Skip to content

Update to ACK runtime v0.39.0, code-generator v0.39.1 #122

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 12, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions apis/v1alpha1/ack-generate-metadata.yaml
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
ack_generate_info:
build_date: "2024-08-29T17:09:54Z"
build_hash: f8f98563404066ac3340db0a049d2e530e5c51cc
go_version: go1.22.5
version: v0.38.1
build_date: "2024-10-10T04:09:12Z"
build_hash: 36c2d234498c2bc4f60773ab8df632af4067f43b
go_version: go1.23.2
version: v0.39.1
api_directory_checksum: 761a2c708651b0273bf39d98dddaf029de23d337
api_version: v1alpha1
aws_sdk_go_version: v1.49.0
Expand Down
2 changes: 1 addition & 1 deletion config/controller/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,4 @@ kind: Kustomization
images:
- name: controller
newName: public.ecr.aws/aws-controllers-k8s/iam-controller
newTag: 1.3.12
newTag: 1.3.13
13 changes: 2 additions & 11 deletions config/crd/bases/iam.services.k8s.aws_groups.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
controller-gen.kubebuilder.io/version: v0.16.2
name: groups.iam.services.k8s.aws
spec:
group: iam.services.k8s.aws
Expand Down Expand Up @@ -40,19 +40,14 @@ spec:
description: |-
GroupSpec defines the desired state of Group.


Contains information about an IAM group entity.


This data type is used as a response element in the following operations:


* CreateGroup


* GetGroup


* ListGroups
properties:
inlinePolicies:
Expand All @@ -63,7 +58,6 @@ spec:
description: |-
The name of the group to create. Do not include the path in this value.


IAM user, group, role, and policy names must be unique within the account.
Names are not distinguished by case. For example, you cannot create resources
named both "MyResource" and "myresource".
Expand All @@ -74,11 +68,9 @@ spec:
(https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
in the IAM User Guide.


This parameter is optional. If it is not included, it defaults to a slash
(/).


This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
a string of characters consisting of either a forward slash (/) by itself
or a string that must begin and end with forward slashes. In addition, it
Expand All @@ -94,7 +86,7 @@ spec:
items:
description: "AWSResourceReferenceWrapper provides a wrapper around
*AWSResourceReference\ntype to provide more user friendly syntax
for references using 'from' field\nEx:\nAPIIDRef:\n\n\n\tfrom:\n\t
for references using 'from' field\nEx:\nAPIIDRef:\n\n\tfrom:\n\t
\ name: my-api"
properties:
from:
Expand Down Expand Up @@ -129,7 +121,6 @@ spec:
when it has verified that an "adopted" resource (a resource where the
ARN annotation was set by the Kubernetes user on the CR) exists and
matches the supplied CR's Spec field values.
TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
https://github.com./aws/aws-controllers-k8s/issues/270
type: string
ownerAccountID:
Expand Down
15 changes: 2 additions & 13 deletions config/crd/bases/iam.services.k8s.aws_instanceprofiles.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
controller-gen.kubebuilder.io/version: v0.16.2
name: instanceprofiles.iam.services.k8s.aws
spec:
group: iam.services.k8s.aws
Expand Down Expand Up @@ -40,29 +40,22 @@ spec:
description: |-
InstanceProfileSpec defines the desired state of InstanceProfile.


Contains information about an instance profile.


This data type is used as a response element in the following operations:


* CreateInstanceProfile


* GetInstanceProfile


* ListInstanceProfiles


* ListInstanceProfilesForRole
properties:
name:
description: |-
The name of the instance profile to create.


This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
a string of characters consisting of upper and lowercase alphanumeric characters
with no spaces. You can also include any of the following characters: _+=,.@-
Expand All @@ -73,11 +66,9 @@ spec:
Identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
in the IAM User Guide.


This parameter is optional. If it is not included, it defaults to a slash
(/).


This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
a string of characters consisting of either a forward slash (/) by itself
or a string that must begin and end with forward slashes. In addition, it
Expand All @@ -90,7 +81,7 @@ spec:
roleRef:
description: "AWSResourceReferenceWrapper provides a wrapper around
*AWSResourceReference\ntype to provide more user friendly syntax
for references using 'from' field\nEx:\nAPIIDRef:\n\n\n\tfrom:\n\t
for references using 'from' field\nEx:\nAPIIDRef:\n\n\tfrom:\n\t
\ name: my-api"
properties:
from:
Expand All @@ -111,7 +102,6 @@ spec:
information about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
in the IAM User Guide.


If any one of the tags is invalid or if you exceed the allowed maximum number
of tags, then the entire request fails and the resource is not created.
items:
Expand Down Expand Up @@ -147,7 +137,6 @@ spec:
when it has verified that an "adopted" resource (a resource where the
ARN annotation was set by the Kubernetes user on the CR) exists and
matches the supplied CR's Spec field values.
TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
https://github.com./aws/aws-controllers-k8s/issues/270
type: string
ownerAccountID:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
controller-gen.kubebuilder.io/version: v0.16.2
name: openidconnectproviders.iam.services.k8s.aws
spec:
group: iam.services.k8s.aws
Expand Down Expand Up @@ -47,12 +47,10 @@ spec:
that identifies the application. This is the value that's sent as the client_id
parameter on OAuth requests.


You can register multiple client IDs with the same provider. For example,
you might have multiple applications that use the same OIDC provider. You
cannot register more than 100 client IDs with a single IAM OIDC provider.


There is no defined format for a client ID. The CreateOpenIDConnectProviderRequest
operation accepts client IDs up to 255 characters long.
items:
Expand All @@ -65,7 +63,6 @@ spec:
information about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
in the IAM User Guide.


