
string
protocol
string
query
string
object

Reference to TargetGroupARN used to set TargetGroupARN

name
required
string
policy
object

Policies for referencing.

resolve
string
object

Selector for references to TargetGroups for TargetGroupARNs

policy
object

Policies for selection.

resolve
string
object

Ref to loadbalancer ARN

name
required
string
policy
object

Policies for referencing.

resolve
string
object

Selector for references to LoadBalancer for LoadBalancerARN

policy
object

Policies for selection.

resolve
string
port
integer
protocol
string
region
required
string
sslPolicy
string
tags
array

The tags to assign to the listener.

key
string
value
string
array

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. This field is planned to replace the DeletionPolicy field in a future release. Currently, both could be set independently and non-default values would be honored if the feature flag is enabled. If both are custom, the DeletionPolicy field will be ignored. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

name
required
string
policy
object

Policies for referencing.

resolve
string
object

PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

configRef
object

SecretStoreConfigRef specifies which secret store config should be used for this ConnectionSecret.

name
required
string
policy
object

Policies for referencing.

resolve
string
metadata
object

Metadata is the metadata for connection secret.

labels
object
type
string
name
required
string
object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.

name
required
string
namespace
required
string
status
object

ListenerStatus defines the observed state of Listener.

object

ListenerObservation defines the observed state of Listener

array

[HTTPS or TLS listener] The default certificate for the listener.

array

The default actions for the listener.

object

Request parameters to use when integrating with Amazon Cognito to authenticate users.

object

Request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.

object

Information about an action that returns a custom HTTP response.

object

Information about a forward action.

object

Information about the target group stickiness for a rule.

array

(No description available)

order
integer
object

Information about a redirect action.

A URI consists of the following components: protocol://hostname:port/path?query. You must modify at least one of the following components to avoid a redirect loop: protocol, hostname, port, or path. Any components that you do not modify retain their original values.

You can reuse URI components using the following reserved keywords:

  • #{protocol}

  • #{host}

  • #{port}

  • #{path} (the leading "/" is removed)

  • #{query}

For example, you can change the path to "/new/#{path}", the hostname to "example.#{host}", or the query to "#{query}&value=xyz".

host
string
path
string
port
string
protocol
string
query
string
type_
string
array

Conditions of the resource.

lastTransitionTime
required
string
message
string
reason
required
string
status
required
string
type
required
string
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More