Skip to content

Commit

Permalink
re-generate
Browse files Browse the repository at this point in the history
Signed-off-by: Sebastian Hoß <[email protected]>
  • Loading branch information
sebhoss committed Apr 21, 2024
1 parent 362289e commit 722b6e4
Show file tree
Hide file tree
Showing 623 changed files with 132,033 additions and 31,721 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/update-upstream-specs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,9 +41,9 @@ jobs:
author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
title: Update upstream specifications to their latest version
body: |
- `make fetch`: ${{ steps.fetch.conclusion }}
- `make generate`: ${{ steps.generate.conclusion }}
- `make docs`: ${{ steps.docs.conclusion }}
- `make fetch`: ${{ steps.fetch.outcome }}
- `make generate`: ${{ steps.generate.outcome }}
- `make docs`: ${{ steps.docs.outcome }}
labels: enhancement
assignees: sebhoss
draft: false
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -151,6 +151,7 @@ Optional:
- `node_readiness_label` (Map of String)
- `node_readiness_label_merge` (String)
- `oauth_token_secret_name` (String)
- `pdb_master_label_selector` (Boolean)
- `pdb_name_format` (String)
- `persistent_volume_claim_retention_policy` (Attributes) (see [below for nested schema](#nestedatt--configuration--kubernetes--persistent_volume_claim_retention_policy))
- `pod_antiaffinity_preferred_during_scheduling` (Boolean)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -56,13 +56,13 @@ Optional:
Required:

- `certificate_authority_configuration` (Attributes) Name and bit size of the private key algorithm, the name of the signing algorithm,and X.500 certificate subject information. (see [below for nested schema](#nestedatt--spec--certificate_authority_configuration))
- `certificate_authority_type` (String) The type of the certificate authority.

Optional:

- `key_storage_security_standard` (String) Specifies a cryptographic key management compliance standard used for handlingCA keys.Default: FIPS_140_2_LEVEL_3_OR_HIGHERSome Amazon Web Services Regions do not support the default. When creatinga CA in these Regions, you must provide FIPS_140_2_LEVEL_2_OR_HIGHER as theargument for KeyStorageSecurityStandard. Failure to do this results in anInvalidArgsException with the message, 'A certificate authority cannot becreated in this region with the specified security standard.'For information about security standard support in various Regions, see Storageand security compliance of Amazon Web Services Private CA private keys (https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys).
- `revocation_configuration` (Attributes) Contains information to enable Online Certificate Status Protocol (OCSP)support, to enable a certificate revocation list (CRL), to enable both, orto enable neither. The default is for both certificate validation mechanismsto be disabled.The following requirements apply to revocation configurations. * A configuration disabling CRLs or OCSP must contain only the Enabled=False parameter, and will fail if other parameters such as CustomCname or ExpirationInDays are included. * In a CRL configuration, the S3BucketName parameter must conform to Amazon S3 bucket naming rules (https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html). * A configuration containing a custom Canonical Name (CNAME) parameter for CRLs or OCSP must conform to RFC2396 (https://www.ietf.org/rfc/rfc2396.txt) restrictions on the use of special characters in a CNAME. * In a CRL or OCSP configuration, the value of a CNAME parameter must not include a protocol prefix such as 'http://' or 'https://'.For more information, see the OcspConfiguration (https://docs.aws.amazon.com/privateca/latest/APIReference/API_OcspConfiguration.html)and CrlConfiguration (https://docs.aws.amazon.com/privateca/latest/APIReference/API_CrlConfiguration.html)types. (see [below for nested schema](#nestedatt--spec--revocation_configuration))
- `tags` (Attributes List) Key-value pairs that will be attached to the new private CA. You can associateup to 50 tags with a private CA. For information using tags with IAM to managepermissions, see Controlling Access Using IAM Tags (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html). (see [below for nested schema](#nestedatt--spec--tags))
- `type` (String)
- `usage_mode` (String) Specifies whether the CA issues general-purpose certificates that typicallyrequire a revocation mechanism, or short-lived certificates that may optionallyomit revocation because they expire quickly. Short-lived certificate validityis limited to seven days.The default value is GENERAL_PURPOSE.