If any one of the tags is invalid or if you exceed the allowed maximum number
of tags, then the entire request fails and the resource is not created.
items:
Expand All @@ -89,19 +86,16 @@ spec:
lets you maintain multiple thumbprints if the identity provider is rotating
certificates.


The server certificate thumbprint is the hex-encoded SHA-1 hash value of
the X.509 certificate used by the domain where the OpenID Connect provider
makes its keys available. It is always a 40-character string.


You must provide at least one thumbprint when creating an IAM OIDC provider.
For example, assume that the OIDC provider is server.example.com and the
provider stores its keys at https://keys.server.example.com/openid-connect.
In that case, the thumbprint string would be the hex-encoded SHA-1 hash value
of the certificate used by https://keys.server.example.com.


For more information about obtaining the OIDC provider thumbprint, see Obtaining
the thumbprint for an OpenID Connect provider (https://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc-obtain-thumbprint.html)
in the IAM user Guide.
Expand All @@ -116,7 +110,6 @@ spec:
Typically the URL consists of only a hostname, like https://server.example.org
or https://example.com. The URL should not contain a port number.


You cannot register the same provider multiple times in a single Amazon Web
Services account. If you try to submit a URL that has already been used for
an OpenID Connect provider in the Amazon Web Services account, you will get
Expand Down Expand Up @@ -144,7 +137,6 @@ spec:
when it has verified that an "adopted" resource (a resource where the
ARN annotation was set by the Kubernetes user on the CR) exists and
matches the supplied CR's Spec field values.
TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
https://github.com./aws/aws-controllers-k8s/issues/270
type: string
ownerAccountID:
Expand Down
24 changes: 1 addition & 23 deletions config/crd/bases/iam.services.k8s.aws_policies.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
controller-gen.kubebuilder.io/version: v0.16.2
name: policies.iam.services.k8s.aws
spec:
group: iam.services.k8s.aws
Expand Down Expand Up @@ -40,14 +40,11 @@ spec:
description: |-
PolicySpec defines the desired state of Policy.


Contains information about a managed policy.


This data type is used as a response element in the CreatePolicy, GetPolicy,
and ListPolicies operations.


For more information about managed policies, refer to Managed policies and
inline policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html)
in the IAM User Guide.
Expand All @@ -56,19 +53,16 @@ spec:
description: |-
A friendly description of the policy.


Typically used to store information about the permissions defined in the
policy. For example, "Grants access to production DynamoDB tables."


The policy description is immutable. After a value is assigned, it cannot
be changed.
type: string
name:
description: |-
The friendly name of the policy.


IAM user, group, role, and policy names must be unique within the account.
Names are not distinguished by case. For example, you cannot create resources
named both "MyResource" and "myresource".
Expand All @@ -77,60 +71,49 @@ spec:
description: |-
The path for the policy.


For more information about paths, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
in the IAM User Guide.


This parameter is optional. If it is not included, it defaults to a slash
(/).


This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
a string of characters consisting of either a forward slash (/) by itself
or a string that must begin and end with forward slashes. In addition, it
can contain any ASCII character from the ! (\u0021) through the DEL character
(\u007F), including most punctuation characters, digits, and upper and lowercased
letters.


You cannot use an asterisk (*) in the path name.
type: string
policyDocument:
description: |-
The JSON policy document that you want to use as the content for the new
policy.


You must provide policies in JSON format in IAM. However, for CloudFormation
templates formatted in YAML, you can provide the policy in JSON or YAML format.
CloudFormation always converts a YAML policy to JSON format before submitting
it to IAM.


The maximum length of the policy document that you can pass in this operation,
including whitespace, is listed below. To view the maximum character counts
of a managed policy with no whitespaces, see IAM and STS character quotas
(https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length).


To learn more about JSON policy grammar, see Grammar of the IAM JSON policy
language (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html)
in the IAM User Guide.


The regex pattern (http://wikipedia.org/wiki/regex) used to validate this
parameter is a string of characters consisting of the following:


* Any printable ASCII character ranging from the space character (\u0020)
through the end of the ASCII character range


* The printable characters in the Basic Latin and Latin-1 Supplement character
set (through \u00FF)


* The special characters tab (\u0009), line feed (\u000A), and carriage
return (\u000D)
type: string
Expand All @@ -141,7 +124,6 @@ spec:
about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
in the IAM User Guide.


If any one of the tags is invalid or if you exceed the allowed maximum number
of tags, then the entire request fails and the resource is not created.
items:
Expand Down Expand Up @@ -178,7 +160,6 @@ spec:
when it has verified that an "adopted" resource (a resource where the
ARN annotation was set by the Kubernetes user on the CR) exists and
matches the supplied CR's Spec field values.
TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
https://github.com./aws/aws-controllers-k8s/issues/270
type: string
ownerAccountID:
Expand Down Expand Up @@ -254,7 +235,6 @@ spec:
The number of entities (users and roles) for which the policy is used to
set the permissions boundary.


For more information about permissions boundaries, see Permissions boundaries
for IAM identities (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html)
in the IAM User Guide.
Expand All @@ -264,7 +244,6 @@ spec:
description: |-
The stable and unique string identifying the policy.


For more information about IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
in the IAM User Guide.
type: string
Expand All @@ -273,7 +252,6 @@ spec:
The date and time, in ISO 8601 date-time format (http://www.iso.org/iso/iso8601),
when the policy was last updated.


When a policy has only one version, this field contains the date and time
when the policy was created. When a policy has more than one version, this
field contains the date and time when the most recent policy version was
Expand Down
Loading