Skip to content

Commit e0e3969

Browse files
ack-botack-bot
authored
operator ack-acmpca-controller (1.0.5)
1 parent ffd37b8 commit e0e3969

10 files changed

+1733
-0
lines changed

‎operators/ack-acmpca-controller/1.0.5/bundle.Dockerfile‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
FROM scratch
2+
3+
# Core bundle labels.
4+
LABEL operators.operatorframework.io.bundle.mediatype.v1=registry+v1
5+
LABEL operators.operatorframework.io.bundle.manifests.v1=manifests/
6+
LABEL operators.operatorframework.io.bundle.metadata.v1=metadata/
7+
LABEL operators.operatorframework.io.bundle.package.v1=ack-acmpca-controller
8+
LABEL operators.operatorframework.io.bundle.channels.v1=alpha
9+
LABEL operators.operatorframework.io.bundle.channel.default.v1=alpha
10+
LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.28.0
11+
LABEL operators.operatorframework.io.metrics.mediatype.v1=metrics+v1
12+
LABEL operators.operatorframework.io.metrics.project_layout=unknown
13+
14+
# Labels for testing.
15+
LABEL operators.operatorframework.io.test.mediatype.v1=scorecard+v1
16+
LABEL operators.operatorframework.io.test.config.v1=tests/scorecard/
17+
18+
# Copy files to locations specified by labels.
19+
COPY bundle/manifests /manifests/
20+
COPY bundle/metadata /metadata/
21+
COPY bundle/tests/scorecard /tests/scorecard/

‎operators/ack-acmpca-controller/1.0.5/manifests/ack-acmpca-controller.clusterserviceversion.yaml‎