<a id="nestedatt--spec--certificate_authority_configuration"></a>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,8 @@ Optional:
- `api_passthrough` (Attributes) Specifies X.509 certificate information to be included in the issued certificate.An APIPassthrough or APICSRPassthrough template variant must be selected,or else this parameter is ignored. For more information about using thesetemplates, see Understanding Certificate Templates (https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).If conflicting or duplicate certificate information is supplied during certificateissuance, Amazon Web Services Private CA applies order of operation rules(https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations)to determine what information is used. (see [below for nested schema](#nestedatt--spec--api_passthrough))
- `certificate_authority_arn` (String) The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority(https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html).This must be of the form:arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
- `certificate_authority_ref` (Attributes) AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReferencetype to provide more user friendly syntax for references using 'from' fieldEx:APIIDRef: from: name: my-api (see [below for nested schema](#nestedatt--spec--certificate_authority_ref))
- `csr` (String) The certificate signing request (CSR) for the certificate you want to issue.As an example, you can use the following OpenSSL command to create the CSRand a 2048 bit RSA private key.openssl req -new -newkey rsa:2048 -days 365 -keyout private/test_cert_priv_key.pem-out csr/test_cert_.csrIf you have a configuration file, you can then use the following OpenSSLcommand. The usr_cert block in the configuration file contains your X509version 3 extensions.openssl req -new -config openssl_rsa.cnf -extensions usr_cert -newkey rsa:2048-days 365 -keyout private/test_cert_priv_key.pem -out csr/test_cert_.csrNote: A CSR must provide either a subject name or a subject alternative nameor the request will be rejected.
- `csr_ref` (Attributes) AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReferencetype to provide more user friendly syntax for references using 'from' fieldEx:APIIDRef: from: name: my-api (see [below for nested schema](#nestedatt--spec--csr_ref))
- `certificate_signing_request` (String)
- `certificate_signing_request_ref` (Attributes) AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReferencetype to provide more user friendly syntax for references using 'from' fieldEx:APIIDRef: from: name: my-api (see [below for nested schema](#nestedatt--spec--certificate_signing_request_ref))
- `template_arn` (String) Specifies a custom configuration template to use when issuing a certificate.If this parameter is not provided, Amazon Web Services Private CA defaultsto the EndEntityCertificate/V1 template. For CA certificates, you shouldchoose the shortest path length that meets your needs. The path length isindicated by the PathLenN portion of the ARN, where N is the CA depth (https://docs.aws.amazon.com/privateca/latest/userguide/PcaTerms.html#terms-cadepth).Note: The CA depth configured on a subordinate CA certificate must not exceedthe limit set by its parents in the CA hierarchy.For a list of TemplateArn values supported by Amazon Web Services PrivateCA, see Understanding Certificate Templates (https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).
- `validity_not_before` (Attributes) Information describing the start of the validity period of the certificate.This parameter sets the “Not Before' date for the certificate.By default, when issuing a certificate, Amazon Web Services Private CA setsthe 'Not Before' date to the issuance time minus 60 minutes. This compensatesfor clock inconsistencies across computer systems. The ValidityNotBeforeparameter can be used to customize the “Not Before” value.Unlike the Validity parameter, the ValidityNotBefore parameter is optional.The ValidityNotBefore value is expressed as an explicit date and time, usingthe Validity type value ABSOLUTE. For more information, see Validity (https://docs.aws.amazon.com/privateca/latest/APIReference/API_Validity.html)in this API reference and Validity (https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.5)in RFC 5280. (see [below for nested schema](#nestedatt--spec--validity_not_before))

Expand Down Expand Up @@ -270,15 +270,15 @@ Optional:



<a id="nestedatt--spec--csr_ref"></a>
### Nested Schema for `spec.csr_ref`
<a id="nestedatt--spec--certificate_signing_request_ref"></a>
### Nested Schema for `spec.certificate_signing_request_ref`

Optional:

- `from` (Attributes) AWSResourceReference provides all the values necessary to reference anotherk8s resource for finding the identifier(Id/ARN/Name) (see [below for nested schema](#nestedatt--spec--csr_ref--from))
- `from` (Attributes) AWSResourceReference provides all the values necessary to reference anotherk8s resource for finding the identifier(Id/ARN/Name) (see [below for nested schema](#nestedatt--spec--certificate_signing_request_ref--from))

<a id="nestedatt--spec--csr_ref--from"></a>
### Nested Schema for `spec.csr_ref.from`
<a id="nestedatt--spec--certificate_signing_request_ref--from"></a>
### Nested Schema for `spec.certificate_signing_request_ref.from`

Optional:

Expand Down
Loading

0 comments on commit 722b6e4

Please sign in to comment.