cdktf-crd
Version:
63 lines (62 loc) • 3.6 kB
TypeScript
import { Manifest, type ManifestConfig } from "@cdktf/provider-kubernetes/lib/manifest";
import { Construct } from "constructs";
export declare class IamCnrmCloudGoogleComIAMAuditConfigV1beta1 extends Manifest {
constructor(scope: Construct, id: string, config: IamCnrmCloudGoogleComIAMAuditConfigV1beta1Config);
}
export interface IamCnrmCloudGoogleComIAMAuditConfigV1beta1Config extends ManifestConfig {
manifest: {
apiVersion: "iam.cnrm.cloud.google.com/v1beta1";
kind: "IAMAuditConfig";
metadata: {
annotations?: {
[key: string]: string;
};
labels?: {
[key: string]: string;
};
name: string;
namespace?: string;
};
/** @description IAMAuditConfigSpec defines the desired state of IAMAuditConfig. */
spec?: {
/** @description Required. The configuration for logging of each type of permission. */
auditLogConfigs: {
/** @description Identities that do not cause logging for this type of permission. The format is the same as that for 'members' in IAMPolicy/IAMPolicyMember. */
exemptedMembers?: string[];
/** @description Permission type for which logging is to be configured. Must be one of 'DATA_READ', 'DATA_WRITE', or 'ADMIN_READ'. */
logType: string;
}[];
/** @description Immutable. Required. The GCP resource to set the IAMAuditConfig on (e.g. project). */
resourceRef: {
apiVersion?: string;
external?: string;
kind: string;
name?: string;
namespace?: string;
};
/** @description Immutable. Required. The service for which to enable Data Access audit logs. The special value 'allServices' covers all services. Note that if there are audit configs covering both 'allServices' and a specific service, then the union of the two audit configs is used for that service: the 'logTypes' specified in each 'auditLogConfig' are enabled, and the 'exemptedMembers' in each 'auditLogConfig' are exempted. */
service: string;
};
/** @description IAMAuditConfigStatus defines the observed state of IAMAuditConfig. */
status?: {
/** @description Conditions represent the latest available observations of the IAMAuditConfig's current state. */
conditions?: {
/** @description Last time the condition transitioned from one status to another. */
lastTransitionTime?: string;
/** @description Human-readable message indicating details about last transition. */
message?: string;
/** @description Unique, one-word, CamelCase reason for the condition's last transition. */
reason?: string;
/** @description Status is the status of the condition. Can be True, False, Unknown. */
status?: string;
/** @description Type is the type of the condition. */
type?: string;
}[];
/**
* Format: int64
* @description ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource.
*/
observedGeneration?: number;
};
};
}