Documentation
¶
Overview ¶
+k8s:deepcopy-gen=package Package v1alpha1 is the v1alpha1 version of the acm.services.k8s.aws API. +groupName=acm.services.k8s.aws
Index ¶
- Variables
- type ACMCertificateMetadata
- type ACMCertificateMetadataFilter
- type AcmeAccount
- type AcmeAccountStatus
- type AcmeAccountSummary
- type AcmeAuthorizationBehavior
- type AcmeContact
- type AcmeDomainValidationFailureReason
- type AcmeDomainValidationStatus
- type AcmeEndpoint
- type AcmeEndpointStatus
- type AcmeEndpointSummary
- type Certificate
- type CertificateDetail
- type CertificateExport
- type CertificateFilter
- type CertificateKeyPairOrigin
- type CertificateList
- type CertificateManagedBy
- type CertificateOptions
- type CertificateSearchResult
- type CertificateSpec
- type CertificateStatus
- type CertificateStatus_SDK
- type CertificateSummary
- type CertificateTransparencyLoggingPreference
- type CertificateType
- type ComparisonOperator
- type CustomAttribute
- type DNSPrevalidationDetails
- type DistinguishedName
- type DomainScopeOption
- type DomainStatus
- type DomainValidation
- type DomainValidationOption
- type ExtendedKeyUsage
- type ExtendedKeyUsageName
- type FailureDetails
- type FailureReason
- type Filters
- type GeneralName
- type HTTPRedirect
- type KeyAlgorithm
- type KeyUsage
- type KeyUsageName
- type OtherName
- type PrevalidationType
- type PublicKeyAlgorithm
- type RecordType
- type RenewalEligibility
- type RenewalStatus
- type RenewalSummary
- type ResourceRecord
- type RevocationReason
- type SearchCertificatesSortBy
- type SearchCertificatesSortOrder
- type SortBy
- type SortOrder
- type Tag
- type TimeType
- type TimestampRange
- type ValidationMethod
- type X509AttributeFilter
- type X509Attributes
Constants ¶
This section is empty.
Variables ¶
var ( // GroupVersion is the API Group Version used to register the objects GroupVersion = schema.GroupVersion{Group: "acm.services.k8s.aws", Version: "v1alpha1"} // SchemeBuilder is used to add go types to the GroupVersionKind scheme SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion} // AddToScheme adds the types in this group-version to the given scheme. AddToScheme = SchemeBuilder.AddToScheme )
Functions ¶
This section is empty.
Types ¶
type ACMCertificateMetadata ¶ added in v1.5.0
type ACMCertificateMetadata struct {
AcmeAccountID *string `json:"acmeAccountID,omitempty"`
AcmeEndpointARN *string `json:"acmeEndpointARN,omitempty"`
// The origin of the certificate's key pair.
CertificateKeyPairOrigin *string `json:"certificateKeyPairOrigin,omitempty"`
CreatedAt *metav1.Time `json:"createdAt,omitempty"`
ExportOption *string `json:"exportOption,omitempty"`
Exported *bool `json:"exported,omitempty"`
ImportedAt *metav1.Time `json:"importedAt,omitempty"`
InUse *bool `json:"inUse,omitempty"`
IssuedAt *metav1.Time `json:"issuedAt,omitempty"`
ManagedBy *string `json:"managedBy,omitempty"`
RenewalEligibility *string `json:"renewalEligibility,omitempty"`
RenewalStatus *string `json:"renewalStatus,omitempty"`
RevokedAt *metav1.Time `json:"revokedAt,omitempty"`
Status *string `json:"status,omitempty"`
Type *string `json:"type_,omitempty"`
ValidationMethod *string `json:"validationMethod,omitempty"`
}
Contains ACM-specific metadata about a certificate.
func (*ACMCertificateMetadata) DeepCopy ¶ added in v1.5.0
func (in *ACMCertificateMetadata) DeepCopy() *ACMCertificateMetadata
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ACMCertificateMetadata.
func (*ACMCertificateMetadata) DeepCopyInto ¶ added in v1.5.0
func (in *ACMCertificateMetadata) DeepCopyInto(out *ACMCertificateMetadata)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ACMCertificateMetadataFilter ¶ added in v1.5.0
type ACMCertificateMetadataFilter struct {
AcmeAccountID *string `json:"acmeAccountID,omitempty"`
AcmeEndpointARN *string `json:"acmeEndpointARN,omitempty"`
// The origin of the certificate's key pair.
CertificateKeyPairOrigin *string `json:"certificateKeyPairOrigin,omitempty"`
ExportOption *string `json:"exportOption,omitempty"`
Exported *bool `json:"exported,omitempty"`
InUse *bool `json:"inUse,omitempty"`
ManagedBy *string `json:"managedBy,omitempty"`
RenewalStatus *string `json:"renewalStatus,omitempty"`
Status *string `json:"status,omitempty"`
Type *string `json:"type_,omitempty"`
ValidationMethod *string `json:"validationMethod,omitempty"`
}
Filters certificates by ACM metadata.
func (*ACMCertificateMetadataFilter) DeepCopy ¶ added in v1.5.0
func (in *ACMCertificateMetadataFilter) DeepCopy() *ACMCertificateMetadataFilter
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ACMCertificateMetadataFilter.
func (*ACMCertificateMetadataFilter) DeepCopyInto ¶ added in v1.5.0
func (in *ACMCertificateMetadataFilter) DeepCopyInto(out *ACMCertificateMetadataFilter)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AcmeAccount ¶ added in v1.5.0
type AcmeAccount struct {
AccountURL *string `json:"accountURL,omitempty"`
PublicKeyThumbprint *string `json:"publicKeyThumbprint,omitempty"`
}
Contains detailed information about an ACME account.
func (*AcmeAccount) DeepCopy ¶ added in v1.5.0
func (in *AcmeAccount) DeepCopy() *AcmeAccount
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AcmeAccount.
func (*AcmeAccount) DeepCopyInto ¶ added in v1.5.0
func (in *AcmeAccount) DeepCopyInto(out *AcmeAccount)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AcmeAccountStatus ¶ added in v1.5.0
type AcmeAccountStatus string
const ( AcmeAccountStatus_DEACTIVATED AcmeAccountStatus = "DEACTIVATED" AcmeAccountStatus_REVOKED AcmeAccountStatus = "REVOKED" AcmeAccountStatus_VALID AcmeAccountStatus = "VALID" )
type AcmeAccountSummary ¶ added in v1.5.0
type AcmeAccountSummary struct {
AccountURL *string `json:"accountURL,omitempty"`
PublicKeyThumbprint *string `json:"publicKeyThumbprint,omitempty"`
}
Contains summary information about an ACME account.
func (*AcmeAccountSummary) DeepCopy ¶ added in v1.5.0
func (in *AcmeAccountSummary) DeepCopy() *AcmeAccountSummary
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AcmeAccountSummary.