Lines changed: 284 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,284 @@
1+
apiVersion: operators.coreos.com/v1alpha1
2+
kind: ClusterServiceVersion
3+
metadata:
4+
annotations:
5+
alm-examples: |-
6+
[
7+
{
8+
"apiVersion": "acmpca.services.k8s.aws/v1alpha1",
9+
"kind": "CertificateAuthority",
10+
"metadata": {
11+
"name": "example"
12+
},
13+
"spec": {}
14+
}
15+
]
16+
capabilities: Basic Install
17+
categories: Cloud Provider
18+
certified: "false"
19+
containerImage: public.ecr.aws/aws-controllers-k8s/acmpca-controller:1.0.5
20+
createdAt: "2025-02-21T20:20:12Z"
21+
description: AWS ACM PCA controller is a service controller for managing ACM PCA
22+
resources in Kubernetes
23+
operatorframework.io/suggested-namespace: ack-system
24+
operators.operatorframework.io/builder: operator-sdk-v1.28.0
25+
operators.operatorframework.io/project_layout: unknown
26+
repository: https://github.com/aws-controllers-k8s
27+
support: Community
28+
labels:
29+
operatorframework.io/arch.amd64: supported
30+
operatorframework.io/arch.arm64: supported
31+
operatorframework.io/os.linux: supported
32+
name: ack-acmpca-controller.v1.0.5
33+
namespace: placeholder
34+
spec:
35+
apiservicedefinitions: {}
36+
customresourcedefinitions:
37+
owned:
38+
- description: CertificateAuthority represents the state of an AWS acmpca CertificateAuthority
39+
resource.
40+
displayName: CertificateAuthority
41+
kind: CertificateAuthority
42+
name: certificateauthorities.acmpca.services.k8s.aws
43+
version: v1alpha1
44+
- description: CertificateAuthorityActivation represents the state of an AWS acmpca
45+
CertificateAuthorityActivation resource.
46+
displayName: CertificateAuthorityActivation
47+
kind: CertificateAuthorityActivation
48+
name: certificateauthorityactivations.acmpca.services.k8s.aws
49+
version: v1alpha1
50+
- description: Certificate represents the state of an AWS acmpca Certificate resource.
51+
displayName: Certificate
52+
kind: Certificate
53+
name: certificates.acmpca.services.k8s.aws
54+
version: v1alpha1
55+
description: |-
56+
Manage Amazon ACM PCA resources in AWS from within your Kubernetes cluster.
57+
58+
**About Amazon ACM PCA**
59+
60+
AWS Private CA enables creation of private certificate authority (CA) hierarchies, including root and subordinate CAs, without the investment and maintenance costs of operating an on-premises CA. Your private CAs can issue end-entity X.509 certificates useful in scenarios including:
61+
- Creating encrypted TLS communication channels
62+
- Authenticating users, computers, API endpoints, and IoT devices
63+
- Cryptographically signing code
64+
- Implementing Online Certificate Status Protocol (OCSP) for obtaining certificate revocation status
65+
66+
**About the AWS Controllers for Kubernetes**
67+
68+
This controller is a component of the [AWS Controller for Kubernetes](https://github.com/aws/aws-controllers-k8s) project. This project is currently in **developer preview**.
69+
70+
**Pre-Installation Steps**
71+
72+
Please follow the following link: [Red Hat OpenShift](https://aws-controllers-k8s.github.io/community/docs/user-docs/openshift/)
73+
displayName: AWS Controllers for Kubernetes - Amazon ACM PCA
74+
icon:
75+
- base64data: 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
76+
mediatype: image/svg+xml
77+
install:
78+
spec:
79+
clusterPermissions:
80+
- rules:
81+
- apiGroups:
82+
- ""
83+
resources:
84+
- configmaps
85+
- secrets
86+
verbs:
87+
- get
88+
- list
89+
- patch
90+
- watch
91+
- apiGroups:
92+
- ""
93+
resources:
94+
- namespaces
95+
verbs:
96+
- get
97+
- list
98+
- watch
99+
- apiGroups:
100+
- acmpca.services.k8s.aws
101+
resources:
102+
- certificateauthorities
103+
- certificateauthorityactivations
104+
- certificates
105+
verbs:
106+
- create
107+
- delete
108+
- get
109+
- list
110+
- patch
111+
- update
112+
- watch
113+
- apiGroups:
114+
- acmpca.services.k8s.aws
115+
resources:
116+
- certificateauthorities/status
117+
- certificateauthorityactivations/status
118+
- certificates/status
119+
verbs:
120+
- get
121+
- patch
122+
- update
123+
- apiGroups:
124+
- services.k8s.aws
125+
resources:
126+
- adoptedresources
127+
- fieldexports
128+
verbs:
129+
- create
130+
- delete
131+
- get
132+
- list
133+
- patch
134+
- update
135+
- watch
136+
- apiGroups:
137+
- services.k8s.aws
138+
resources:
139+
- adoptedresources/status
140+
- fieldexports/status
141+
verbs:
142+
- get
143+
- patch
144+
- update
145+
serviceAccountName: ack-acmpca-controller
146+
deployments:
147+
- label:
148+
app.kubernetes.io/name: ack-acmpca-controller
149+
app.kubernetes.io/part-of: ack-system
150+
name: ack-acmpca-controller
151+
spec:
152+
replicas: 1
153+
selector:
154+
matchLabels:
155+
app.kubernetes.io/name: ack-acmpca-controller
156+
strategy: {}
157+
template:
158+
metadata:
159+
labels:
160+
app.kubernetes.io/name: ack-acmpca-controller
161+
spec:
162+
containers:
163+
- args:
164+
- --aws-region
165+
- $(AWS_REGION)
166+
- --aws-endpoint-url
167+
- $(AWS_ENDPOINT_URL)
168+
- --enable-development-logging=$(ACK_ENABLE_DEVELOPMENT_LOGGING)
169+
- --log-level
170+
- $(ACK_LOG_LEVEL)
171+
- --resource-tags
172+
- $(ACK_RESOURCE_TAGS)
173+
- --watch-namespace
174+
- $(ACK_WATCH_NAMESPACE)
175+
- --enable-leader-election=$(ENABLE_LEADER_ELECTION)
176+
- --leader-election-namespace
177+
- $(LEADER_ELECTION_NAMESPACE)
178+
- --reconcile-default-max-concurrent-syncs
179+
- $(RECONCILE_DEFAULT_MAX_CONCURRENT_SYNCS)
180+
- --feature-gates
181+
- $(FEATURE_GATES)
182+
command:
183+
- ./bin/controller
184+
env:
185+
- name: ACK_SYSTEM_NAMESPACE
186+
valueFrom:
187+
fieldRef:
188+
fieldPath: metadata.namespace
189+
envFrom:
190+
- configMapRef:
191+
name: ack-acmpca-user-config
192+
optional: false
193+
- secretRef:
194+
name: ack-acmpca-user-secrets
195+
optional: true
196+
image: public.ecr.aws/aws-controllers-k8s/acmpca-controller:1.0.5
197+
livenessProbe:
198+
httpGet:
199+
path: /healthz
200+
port: 8081
201+
initialDelaySeconds: 15
202+
periodSeconds: 20
203+
name: controller
204+
ports:
205+
- containerPort: 8080
206+
name: http
207+
readinessProbe:
208+
httpGet:
209+
path: /readyz
210+
port: 8081
211+
initialDelaySeconds: 5
212+
periodSeconds: 10
213+
resources:
214+
limits:
215+
cpu: 100m
216+
memory: 300Mi
217+
requests:
218+
cpu: 100m
219+
memory: 200Mi
220+
securityContext:
221+
allowPrivilegeEscalation: false
222+
capabilities:
223+
drop:
224+
- ALL
225+
privileged: false
226+
runAsNonRoot: true
227+
dnsPolicy: ClusterFirst
228+
securityContext:
229+
seccompProfile:
230+
type: RuntimeDefault
231+
serviceAccountName: ack-acmpca-controller
232+
terminationGracePeriodSeconds: 10
233+
permissions:
234+
- rules:
235+
- apiGroups:
236+
- coordination.k8s.io
237+
resources:
238+
- leases
239+
verbs:
240+
- get
241+
- list
242+
- watch
243+
- create
244+
- update
245+
- patch
246+
- delete
247+
- apiGroups:
248+
- ""
249+
resources:
250+
- events
251+
verbs:
252+
- create
253+
- patch
254+
serviceAccountName: ack-acmpca-controller
255+
strategy: deployment
256+
installModes:
257+
- supported: true
258+
type: OwnNamespace
259+
- supported: true
260+
type: SingleNamespace
261+
- supported: true
262+
type: MultiNamespace
263+
- supported: true
264+
type: AllNamespaces
265+
keywords:
266+
- acmpca
267+
- aws
268+
- amazon
269+
- ack
270+
links:
271+
- name: AWS Controllers for Kubernetes
272+
url: https://github.com/aws-controllers-k8s/community
273+
- name: Documentation
274+
url: https://aws-controllers-k8s.github.io/community/
275+
- name: Amazon ACM PCA Developer Resources
276+
url: https://aws.amazon.com/private-ca/resources
277+
maintainers:
278+
- email: [email protected]
279+
name: acmpca maintainer team
280+
maturity: alpha
281+
provider:
282+
name: Amazon, Inc.
283+
url: https://aws.amazon.com
284+
version: 1.0.5

