1apiVersion: aws.vault.m.upbound.io/v1alpha1
2kind: AuthBackendRole
AuthBackendRoleSpec defines the desired state of AuthBackendRole
(No description available)
Reference to a Backend in auth to populate backend.
Policies for referencing.
Selector for a Backend in auth to populate backend.
Policies for selection.
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the account ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances with this account ID in their identity document will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the AMI ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances using this AMI ID will be permitted to log in.
Only EC2 instances that match this instance ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must be associated with an IAM instance profile ARN which has a prefix that matches the value specified by this field. The value is prefix-matched as though it were a glob ending in *. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with an IAM instance profile ARN that matches this value will be permitted to log in.
If set, defines the IAM principal that must be authenticated when auth_type is set to iam. Wildcards are supported at the end of the ARN. The IAM principal that must be authenticated using the iam auth method.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must match the IAM role ARN specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances that match this IAM role ARN will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that the region in their identity document must match the one specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances in this region will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the subnet ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this subnet ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the VPC ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this VPC ID will be permitted to log in.
List of CIDR blocks; if set, specifies blocks of IP addresses which can authenticate successfully, and ties the resulting token to these blocks as well. Specifies the blocks of IP addresses which are allowed to use the generated token
List of policies to encode onto generated tokens. Depending on the auth method, this list may be supplemented by user/group/other values. Generated Token's Policies
THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.
Reference to a Backend in auth to populate backend.
Policies for referencing.
Selector for a Backend in auth to populate backend.
Policies for selection.
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the account ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances with this account ID in their identity document will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the AMI ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances using this AMI ID will be permitted to log in.
Only EC2 instances that match this instance ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must be associated with an IAM instance profile ARN which has a prefix that matches the value specified by this field. The value is prefix-matched as though it were a glob ending in *. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with an IAM instance profile ARN that matches this value will be permitted to log in.
If set, defines the IAM principal that must be authenticated when auth_type is set to iam. Wildcards are supported at the end of the ARN. The IAM principal that must be authenticated using the iam auth method.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must match the IAM role ARN specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances that match this IAM role ARN will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that the region in their identity document must match the one specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances in this region will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the subnet ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this subnet ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the VPC ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this VPC ID will be permitted to log in.
List of CIDR blocks; if set, specifies blocks of IP addresses which can authenticate successfully, and ties the resulting token to these blocks as well. Specifies the blocks of IP addresses which are allowed to use the generated token
List of policies to encode onto generated tokens. Depending on the auth method, this list may be supplemented by user/group/other values. Generated Token's Policies
THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md
WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.
AuthBackendRoleStatus defines the observed state of AuthBackendRole.
(No description available)
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the account ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances with this account ID in their identity document will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they should be using the AMI ID specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances using this AMI ID will be permitted to log in.
Only EC2 instances that match this instance ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must be associated with an IAM instance profile ARN which has a prefix that matches the value specified by this field. The value is prefix-matched as though it were a glob ending in *. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with an IAM instance profile ARN that matches this value will be permitted to log in.
If set, defines the IAM principal that must be authenticated when auth_type is set to iam. Wildcards are supported at the end of the ARN. The IAM principal that must be authenticated using the iam auth method.
If set, defines a constraint on the EC2 instances that can perform the login operation that they must match the IAM role ARN specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances that match this IAM role ARN will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that the region in their identity document must match the one specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances in this region will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the subnet ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this subnet ID will be permitted to log in.
If set, defines a constraint on the EC2 instances that can perform the login operation that they be associated with the VPC ID that matches the value specified by this field. auth_type must be set to ec2 or inferred_entity_type must be set to ec2_instance to use this constraint. Only EC2 instances associated with this VPC ID will be permitted to log in.
List of CIDR blocks; if set, specifies blocks of IP addresses which can authenticate successfully, and ties the resulting token to these blocks as well. Specifies the blocks of IP addresses which are allowed to use the generated token
List of policies to encode onto generated tokens. Depending on the auth method, this list may be supplemented by user/group/other values. Generated Token's Policies
Conditions of the resource.