func (*AcmeAccountSummary) DeepCopyInto ¶ added in v1.5.0
func (in *AcmeAccountSummary) DeepCopyInto(out *AcmeAccountSummary)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AcmeAuthorizationBehavior ¶ added in v1.5.0
type AcmeAuthorizationBehavior string
const (
AcmeAuthorizationBehavior_PRE_APPROVED AcmeAuthorizationBehavior = "PRE_APPROVED"
)
type AcmeContact ¶ added in v1.5.0
type AcmeContact string
const ( AcmeContact_NOT_REQUIRED AcmeContact = "NOT_REQUIRED" AcmeContact_REQUIRED AcmeContact = "REQUIRED" )
type AcmeDomainValidationFailureReason ¶ added in v1.5.0
type AcmeDomainValidationFailureReason string
const ( AcmeDomainValidationFailureReason_ACCESS_DENIED AcmeDomainValidationFailureReason = "ACCESS_DENIED" AcmeDomainValidationFailureReason_DOMAIN_MISMATCH AcmeDomainValidationFailureReason = "DOMAIN_MISMATCH" AcmeDomainValidationFailureReason_DOMAIN_NOT_ALLOWED AcmeDomainValidationFailureReason = "DOMAIN_NOT_ALLOWED" AcmeDomainValidationFailureReason_ENDPOINT_NOT_ACTIVE AcmeDomainValidationFailureReason = "ENDPOINT_NOT_ACTIVE" AcmeDomainValidationFailureReason_HOSTED_ZONE_NOT_FOUND AcmeDomainValidationFailureReason = "HOSTED_ZONE_NOT_FOUND" AcmeDomainValidationFailureReason_INTERNAL_FAILURE AcmeDomainValidationFailureReason = "INTERNAL_FAILURE" AcmeDomainValidationFailureReason_INVALID_CHANGE_BATCH AcmeDomainValidationFailureReason = "INVALID_CHANGE_BATCH" AcmeDomainValidationFailureReason_INVALID_PUBLIC_DOMAIN AcmeDomainValidationFailureReason = "INVALID_PUBLIC_DOMAIN" AcmeDomainValidationFailureReason_TIMED_OUT AcmeDomainValidationFailureReason = "TIMED_OUT" )
type AcmeDomainValidationStatus ¶ added in v1.5.0
type AcmeDomainValidationStatus string
const ( AcmeDomainValidationStatus_DELETING AcmeDomainValidationStatus = "DELETING" AcmeDomainValidationStatus_INVALID AcmeDomainValidationStatus = "INVALID" AcmeDomainValidationStatus_VALID AcmeDomainValidationStatus = "VALID" AcmeDomainValidationStatus_VALIDATING AcmeDomainValidationStatus = "VALIDATING" )
type AcmeEndpoint ¶ added in v1.5.0
type AcmeEndpoint struct {
CertificateTags []*Tag `json:"certificateTags,omitempty"`
EndpointURL *string `json:"endpointURL,omitempty"`
FailureReason *string `json:"failureReason,omitempty"`
}
Contains detailed information about an ACME endpoint.
func (*AcmeEndpoint) DeepCopy ¶ added in v1.5.0
func (in *AcmeEndpoint) DeepCopy() *AcmeEndpoint
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AcmeEndpoint.
func (*AcmeEndpoint) DeepCopyInto ¶ added in v1.5.0
func (in *AcmeEndpoint) DeepCopyInto(out *AcmeEndpoint)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AcmeEndpointStatus ¶ added in v1.5.0
type AcmeEndpointStatus string
const ( AcmeEndpointStatus_ACTIVE AcmeEndpointStatus = "ACTIVE" AcmeEndpointStatus_CREATING AcmeEndpointStatus = "CREATING" AcmeEndpointStatus_DELETING AcmeEndpointStatus = "DELETING" AcmeEndpointStatus_FAILED AcmeEndpointStatus = "FAILED" )
type AcmeEndpointSummary ¶ added in v1.5.0
type AcmeEndpointSummary struct {
CertificateTags []*Tag `json:"certificateTags,omitempty"`
EndpointURL *string `json:"endpointURL,omitempty"`
FailureReason *string `json:"failureReason,omitempty"`
}
Contains summary information about an ACME endpoint.
func (*AcmeEndpointSummary) DeepCopy ¶ added in v1.5.0
func (in *AcmeEndpointSummary) DeepCopy() *AcmeEndpointSummary
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AcmeEndpointSummary.
func (*AcmeEndpointSummary) DeepCopyInto ¶ added in v1.5.0
func (in *AcmeEndpointSummary) DeepCopyInto(out *AcmeEndpointSummary)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type Certificate ¶
type Certificate struct {
metav1.TypeMeta `json:",inline"`
metav1.ObjectMeta `json:"metadata,omitempty"`
Spec CertificateSpec `json:"spec,omitempty"`
Status CertificateStatus `json:"status,omitempty"`
}
Certificate is the Schema for the Certificates API +kubebuilder:object:root=true +kubebuilder:subresource:status
func (*Certificate) DeepCopy ¶
func (in *Certificate) DeepCopy() *Certificate
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Certificate.
func (*Certificate) DeepCopyInto ¶
func (in *Certificate) DeepCopyInto(out *Certificate)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Certificate) DeepCopyObject ¶
func (in *Certificate) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type CertificateDetail ¶
type CertificateDetail struct {
AcmeAccountID *string `json:"acmeAccountID,omitempty"`
AcmeEndpointARN *string `json:"acmeEndpointARN,omitempty"`
CertificateARN *string `json:"certificateARN,omitempty"`
CertificateAuthorityARN *string `json:"certificateAuthorityARN,omitempty"`
// The origin of the certificate's key pair.
CertificateKeyPairOrigin *string `json:"certificateKeyPairOrigin,omitempty"`
CreatedAt *metav1.Time `json:"createdAt,omitempty"`
DomainName *string `json:"domainName,omitempty"`
DomainValidationOptions []*DomainValidation `json:"domainValidationOptions,omitempty"`
ExtendedKeyUsages []*ExtendedKeyUsage `json:"extendedKeyUsages,omitempty"`
FailureReason *string `json:"failureReason,omitempty"`
ImportedAt *metav1.Time `json:"importedAt,omitempty"`
InUseBy []*string `json:"inUseBy,omitempty"`
IssuedAt *metav1.Time `json:"issuedAt,omitempty"`
Issuer *string `json:"issuer,omitempty"`
KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
KeyUsages []*KeyUsage `json:"keyUsages,omitempty"`
ManagedBy *string `json:"managedBy,omitempty"`
NotAfter *metav1.Time `json:"notAfter,omitempty"`
NotBefore *metav1.Time `json:"notBefore,omitempty"`
// Structure that contains options for your certificate. You can use this structure
// to specify whether to export your certificate.
//
// Certificate transparency logging opt-out is no longer available. All public
// certificates are recorded in a certificate transparency log. For general
// information, see Certificate Transparency Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency).
//
// You can export public ACM certificates to use with Amazon Web Services services
// as well as outside Amazon Web Services Cloud. For more information, see Certificate
// Manager exportable public certificate (https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html).
Options *CertificateOptions `json:"options,omitempty"`
RenewalEligibility *string `json:"renewalEligibility,omitempty"`
// Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
// for the certificate. This structure exists only when the certificate type
// is AMAZON_ISSUED.