‎operators/ack-acmpca-controller/1.0.5/manifests/ack-acmpca-metrics-service_v1_service.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
creationTimestamp: null
5+
name: ack-acmpca-metrics-service
6+
spec:
7+
ports:
8+
- name: metricsport
9+
port: 8080
10+
protocol: TCP
11+
targetPort: http
12+
selector:
13+
app.kubernetes.io/name: ack-acmpca-controller
14+
type: NodePort
15+
status:
16+
loadBalancer: {}

‎operators/ack-acmpca-controller/1.0.5/manifests/ack-acmpca-reader_rbac.authorization.k8s.io_v1_role.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: Role
3+
metadata:
4+
creationTimestamp: null
5+
name: ack-acmpca-reader
6+
rules:
7+
- apiGroups:
8+
- acmpca.services.k8s.aws
9+
resources:
10+
- certificates
11+
- certificateauthorities
12+
- certificateauthorityactivations
13+
verbs:
14+
- get
15+
- list
16+
- watch

‎operators/ack-acmpca-controller/1.0.5/manifests/ack-acmpca-writer_rbac.authorization.k8s.io_v1_role.yaml‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: Role
3+
metadata:
4+
creationTimestamp: null
5+
name: ack-acmpca-writer
6+
rules:
7+
- apiGroups:
8+
- acmpca.services.k8s.aws
9+
resources:
10+
- certificates
11+
- certificateauthorities
12+
- certificateauthorityactivations
13+
verbs:
14+
- create
15+
- delete
16+
- get
17+
- list
18+
- patch
19+
- update
20+
- watch
21+
- apiGroups:
22+
- acmpca.services.k8s.aws
23+
resources:
24+
- certificates
25+
- certificateauthorities
26+
- certificateauthorityactivations
27+
verbs:
28+
- get
29+
- patch
30+
- update

0 commit comments

Comments
 (0)