Distribution is the Schema for the Distributions API. Provides a CloudFront web distribution resource.
Type
CRD
Group
cloudfront.aws.upbound.io
Version
v1beta1
apiVersion: cloudfront.aws.upbound.io/v1beta1
kind: Distribution
DistributionSpec defines the desired state of Distribution
No description provided.
Extra CNAMEs (alternate domain names), if any, for this distribution.
One or more custom error response elements (multiples allowed).
The default cache behavior for this distribution (maximum one).
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Specifies the Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
A config block that triggers a lambda function with specific actions (maximum 4).
A list of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
The logging configuration that controls how logs are written to your distribution (maximum one).
An ordered list of cache behaviors resource for this distribution. List from top to bottom in order of precedence. The topmost cache behavior will have precedence 0.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Specifies the Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
Reference to a Function in cloudfront to populate functionArn.
Policies for referencing.
Selector for a Function in cloudfront to populate functionArn.
Policies for selection.
A config block that triggers a lambda function with specific actions (maximum 4).
Reference to a Function in lambda to populate lambdaArn.
Policies for referencing.
Selector for a Function in lambda to populate lambdaArn.
Policies for selection.
A list of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
One or more origins for this distribution (multiples allowed).
The CloudFront custom origin configuration information. If an S3 origin is required, use s3_origin_config instead.
The SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS. A list of one or more of SSLv3, TLSv1, TLSv1.1, and TLSv1.2.
The CloudFront Origin Shield configuration information. Using Origin Shield can help reduce the load on your origin. For more information, see Using Origin Shield in the Amazon CloudFront Developer Guide.
The CloudFront S3 origin configuration information. If a custom origin is required, use custom_origin_config instead.
Reference to a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for referencing.
Selector for a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for selection.
One or more origin_group for this distribution (multiples allowed).
The failover criteria for when to failover to the secondary origin
A list of HTTP status codes for the origin group
Ordered member configuration blocks assigned to the origin group, where the first member is the primary origin. You must specify two members.
The restriction configuration for this distribution (maximum one).
No description provided.
The ISO 3166-1-alpha-2 codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist).
The SSL configuration for this distribution (maximum one).
ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.
Policies for referencing.
ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. providerConfigRef
Policies for referencing.
PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.
WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.
DistributionStatus defines the observed state of Distribution.
No description provided.
A list of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of nested attributes for each key group
Set of CloudFront key pair IDs
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
List of nested attributes for each key group
Set of CloudFront key pair IDs
Conditions of the resource.
example-distribution
apiVersion: cloudfront.aws.upbound.io/v1beta1
kind: Distribution
metadata:
labels:
testing.upbound.io/example-name: distribution
name: example-distribution
spec:
forProvider:
comment: Some comment
defaultCacheBehavior:
- allowedMethods:
- DELETE
- GET
- HEAD
- OPTIONS
- PATCH
- POST
- PUT
cachedMethods:
- GET
- HEAD
defaultTtl: 3600
forwardedValues:
- cookies:
- forward: none
queryString: false
maxTtl: 86400
minTtl: 0
targetOriginId: customOrigin
viewerProtocolPolicy: allow-all
defaultRootObject: index.html
enabled: true
isIpv6Enabled: true
orderedCacheBehavior:
- allowedMethods:
- GET
- HEAD
- OPTIONS
cachedMethods:
- GET
- HEAD
- OPTIONS
compress: true
defaultTtl: 86400
forwardedValues:
- cookies:
- forward: none
headers:
- Origin
queryString: false
maxTtl: 31536000
minTtl: 0
pathPattern: /content/immutable/*
targetOriginId: customOrigin
viewerProtocolPolicy: redirect-to-https
- allowedMethods:
- GET
- HEAD
- OPTIONS
cachedMethods:
- GET
- HEAD
compress: true
defaultTtl: 3600
forwardedValues:
- cookies:
- forward: none
queryString: false
maxTtl: 86400
minTtl: 0
pathPattern: /content/*
targetOriginId: customOrigin
viewerProtocolPolicy: redirect-to-https
origin:
- customOriginConfig:
- httpPort: 80
httpsPort: 443
originKeepaliveTimeout: 5
originProtocolPolicy: https-only
originReadTimeout: 10
originSslProtocols:
- TLSv1.2
domainName: app.my.cloud
originId: customOrigin
priceClass: PriceClass_200
region: us-west-1
restrictions:
- geoRestriction:
- locations:
- US
- CA
- GB
- DE
restrictionType: whitelist
tags:
Environment: production
viewerCertificate:
- cloudfrontDefaultCertificate: true
© 2022 Upbound, Inc.
Discover the building blocksfor your internal cloud platform.