cdktf-crd
Version:
219 lines (218 loc) • 10.4 kB
TypeScript
import { Manifest, type ManifestConfig } from "@cdktf/provider-kubernetes/lib/manifest";
import { Construct } from "constructs";
export declare class KedaShClusterTriggerAuthenticationV1alpha1 extends Manifest {
constructor(scope: Construct, id: string, config: KedaShClusterTriggerAuthenticationV1alpha1Config);
}
export interface KedaShClusterTriggerAuthenticationV1alpha1Config extends ManifestConfig {
manifest: {
apiVersion: "keda.sh/v1alpha1";
kind: "ClusterTriggerAuthentication";
metadata: {
annotations?: {
[key: string]: string;
};
labels?: {
[key: string]: string;
};
name: string;
namespace?: string;
};
/** @description TriggerAuthenticationSpec defines the various ways to authenticate */
spec: {
/** @description AwsSecretManager is used to authenticate using AwsSecretManager */
awsSecretManager?: {
credentials?: {
accessKey: {
valueFrom: {
secretKeyRef: {
key: string;
name: string;
};
};
};
accessSecretKey: {
valueFrom: {
secretKeyRef: {
key: string;
name: string;
};
};
};
accessToken?: {
valueFrom: {
secretKeyRef: {
key: string;
name: string;
};
};
};
};
/** @description AuthPodIdentity allows users to select the platform native identity
* mechanism */
podIdentity?: {
/** @description Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set */
identityAuthorityHost?: string;
identityId?: string;
/** @description IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn */
identityOwner?: string;
/** @description Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set */
identityTenantId?: string;
/** @description PodIdentityProvider contains the list of providers */
provider: string;
/** @description RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner */
roleArn?: string;
};
region?: string;
secrets: {
name: string;
parameter: string;
secretKey?: string;
versionId?: string;
versionStage?: string;
}[];
};
/** @description AzureKeyVault is used to authenticate using Azure Key Vault */
azureKeyVault?: {
cloud?: {
activeDirectoryEndpoint?: string;
keyVaultResourceURL?: string;
type: string;
};
credentials?: {
clientId: string;
clientSecret: {
valueFrom: {
secretKeyRef: {
key: string;
name: string;
};
};
};
tenantId: string;
};
/** @description AuthPodIdentity allows users to select the platform native identity
* mechanism */
podIdentity?: {
/** @description Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set */
identityAuthorityHost?: string;
identityId?: string;
/** @description IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn */
identityOwner?: string;
/** @description Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set */
identityTenantId?: string;
/** @description PodIdentityProvider contains the list of providers */
provider: string;
/** @description RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner */
roleArn?: string;
};
secrets: {
name: string;
parameter: string;
version?: string;
}[];
vaultUri: string;
};
boundServiceAccountToken?: {
parameter: string;
serviceAccountName: string;
}[];
configMapTargetRef?: {
key: string;
name: string;
parameter: string;
}[];
env?: {
containerName?: string;
name: string;
parameter: string;
}[];
gcpSecretManager?: {
credentials?: {
clientSecret: {
valueFrom: {
secretKeyRef: {
key: string;
name: string;
};
};
};
};
/** @description AuthPodIdentity allows users to select the platform native identity
* mechanism */
podIdentity?: {
/** @description Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set */
identityAuthorityHost?: string;
identityId?: string;
/** @description IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn */
identityOwner?: string;
/** @description Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set */
identityTenantId?: string;
/** @description PodIdentityProvider contains the list of providers */
provider: string;
/** @description RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner */
roleArn?: string;
};
secrets: {
id: string;
parameter: string;
version?: string;
}[];
};
/** @description HashiCorpVault is used to authenticate using Hashicorp Vault */
hashiCorpVault?: {
address: string;
/** @description VaultAuthentication contains the list of Hashicorp Vault authentication methods */
authentication: string;
/** @description Credential defines the Hashicorp Vault credentials depending on the authentication method */
credential?: {
serviceAccount?: string;
token?: string;
};
mount?: string;
namespace?: string;
role?: string;
secrets: {
key: string;
parameter: string;
path: string;
pkiData?: {
altNames?: string;
commonName?: string;
format?: string;
ipSans?: string;
otherSans?: string;
ttl?: string;
uriSans?: string;
};
/** @description VaultSecretType defines the type of vault secret */
type?: string;
}[];
};
/** @description AuthPodIdentity allows users to select the platform native identity
* mechanism */
podIdentity?: {
/** @description Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set */
identityAuthorityHost?: string;
identityId?: string;
/** @description IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn */
identityOwner?: string;
/** @description Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set */
identityTenantId?: string;
/** @description PodIdentityProvider contains the list of providers */
provider: string;
/** @description RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner */
roleArn?: string;
};
secretTargetRef?: {
key: string;
name: string;
parameter: string;
}[];
};
/** @description TriggerAuthenticationStatus defines the observed state of TriggerAuthentication */
status?: {
scaledjobs?: string;
scaledobjects?: string;
};
};
}