RenewalSummary *RenewalSummary `json:"renewalSummary,omitempty"`
RevocationReason *string `json:"revocationReason,omitempty"`
RevokedAt *metav1.Time `json:"revokedAt,omitempty"`
Serial *string `json:"serial,omitempty"`
SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty"`
Status *string `json:"status,omitempty"`
Subject *string `json:"subject,omitempty"`
SubjectAlternativeNames []*string `json:"subjectAlternativeNames,omitempty"`
Type *string `json:"type_,omitempty"`
}
Contains metadata about an ACM certificate. This structure is returned in the response to a DescribeCertificate request.
func (*CertificateDetail) DeepCopy ¶
func (in *CertificateDetail) DeepCopy() *CertificateDetail
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateDetail.
func (*CertificateDetail) DeepCopyInto ¶
func (in *CertificateDetail) DeepCopyInto(out *CertificateDetail)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateExport ¶ added in v1.5.0
type CertificateExport string
const ( CertificateExport_DISABLED CertificateExport = "DISABLED" CertificateExport_ENABLED CertificateExport = "ENABLED" )
type CertificateFilter ¶ added in v1.5.0
type CertificateFilter struct {
CertificateARN *string `json:"certificateARN,omitempty"`
}
Defines a filter for searching certificates by ARN, X.509 attributes, or ACM metadata.
func (*CertificateFilter) DeepCopy ¶ added in v1.5.0
func (in *CertificateFilter) DeepCopy() *CertificateFilter
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateFilter.
func (*CertificateFilter) DeepCopyInto ¶ added in v1.5.0
func (in *CertificateFilter) DeepCopyInto(out *CertificateFilter)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateKeyPairOrigin ¶ added in v1.5.0
type CertificateKeyPairOrigin string
const ( CertificateKeyPairOrigin_ACME CertificateKeyPairOrigin = "ACME" CertificateKeyPairOrigin_AWS_MANAGED CertificateKeyPairOrigin = "AWS_MANAGED" CertificateKeyPairOrigin_CUSTOMER_PROVIDED CertificateKeyPairOrigin = "CUSTOMER_PROVIDED" )
type CertificateList ¶
type CertificateList struct {
metav1.TypeMeta `json:",inline"`
metav1.ListMeta `json:"metadata,omitempty"`
Items []Certificate `json:"items"`
}
CertificateList contains a list of Certificate +kubebuilder:object:root=true
func (*CertificateList) DeepCopy ¶
func (in *CertificateList) DeepCopy() *CertificateList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateList.
func (*CertificateList) DeepCopyInto ¶
func (in *CertificateList) DeepCopyInto(out *CertificateList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateList) DeepCopyObject ¶
func (in *CertificateList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type CertificateManagedBy ¶ added in v1.5.0
type CertificateManagedBy string
const (
CertificateManagedBy_CLOUDFRONT CertificateManagedBy = "CLOUDFRONT"
)
type CertificateOptions ¶
type CertificateOptions struct {
CertificateTransparencyLoggingPreference *string `json:"certificateTransparencyLoggingPreference,omitempty"`
Export *string `json:"export,omitempty"`
}
Structure that contains options for your certificate. You can use this structure to specify whether to export your certificate.
Certificate transparency logging opt-out is no longer available. All public certificates are recorded in a certificate transparency log. For general information, see Certificate Transparency Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency).
You can export public ACM certificates to use with Amazon Web Services services as well as outside Amazon Web Services Cloud. For more information, see Certificate Manager exportable public certificate (https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html).
func (*CertificateOptions) DeepCopy ¶
func (in *CertificateOptions) DeepCopy() *CertificateOptions
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateOptions.
func (*CertificateOptions) DeepCopyInto ¶
func (in *CertificateOptions) DeepCopyInto(out *CertificateOptions)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateSearchResult ¶ added in v1.5.0
type CertificateSearchResult struct {
CertificateARN *string `json:"certificateARN,omitempty"`
}
Contains information about a certificate returned by the SearchCertificates action. This structure includes the certificate ARN, X.509 attributes, and ACM metadata.
func (*CertificateSearchResult) DeepCopy ¶ added in v1.5.0
func (in *CertificateSearchResult) DeepCopy() *CertificateSearchResult
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSearchResult.
func (*CertificateSearchResult) DeepCopyInto ¶ added in v1.5.0
func (in *CertificateSearchResult) DeepCopyInto(out *CertificateSearchResult)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateSpec ¶
type CertificateSpec struct {
// The Certificate to import into AWS Certificate Manager (ACM) to use with services that are integrated with ACM.
// This field is only valid when importing an existing certificate into ACM.
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
Certificate *ackv1alpha1.SecretKeyReference `json:"certificate,omitempty"`
// The Amazon Resource Name (ARN) of an imported certificate to replace. This field is only valid when importing
// an existing certificate into ACM.
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
CertificateARN *string `json:"certificateARN,omitempty"`
// The Amazon Resource Name (ARN) of the private certificate authority (CA)
// that will be used to issue the certificate. If you do not provide an ARN
// and you are trying to request a private certificate, ACM will attempt to
// issue a public certificate. For more information about private CAs, see the
// Amazon Web Services Private Certificate Authority (https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html)
// user guide. The ARN must have the following form:
//
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
//
// Regex Pattern: `^arn:[\w+=/,.@-]+:acm-pca:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*$`
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
CertificateAuthorityARN *string `json:"certificateAuthorityARN,omitempty"`
CertificateAuthorityRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"certificateAuthorityRef,omitempty"`
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
CertificateChain *ackv1alpha1.SecretKeyReference `json:"certificateChain,omitempty"`
// Fully qualified domain name (FQDN), such as www.example.com, that you want
// to secure with an ACM certificate. Use an asterisk (*) to create a wildcard
// certificate that protects several sites in the same domain. For example,
// *.example.com protects www.example.com, site.example.com, and images.example.com.
//
// In compliance with RFC 5280 (https://datatracker.ietf.org/doc/html/rfc5280),
// the length of the domain name (technically, the Common Name) that you provide
// cannot exceed 64 octets (characters), including periods. To add a longer
// domain name, specify it in the Subject Alternative Name field, which supports
// names up to 253 octets in length.
//
// Regex Pattern: `^(\*\.)?(((?!-)[A-Za-z0-9-]{0,62}[A-Za-z0-9])\.)+((?!-)[A-Za-z0-9-]{1,62}[A-Za-z0-9])$`
DomainName *string `json:"domainName,omitempty"`
// The domain name that you want ACM to use to send you emails so that you can
// validate domain ownership.
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
DomainValidationOptions []*DomainValidationOption `json:"domainValidationOptions,omitempty"`
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
ExportTo *ackv1alpha1.SecretKeyReference `json:"exportTo,omitempty"`
// Specifies the algorithm of the public and private key pair that your certificate
// uses to encrypt data. RSA is the default key algorithm for ACM certificates.
// Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering
// security comparable to RSA keys but with greater computing efficiency. However,
// ECDSA is not supported by all network clients. Some Amazon Web Services services
// may require RSA keys, or only support ECDSA keys of a particular size, while
// others allow the use of either RSA and ECDSA keys to ensure that compatibility
// is not broken. Check the requirements for the Amazon Web Services service
// where you plan to deploy your certificate. For more information about selecting
// an algorithm, see Key algorithms (https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term).
//
// Algorithms supported for an ACM certificate request include:
//
// - RSA_2048
//
// - EC_prime256v1
//
// - EC_secp384r1
//
// Other listed algorithms are for imported certificates only.
//
// When you request a private PKI certificate signed by a CA from Amazon Web
// Services Private CA, the specified signing algorithm family (RSA or ECDSA)
// must match the algorithm family of the CA's secret key.
//
// Default: RSA_2048
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
// Identifies the Amazon Web Services service that manages the certificate issued
// by ACM.
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
ManagedBy *string `json:"managedBy,omitempty"`
// You can use this parameter to specify whether to export your certificate.
//
// Certificate transparency logging opt-out is no longer available. All public
// certificates are recorded in a certificate transparency log. For more information,
// see Certificate Transparency Logging (https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency).
//
// You can export public ACM certificates to use with Amazon Web Services services
// as well as outside the Amazon Web Services Cloud. For more information, see
// Certificate Manager exportable public certificate (https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html).
Options *CertificateOptions `json:"options,omitempty"`
// The private key that matches the public key in the certificate. This field is only valid when importing
// an existing certificate into ACM.
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
PrivateKey *ackv1alpha1.SecretKeyReference `json:"privateKey,omitempty"`
// Additional FQDNs to be included in the Subject Alternative Name extension
// of the ACM certificate. For example, add the name www.example.net to a certificate
// for which the DomainName field is www.example.com if users can reach your
// site by using either name. The maximum number of domain names that you can
// add to an ACM certificate is 100. However, the initial quota is 10 domain
// names. If you need more than 10 names, you must request a quota increase.
// For more information, see Quotas (https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html).
//
// The maximum length of a SAN DNS name is 253 octets. The name is made up of
// multiple labels separated by periods. No label can be longer than 63 octets.
// Consider the following examples:
//
// - (63 octets).(63 octets).(63 octets).(61 octets) is legal because the
// total length is 253 octets (63+1+63+1+63+1+61) and no label exceeds 63
// octets.
//
// - (64 octets).(63 octets).(63 octets).(61 octets) is not legal because
// the total length exceeds 253 octets (64+1+63+1+63+1+61) and the first
// label exceeds 63 octets.
//
// - (63 octets).(63 octets).(63 octets).(62 octets) is not legal because
// the total length of the DNS name (63+1+63+1+63+1+62) exceeds 253 octets.
//
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
SubjectAlternativeNames []*string `json:"subjectAlternativeNames,omitempty"`
// One or more resource tags to associate with the certificate.
Tags []*Tag `json:"tags,omitempty"`
}
CertificateSpec defines the desired state of Certificate.
func (*CertificateSpec) DeepCopy ¶
func (in *CertificateSpec) DeepCopy() *CertificateSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpec.
func (*CertificateSpec) DeepCopyInto ¶
func (in *CertificateSpec) DeepCopyInto(out *CertificateSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateStatus ¶
type CertificateStatus struct {
// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
// that is used to contain resource sync state, account ownership,
// constructed ARN for the resource
// +kubebuilder:validation:Optional
ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
// All CRs managed by ACK have a common `Status.Conditions` member that
// contains a collection of `ackv1alpha1.Condition` objects that describe
// the various terminal states of the CR and its backend AWS service API
// resource
// +kubebuilder:validation:Optional
Conditions []*ackv1alpha1.Condition `json:"conditions"`
// The time at which the certificate was requested.
// +kubebuilder:validation:Optional
CreatedAt *metav1.Time `json:"createdAt,omitempty"`
// Contains information about the initial validation of each domain name that
// occurs as a result of the RequestCertificate request. This field exists only
// when the certificate type is AMAZON_ISSUED.
// +kubebuilder:validation:Optional
DomainValidations []*DomainValidation `json:"domainValidations,omitempty"`
// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
// specifies a purpose for which the certificate public key can be used and
// consists of a name and an object identifier (OID).
// +kubebuilder:validation:Optional
ExtendedKeyUsages []*ExtendedKeyUsage `json:"extendedKeyUsages,omitempty"`
// The reason the certificate request failed. This value exists only when the
// certificate status is FAILED. For more information, see Certificate Request
// Failed (https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed)
// in the Certificate Manager User Guide.
// +kubebuilder:validation:Optional
FailureReason *string `json:"failureReason,omitempty"`
// The date and time when the certificate was imported. This value exists only
// when the certificate type is IMPORTED.
// +kubebuilder:validation:Optional
ImportedAt *metav1.Time `json:"importedAt,omitempty"`
// A list of ARNs for the Amazon Web Services resources that are using the certificate.
// A certificate can be used by multiple Amazon Web Services resources.
// +kubebuilder:validation:Optional
InUseBy []*string `json:"inUseBy,omitempty"`
// The time at which the certificate was issued. This value exists only when
// the certificate type is AMAZON_ISSUED.
// +kubebuilder:validation:Optional
IssuedAt *metav1.Time `json:"issuedAt,omitempty"`
// The name of the certificate authority that issued and signed the certificate.
// +kubebuilder:validation:Optional
Issuer *string `json:"issuer,omitempty"`
// A list of Key Usage X.509 v3 extension objects. Each object is a string value
// that identifies the purpose of the public key contained in the certificate.
// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION,
// and more.
// +kubebuilder:validation:Optional
KeyUsages []*KeyUsage `json:"keyUsages,omitempty"`
// The time after which the certificate is not valid.
// +kubebuilder:validation:Optional
NotAfter *metav1.Time `json:"notAfter,omitempty"`
// The time before which the certificate is not valid.
// +kubebuilder:validation:Optional
NotBefore *metav1.Time `json:"notBefore,omitempty"`
// Specifies whether the certificate is eligible for renewal. At this time,
// only exported private certificates can be renewed with the RenewCertificate
// command.
// +kubebuilder:validation:Optional
RenewalEligibility *string `json:"renewalEligibility,omitempty"`
// Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
// for the certificate. This field exists only when the certificate type is
// AMAZON_ISSUED.
// +kubebuilder:validation:Optional
RenewalSummary *RenewalSummary `json:"renewalSummary,omitempty"`
// The reason the certificate was revoked. This value exists only when the certificate
// status is REVOKED.
// +kubebuilder:validation:Optional
RevocationReason *string `json:"revocationReason,omitempty"`
// The time at which the certificate was revoked. This value exists only when
// the certificate status is REVOKED.
// +kubebuilder:validation:Optional
RevokedAt *metav1.Time `json:"revokedAt,omitempty"`
// The serial number of the certificate.
// +kubebuilder:validation:Optional
Serial *string `json:"serial,omitempty"`
// The algorithm that was used to sign the certificate.
// +kubebuilder:validation:Optional
SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty"`
// The status of the certificate.
