TeleportCrownJewelV1
resources.teleport.dev / v1
apiVersion: resources.teleport.dev/v1
kind: TeleportCrownJewelV1
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
CrownJewel resource definition v1 from Teleport
aws_matchers []object
AWSMatchers is a list of AWS matchers. DEPRECATED: Use query instead.
arns
[]string
ARNs are AWS resources ARN to match.
regions
[]string
Regions are AWS regions to query for resources.
tags []object
Tags are AWS resource Tags to match. labels is a set of labels.
key
string
Key is the key of the tag.
values
[]string
Value is the value of the tag.
types
[]string
Types are AWS database types to match, "ec2", "rds", "s3", etc
query
string
Query is a Access Graph query to match resources.
teleport_matchers []object
TeleportMatchers is a list of teleport matchers. DEPRECATED: Use query instead.
kinds
[]string
Kind is the kind of the resource: ssh, k8s, db, etc Multiple kinds can be provided to match multiple kinds.
labels []object
Labels is a set of labels.
name
string
The name of the label.
values
[]string
The values associated with the label.
names
[]string
Names are the name of resources. When the name is provided, it will match resources with the same name.
status object
Status defines the observed state of the Teleport resource
conditions []object
Conditions represent the latest available observations of an object's state
lastTransitionTime
string required
lastTransitionTime is the last time the condition transitioned from one status to another.
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format:
date-time
message
string required
message is a human readable message indicating details about the transition.
This may be an empty string.
maxLength:
32768
observedGeneration
integer
observedGeneration represents the .metadata.generation that the condition was set based upon.
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
with respect to the current state of the instance.
format:
int64minimum:
0
reason
string required
reason contains a programmatic identifier indicating the reason for the condition's last transition.
Producers of specific condition types may define expected values and meanings for this field,
and whether the values are considered a guaranteed API.
The value should be a CamelCase string.
This field may not be empty.
pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$minLength:
1maxLength:
1024
status
string required
status of the condition, one of True, False, Unknown.
enum:
True, False, Unknown
type
string required
type of condition in CamelCase or in foo.example.com/CamelCase.
pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$maxLength:
316
teleportResourceID
integer
format:
int64No matches. Try .spec.aws_matchers for an exact path