//
// A certificate enters status PENDING_VALIDATION upon being requested, unless
// it fails for any of the reasons given in the troubleshooting topic Certificate
// request fails (https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html).
// ACM makes repeated attempts to validate a certificate for 72 hours and then
// times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT,
// delete the request, correct the issue with DNS validation (https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html)
// or Email validation (https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html),
// and try again. If validation succeeds, the certificate enters status ISSUED.
// +kubebuilder:validation:Optional
Status *string `json:"status,omitempty"`
// The name of the entity that is associated with the public key contained in
// the certificate.
// +kubebuilder:validation:Optional
Subject *string `json:"subject,omitempty"`
// The source of the certificate. For certificates provided by ACM, this value
// is AMAZON_ISSUED. For certificates that you imported with ImportCertificate,
// this value is IMPORTED. ACM does not provide managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html)
// for imported certificates. For more information about the differences between
// certificates that you import and those that ACM provides, see Importing Certificates
// (https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html)
// in the Certificate Manager User Guide.
// +kubebuilder:validation:Optional
Type *string `json:"type_,omitempty"`
}
CertificateStatus defines the observed state of Certificate
func (*CertificateStatus) DeepCopy ¶
func (in *CertificateStatus) DeepCopy() *CertificateStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateStatus.
func (*CertificateStatus) DeepCopyInto ¶
func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateStatus_SDK ¶
type CertificateStatus_SDK string
const ( CertificateStatus_SDK_EXPIRED CertificateStatus_SDK = "EXPIRED" CertificateStatus_SDK_FAILED CertificateStatus_SDK = "FAILED" CertificateStatus_SDK_INACTIVE CertificateStatus_SDK = "INACTIVE" CertificateStatus_SDK_ISSUED CertificateStatus_SDK = "ISSUED" CertificateStatus_SDK_PENDING_VALIDATION CertificateStatus_SDK = "PENDING_VALIDATION" CertificateStatus_SDK_REVOKED CertificateStatus_SDK = "REVOKED" CertificateStatus_SDK_VALIDATION_TIMED_OUT CertificateStatus_SDK = "VALIDATION_TIMED_OUT" )
type CertificateSummary ¶
type CertificateSummary struct {
CertificateARN *string `json:"certificateARN,omitempty"`
// The origin of the certificate's key pair.
CertificateKeyPairOrigin *string `json:"certificateKeyPairOrigin,omitempty"`
CreatedAt *metav1.Time `json:"createdAt,omitempty"`
DomainName *string `json:"domainName,omitempty"`
ExportOption *string `json:"exportOption,omitempty"`
Exported *bool `json:"exported,omitempty"`
ExtendedKeyUsages []*string `json:"extendedKeyUsages,omitempty"`
HasAdditionalSubjectAlternativeNames *bool `json:"hasAdditionalSubjectAlternativeNames,omitempty"`
ImportedAt *metav1.Time `json:"importedAt,omitempty"`
InUse *bool `json:"inUse,omitempty"`
IssuedAt *metav1.Time `json:"issuedAt,omitempty"`
KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
KeyUsages []*string `json:"keyUsages,omitempty"`
ManagedBy *string `json:"managedBy,omitempty"`
NotAfter *metav1.Time `json:"notAfter,omitempty"`
NotBefore *metav1.Time `json:"notBefore,omitempty"`
RenewalEligibility *string `json:"renewalEligibility,omitempty"`
RevokedAt *metav1.Time `json:"revokedAt,omitempty"`
Status *string `json:"status,omitempty"`
SubjectAlternativeNameSummaries []*string `json:"subjectAlternativeNameSummaries,omitempty"`
Type *string `json:"type_,omitempty"`
}
This structure is returned in the response object of ListCertificates action.
func (*CertificateSummary) DeepCopy ¶
func (in *CertificateSummary) DeepCopy() *CertificateSummary
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSummary.
func (*CertificateSummary) DeepCopyInto ¶
func (in *CertificateSummary) DeepCopyInto(out *CertificateSummary)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type CertificateTransparencyLoggingPreference ¶
type CertificateTransparencyLoggingPreference string
const ( CertificateTransparencyLoggingPreference_DISABLED CertificateTransparencyLoggingPreference = "DISABLED" CertificateTransparencyLoggingPreference_ENABLED CertificateTransparencyLoggingPreference = "ENABLED" )
type CertificateType ¶
type CertificateType string
const ( CertificateType_AMAZON_ISSUED CertificateType = "AMAZON_ISSUED" CertificateType_IMPORTED CertificateType = "IMPORTED" CertificateType_PRIVATE CertificateType = "PRIVATE" )
type ComparisonOperator ¶ added in v1.5.0
type ComparisonOperator string
const ( ComparisonOperator_CONTAINS ComparisonOperator = "CONTAINS" ComparisonOperator_EQUALS ComparisonOperator = "EQUALS" )
type CustomAttribute ¶ added in v1.5.0
type CustomAttribute struct {
ObjectIdentifier *string `json:"objectIdentifier,omitempty"`
Value *string `json:"value,omitempty"`
}
Defines the X.500 relative distinguished name (RDN).
func (*CustomAttribute) DeepCopy ¶ added in v1.5.0
func (in *CustomAttribute) DeepCopy() *CustomAttribute
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CustomAttribute.
func (*CustomAttribute) DeepCopyInto ¶ added in v1.5.0
func (in *CustomAttribute) DeepCopyInto(out *CustomAttribute)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type DNSPrevalidationDetails ¶ added in v1.5.0
type DNSPrevalidationDetails struct {
// Contains a DNS record value that you can use to validate ownership or control
// of a domain. This is used by the DescribeCertificate action.
ResourceRecord *ResourceRecord `json:"resourceRecord,omitempty"`
}
DNS prevalidation details including the resource record for validation.
func (*DNSPrevalidationDetails) DeepCopy ¶ added in v1.5.0
func (in *DNSPrevalidationDetails) DeepCopy() *DNSPrevalidationDetails
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DNSPrevalidationDetails.
func (*DNSPrevalidationDetails) DeepCopyInto ¶ added in v1.5.0
func (in *DNSPrevalidationDetails) DeepCopyInto(out *DNSPrevalidationDetails)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type DistinguishedName ¶ added in v1.5.0
type DistinguishedName struct {
CommonName *string `json:"commonName,omitempty"`
Country *string `json:"country,omitempty"`
DistinguishedNameQualifier *string `json:"distinguishedNameQualifier,omitempty"`
GenerationQualifier *string `json:"generationQualifier,omitempty"`
GivenName *string `json:"givenName,omitempty"`
Initials *string `json:"initials,omitempty"`
Locality *string `json:"locality,omitempty"`
Organization *string `json:"organization,omitempty"`
OrganizationalUnit *string `json:"organizationalUnit,omitempty"`
Pseudonym *string `json:"pseudonym,omitempty"`
SerialNumber *string `json:"serialNumber,omitempty"`
State *string `json:"state,omitempty"`
Surname *string `json:"surname,omitempty"`
Title *string `json:"title,omitempty"`
}
Contains X.500 distinguished name information.
func (*DistinguishedName) DeepCopy ¶ added in v1.5.0
func (in *DistinguishedName) DeepCopy() *DistinguishedName
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DistinguishedName.
func (*DistinguishedName) DeepCopyInto ¶ added in v1.5.0
func (in *DistinguishedName) DeepCopyInto(out *DistinguishedName)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type DomainScopeOption ¶ added in v1.5.0
type DomainScopeOption string
const ( DomainScopeOption_DISABLED DomainScopeOption = "DISABLED" DomainScopeOption_ENABLED DomainScopeOption = "ENABLED" )
type DomainStatus ¶
type DomainStatus string
const ( DomainStatus_FAILED DomainStatus = "FAILED" DomainStatus_PENDING_VALIDATION DomainStatus = "PENDING_VALIDATION" DomainStatus_SUCCESS DomainStatus = "SUCCESS" )
type DomainValidation ¶
type DomainValidation struct {
DomainName *string `json:"domainName,omitempty"`
// Contains information for HTTP-based domain validation of certificates requested
// through Amazon CloudFront and issued by ACM. This field exists only when
// the certificate type is AMAZON_ISSUED and the validation method is HTTP.
HTTPRedirect *HTTPRedirect `json:"httpRedirect,omitempty"`
// Contains a DNS record value that you can use to validate ownership or control
// of a domain. This is used by the DescribeCertificate action.
ResourceRecord *ResourceRecord `json:"resourceRecord,omitempty"`
ValidationDomain *string `json:"validationDomain,omitempty"`
ValidationEmails []*string `json:"validationEmails,omitempty"`
ValidationMethod *string `json:"validationMethod,omitempty"`
ValidationStatus *string `json:"validationStatus,omitempty"`
}
Contains information about the validation of each domain name in the certificate.
func (*DomainValidation) DeepCopy ¶
func (in *DomainValidation) DeepCopy() *DomainValidation
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainValidation.
func (*DomainValidation) DeepCopyInto ¶
func (in *DomainValidation) DeepCopyInto(out *DomainValidation)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type DomainValidationOption ¶
type DomainValidationOption struct {
DomainName *string `json:"domainName,omitempty"`
ValidationDomain *string `json:"validationDomain,omitempty"`
}
Contains information about the domain names that you want ACM to use to send you emails that enable you to validate domain ownership.
func (*DomainValidationOption) DeepCopy ¶
func (in *DomainValidationOption) DeepCopy() *DomainValidationOption
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainValidationOption.
func (*DomainValidationOption) DeepCopyInto ¶
func (in *DomainValidationOption) DeepCopyInto(out *DomainValidationOption)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ExtendedKeyUsage ¶
type ExtendedKeyUsage struct {
Name *string `json:"name,omitempty"`
OID *string `json:"oid,omitempty"`
}
The Extended Key Usage X.509 v3 extension defines one or more purposes for which the public key can be used. This is in addition to or in place of the basic purposes specified by the Key Usage extension.
func (*ExtendedKeyUsage) DeepCopy ¶
func (in *ExtendedKeyUsage) DeepCopy() *ExtendedKeyUsage
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExtendedKeyUsage.
func (*ExtendedKeyUsage) DeepCopyInto ¶
func (in *ExtendedKeyUsage) DeepCopyInto(out *ExtendedKeyUsage)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ExtendedKeyUsageName ¶
type ExtendedKeyUsageName string
const ( ExtendedKeyUsageName_ANY ExtendedKeyUsageName = "ANY" ExtendedKeyUsageName_CODE_SIGNING ExtendedKeyUsageName = "CODE_SIGNING" ExtendedKeyUsageName_CUSTOM ExtendedKeyUsageName = "CUSTOM" ExtendedKeyUsageName_EMAIL_PROTECTION ExtendedKeyUsageName = "EMAIL_PROTECTION" ExtendedKeyUsageName_IPSEC_END_SYSTEM ExtendedKeyUsageName = "IPSEC_END_SYSTEM" ExtendedKeyUsageName_IPSEC_TUNNEL ExtendedKeyUsageName = "IPSEC_TUNNEL" ExtendedKeyUsageName_IPSEC_USER ExtendedKeyUsageName = "IPSEC_USER" ExtendedKeyUsageName_NONE ExtendedKeyUsageName = "NONE" ExtendedKeyUsageName_OCSP_SIGNING ExtendedKeyUsageName = "OCSP_SIGNING" ExtendedKeyUsageName_TIME_STAMPING ExtendedKeyUsageName = "TIME_STAMPING" ExtendedKeyUsageName_TLS_WEB_CLIENT_AUTHENTICATION ExtendedKeyUsageName = "TLS_WEB_CLIENT_AUTHENTICATION" ExtendedKeyUsageName_TLS_WEB_SERVER_AUTHENTICATION ExtendedKeyUsageName = "TLS_WEB_SERVER_AUTHENTICATION" )
type FailureDetails ¶ added in v1.5.0
type FailureDetails struct {
Message *string `json:"message,omitempty"`
}
Contains details about a failure.
func (*FailureDetails) DeepCopy ¶ added in v1.5.0
func (in *FailureDetails) DeepCopy() *FailureDetails
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FailureDetails.
func (*FailureDetails) DeepCopyInto ¶ added in v1.5.0
func (in *FailureDetails) DeepCopyInto(out *FailureDetails)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type FailureReason ¶
type FailureReason string
const ( FailureReason_ADDITIONAL_VERIFICATION_REQUIRED FailureReason = "ADDITIONAL_VERIFICATION_REQUIRED" FailureReason_CAA_ERROR FailureReason = "CAA_ERROR" FailureReason_DOMAIN_NOT_ALLOWED FailureReason = "DOMAIN_NOT_ALLOWED" FailureReason_DOMAIN_VALIDATION_DENIED FailureReason = "DOMAIN_VALIDATION_DENIED" FailureReason_INVALID_PUBLIC_DOMAIN FailureReason = "INVALID_PUBLIC_DOMAIN" FailureReason_NO_AVAILABLE_CONTACTS FailureReason = "NO_AVAILABLE_CONTACTS" FailureReason_OTHER FailureReason = "OTHER" FailureReason_PCA_ACCESS_DENIED FailureReason = "PCA_ACCESS_DENIED" FailureReason_PCA_INVALID_ARGS FailureReason = "PCA_INVALID_ARGS" FailureReason_PCA_INVALID_ARN FailureReason = "PCA_INVALID_ARN" FailureReason_PCA_INVALID_DURATION FailureReason = "PCA_INVALID_DURATION" FailureReason_PCA_INVALID_STATE FailureReason = "PCA_INVALID_STATE" FailureReason_PCA_LIMIT_EXCEEDED FailureReason = "PCA_LIMIT_EXCEEDED" FailureReason_PCA_NAME_CONSTRAINTS_VALIDATION FailureReason = "PCA_NAME_CONSTRAINTS_VALIDATION" FailureReason_PCA_REQUEST_FAILED FailureReason = "PCA_REQUEST_FAILED" FailureReason_PCA_RESOURCE_NOT_FOUND FailureReason = "PCA_RESOURCE_NOT_FOUND" FailureReason_SLR_NOT_FOUND FailureReason = "SLR_NOT_FOUND" )
type Filters ¶
type Filters struct {
ExportOption *string `json:"exportOption,omitempty"`
ExtendedKeyUsage []*string `json:"extendedKeyUsage,omitempty"`
KeyTypes []*string `json:"keyTypes,omitempty"`
KeyUsage []*string `json:"keyUsage,omitempty"`
ManagedBy *string `json:"managedBy,omitempty"`
}
This structure can be used in the ListCertificates action to filter the output of the certificate list.
func (*Filters) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Filters.
func (*Filters) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type GeneralName ¶ added in v1.5.0
type GeneralName struct {
DNSName *string `json:"dnsName,omitempty"`
IPAddress *string `json:"ipAddress,omitempty"`
RegisteredID *string `json:"registeredID,omitempty"`
RFC822Name *string `json:"rfc822Name,omitempty"`
UniformResourceIdentifier *string `json:"uniformResourceIdentifier,omitempty"`
}
Describes an ASN.1 X.400 GeneralName as defined in RFC 5280 (https://datatracker.ietf.org/doc/html/rfc5280). Only one of the following naming options should be provided.
func (*GeneralName) DeepCopy ¶ added in v1.5.0
func (in *GeneralName) DeepCopy() *GeneralName
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GeneralName.
func (*GeneralName) DeepCopyInto ¶ added in v1.5.0
func (in *GeneralName) DeepCopyInto(out *GeneralName)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type HTTPRedirect ¶ added in v1.5.0
type HTTPRedirect struct {
RedirectFrom *string `json:"redirectFrom,omitempty"`
RedirectTo *string `json:"redirectTo,omitempty"`
}
Contains information for HTTP-based domain validation of certificates requested through Amazon CloudFront and issued by ACM. This field exists only when the certificate type is AMAZON_ISSUED and the validation method is HTTP.
func (*HTTPRedirect) DeepCopy ¶ added in v1.5.0
func (in *HTTPRedirect) DeepCopy() *HTTPRedirect
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HTTPRedirect.
func (*HTTPRedirect) DeepCopyInto ¶ added in v1.5.0
func (in *HTTPRedirect) DeepCopyInto(out *HTTPRedirect)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type KeyAlgorithm ¶
type KeyAlgorithm string
const ( KeyAlgorithm_EC_prime256v1 KeyAlgorithm = "EC_prime256v1" KeyAlgorithm_EC_secp384r1 KeyAlgorithm = "EC_secp384r1" KeyAlgorithm_EC_secp521r1 KeyAlgorithm = "EC_secp521r1" KeyAlgorithm_RSA_1024 KeyAlgorithm = "RSA_1024" KeyAlgorithm_RSA_2048 KeyAlgorithm = "RSA_2048" KeyAlgorithm_RSA_3072 KeyAlgorithm = "RSA_3072" KeyAlgorithm_RSA_4096 KeyAlgorithm = "RSA_4096" )
type KeyUsage ¶
type KeyUsage struct {
Name *string `json:"name,omitempty"`
}
The Key Usage X.509 v3 extension defines the purpose of the public key contained in the certificate.
func (*KeyUsage) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyUsage.
func (*KeyUsage) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type KeyUsageName ¶
type KeyUsageName string
const ( KeyUsageName_ANY KeyUsageName = "ANY" KeyUsageName_CERTIFICATE_SIGNING KeyUsageName = "CERTIFICATE_SIGNING" KeyUsageName_CRL_SIGNING KeyUsageName = "CRL_SIGNING" KeyUsageName_CUSTOM KeyUsageName = "CUSTOM" KeyUsageName_DATA_ENCIPHERMENT KeyUsageName = "DATA_ENCIPHERMENT" KeyUsageName_DECIPHER_ONLY KeyUsageName = "DECIPHER_ONLY" KeyUsageName_DIGITAL_SIGNATURE KeyUsageName = "DIGITAL_SIGNATURE" KeyUsageName_ENCIPHER_ONLY KeyUsageName = "ENCIPHER_ONLY" KeyUsageName_KEY_AGREEMENT KeyUsageName = "KEY_AGREEMENT" KeyUsageName_KEY_ENCIPHERMENT KeyUsageName = "KEY_ENCIPHERMENT" KeyUsageName_NON_REPUDIATION KeyUsageName = "NON_REPUDIATION" )
type OtherName ¶ added in v1.5.0
type OtherName struct {
ObjectIdentifier *string `json:"objectIdentifier,omitempty"`
Value *string `json:"value,omitempty"`
}
Defines a custom ASN.1 X.400 GeneralName using an object identifier (OID) and value. For more information, see NIST's definition of Object Identifier (OID) (https://csrc.nist.gov/glossary/term/Object_Identifier).
func (*OtherName) DeepCopy ¶ added in v1.5.0
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OtherName.
func (*OtherName) DeepCopyInto ¶ added in v1.5.0
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type PrevalidationType ¶ added in v1.5.0
type PrevalidationType string
const (
PrevalidationType_DNS_PREVALIDATION PrevalidationType = "DNS_PREVALIDATION"
)
type PublicKeyAlgorithm ¶ added in v1.5.0
type PublicKeyAlgorithm string
const ( PublicKeyAlgorithm_EC_prime256v1 PublicKeyAlgorithm = "EC_prime256v1" PublicKeyAlgorithm_EC_secp384r1 PublicKeyAlgorithm = "EC_secp384r1" PublicKeyAlgorithm_RSA_2048 PublicKeyAlgorithm = "RSA_2048" )
type RenewalEligibility ¶
type RenewalEligibility string
const ( RenewalEligibility_ELIGIBLE RenewalEligibility = "ELIGIBLE" RenewalEligibility_INELIGIBLE RenewalEligibility = "INELIGIBLE" )
type RenewalStatus ¶
type RenewalStatus string
const ( RenewalStatus_FAILED RenewalStatus = "FAILED" RenewalStatus_PENDING_AUTO_RENEWAL RenewalStatus = "PENDING_AUTO_RENEWAL" RenewalStatus_PENDING_VALIDATION RenewalStatus = "PENDING_VALIDATION" RenewalStatus_SUCCESS RenewalStatus = "SUCCESS" )
type RenewalSummary ¶
type RenewalSummary struct {
DomainValidationOptions []*DomainValidation `json:"domainValidationOptions,omitempty"`
RenewalStatus *string `json:"renewalStatus,omitempty"`
RenewalStatusReason *string `json:"renewalStatusReason,omitempty"`
UpdatedAt *metav1.Time `json:"updatedAt,omitempty"`
}
Contains information about the status of ACM's managed renewal (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html) for the certificate. This structure exists only when the certificate type is AMAZON_ISSUED.
func (*RenewalSummary) DeepCopy ¶
func (in *RenewalSummary) DeepCopy() *RenewalSummary
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RenewalSummary.
func (*RenewalSummary) DeepCopyInto ¶
func (in *RenewalSummary) DeepCopyInto(out *RenewalSummary)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ResourceRecord ¶
type ResourceRecord struct {
Name *string `json:"name,omitempty"`
Type *string `json:"type_,omitempty"`
Value *string `json:"value,omitempty"`
}
Contains a DNS record value that you can use to validate ownership or control of a domain. This is used by the DescribeCertificate action.
func (*ResourceRecord) DeepCopy ¶
func (in *ResourceRecord) DeepCopy() *ResourceRecord
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceRecord.
func (*ResourceRecord) DeepCopyInto ¶
func (in *ResourceRecord) DeepCopyInto(out *ResourceRecord)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type RevocationReason ¶
type RevocationReason string
const ( RevocationReason_AFFILIATION_CHANGED RevocationReason = "AFFILIATION_CHANGED" RevocationReason_A_A_COMPROMISE RevocationReason = "A_A_COMPROMISE" RevocationReason_CA_COMPROMISE RevocationReason = "CA_COMPROMISE" RevocationReason_CERTIFICATE_HOLD RevocationReason = "CERTIFICATE_HOLD" RevocationReason_CESSATION_OF_OPERATION RevocationReason = "CESSATION_OF_OPERATION" RevocationReason_KEY_COMPROMISE RevocationReason = "KEY_COMPROMISE" RevocationReason_PRIVILEGE_WITHDRAWN RevocationReason = "PRIVILEGE_WITHDRAWN" RevocationReason_REMOVE_FROM_CRL RevocationReason = "REMOVE_FROM_CRL" RevocationReason_SUPERCEDED RevocationReason = "SUPERCEDED" RevocationReason_SUPERSEDED RevocationReason = "SUPERSEDED" RevocationReason_UNSPECIFIED RevocationReason = "UNSPECIFIED" )
type SearchCertificatesSortBy ¶ added in v1.5.0
type SearchCertificatesSortBy string
const ( SearchCertificatesSortBy_ACME_ACCOUNT_ID SearchCertificatesSortBy = "ACME_ACCOUNT_ID" SearchCertificatesSortBy_ACME_ENDPOINT_ARN SearchCertificatesSortBy = "ACME_ENDPOINT_ARN" SearchCertificatesSortBy_CERTIFICATE_ARN SearchCertificatesSortBy = "CERTIFICATE_ARN" SearchCertificatesSortBy_CERTIFICATE_KEY_PAIR_ORIGIN SearchCertificatesSortBy = "CERTIFICATE_KEY_PAIR_ORIGIN" SearchCertificatesSortBy_COMMON_NAME SearchCertificatesSortBy = "COMMON_NAME" SearchCertificatesSortBy_CREATED_AT SearchCertificatesSortBy = "CREATED_AT" SearchCertificatesSortBy_EXPORTED SearchCertificatesSortBy = "EXPORTED" SearchCertificatesSortBy_EXPORT_OPTION SearchCertificatesSortBy = "EXPORT_OPTION" SearchCertificatesSortBy_IMPORTED_AT SearchCertificatesSortBy = "IMPORTED_AT" SearchCertificatesSortBy_IN_USE SearchCertificatesSortBy = "IN_USE" SearchCertificatesSortBy_ISSUED_AT SearchCertificatesSortBy = "ISSUED_AT" SearchCertificatesSortBy_KEY_ALGORITHM SearchCertificatesSortBy = "KEY_ALGORITHM" SearchCertificatesSortBy_MANAGED_BY SearchCertificatesSortBy = "MANAGED_BY" SearchCertificatesSortBy_NOT_AFTER SearchCertificatesSortBy = "NOT_AFTER" SearchCertificatesSortBy_NOT_BEFORE SearchCertificatesSortBy = "NOT_BEFORE" SearchCertificatesSortBy_RENEWAL_ELIGIBILITY SearchCertificatesSortBy = "RENEWAL_ELIGIBILITY" SearchCertificatesSortBy_RENEWAL_STATUS SearchCertificatesSortBy = "RENEWAL_STATUS" SearchCertificatesSortBy_REVOKED_AT SearchCertificatesSortBy = "REVOKED_AT" SearchCertificatesSortBy_STATUS SearchCertificatesSortBy = "STATUS" SearchCertificatesSortBy_TYPE SearchCertificatesSortBy = "TYPE" SearchCertificatesSortBy_VALIDATION_METHOD SearchCertificatesSortBy = "VALIDATION_METHOD" )
type SearchCertificatesSortOrder ¶ added in v1.5.0
type SearchCertificatesSortOrder string
const ( SearchCertificatesSortOrder_ASCENDING SearchCertificatesSortOrder = "ASCENDING" SearchCertificatesSortOrder_DESCENDING SearchCertificatesSortOrder = "DESCENDING" )
type Tag ¶
A key-value pair that identifies or specifies metadata about an ACM resource.
func (*Tag) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Tag.
func (*Tag) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type TimestampRange ¶ added in v1.5.0
type TimestampRange struct {
End *metav1.Time `json:"end,omitempty"`
Start *metav1.Time `json:"start,omitempty"`
}
Specifies a time range for filtering certificates.
func (*TimestampRange) DeepCopy ¶ added in v1.5.0
func (in *TimestampRange) DeepCopy() *TimestampRange
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TimestampRange.
func (*TimestampRange) DeepCopyInto ¶ added in v1.5.0
func (in *TimestampRange) DeepCopyInto(out *TimestampRange)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ValidationMethod ¶
type ValidationMethod string
const ( ValidationMethod_DNS ValidationMethod = "DNS" ValidationMethod_EMAIL ValidationMethod = "EMAIL" ValidationMethod_HTTP ValidationMethod = "HTTP" )
type X509AttributeFilter ¶ added in v1.5.0
type X509AttributeFilter struct {
ExtendedKeyUsage *string `json:"extendedKeyUsage,omitempty"`
KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
KeyUsage *string `json:"keyUsage,omitempty"`
}
Filters certificates by X.509 attributes.
func (*X509AttributeFilter) DeepCopy ¶ added in v1.5.0
func (in *X509AttributeFilter) DeepCopy() *X509AttributeFilter
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new X509AttributeFilter.
func (*X509AttributeFilter) DeepCopyInto ¶ added in v1.5.0
func (in *X509AttributeFilter) DeepCopyInto(out *X509AttributeFilter)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type X509Attributes ¶ added in v1.5.0
type X509Attributes struct {
ExtendedKeyUsages []*string `json:"extendedKeyUsages,omitempty"`
KeyAlgorithm *string `json:"keyAlgorithm,omitempty"`
KeyUsages []*string `json:"keyUsages,omitempty"`
NotAfter *metav1.Time `json:"notAfter,omitempty"`
NotBefore *metav1.Time `json:"notBefore,omitempty"`
}
Contains X.509 certificate attributes extracted from the certificate.
func (*X509Attributes) DeepCopy ¶ added in v1.5.0
func (in *X509Attributes) DeepCopy() *X509Attributes
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new X509Attributes.
func (*X509Attributes) DeepCopyInto ¶ added in v1.5.0
func (in *X509Attributes) DeepCopyInto(out *X509Attributes)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.