From ac1905f5ba425cdc55ef13d7a88b8d113670b1bb Mon Sep 17 00:00:00 2001 From: Rickard von Essen Date: Thu, 26 Sep 2024 12:29:02 +0000 Subject: [PATCH] feat(networkconnectivity): add Service Connection Policy support This adds support for google_network_connectivity_service_connection_policy Terraform resource, see https://registry.terraform.io/providers/hashicorp/google/5.39.1/docs/resources/network_connectivity_service_connection_policy Signed-off-by: Rickard von Essen --- .../v1beta1/zz_generated.conversion_hubs.go | 3 + .../v1beta1/zz_generated.deepcopy.go | 711 ++++++++++++++ .../v1beta1/zz_generated.managed.go | 60 ++ .../v1beta1/zz_generated.managedlist.go | 9 + .../v1beta1/zz_generated.resolvers.go | 99 +- .../zz_serviceconnectionpolicy_terraformed.go | 129 +++ .../zz_serviceconnectionpolicy_types.go | 340 +++++++ config/externalname.go | 2 + config/generated.lst | 2 +- config/networkconnectivity/config.go | 17 + .../v1beta1/serviceconnectionpolicy.yaml | 52 ++ .../v1beta1/serviceconnectionpolicy.yaml | 52 ++ .../serviceconnectionpolicy/zz_controller.go | 92 ++ internal/controller/zz_monolith_setup.go | 2 + .../zz_networkconnectivity_setup.go | 2 + ....upbound.io_serviceconnectionpolicies.yaml | 870 ++++++++++++++++++ 16 files changed, 2438 insertions(+), 4 deletions(-) create mode 100755 apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_terraformed.go create mode 100755 apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_types.go create mode 100644 config/networkconnectivity/config.go create mode 100644 examples-generated/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml create mode 100644 examples/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml create mode 100755 internal/controller/networkconnectivity/serviceconnectionpolicy/zz_controller.go create mode 100644 package/crds/networkconnectivity.gcp.upbound.io_serviceconnectionpolicies.yaml diff --git a/apis/networkconnectivity/v1beta1/zz_generated.conversion_hubs.go b/apis/networkconnectivity/v1beta1/zz_generated.conversion_hubs.go index d9bd77a5c..d971844b5 100755 --- a/apis/networkconnectivity/v1beta1/zz_generated.conversion_hubs.go +++ b/apis/networkconnectivity/v1beta1/zz_generated.conversion_hubs.go @@ -8,3 +8,6 @@ package v1beta1 // Hub marks this type as a conversion hub. func (tr *Hub) Hub() {} + +// Hub marks this type as a conversion hub. +func (tr *ServiceConnectionPolicy) Hub() {} diff --git a/apis/networkconnectivity/v1beta1/zz_generated.deepcopy.go b/apis/networkconnectivity/v1beta1/zz_generated.deepcopy.go index 58dabf376..557fb90d5 100644 --- a/apis/networkconnectivity/v1beta1/zz_generated.deepcopy.go +++ b/apis/networkconnectivity/v1beta1/zz_generated.deepcopy.go @@ -13,6 +13,154 @@ import ( runtime "k8s.io/apimachinery/pkg/runtime" ) +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorInfoInitParameters) DeepCopyInto(out *ErrorInfoInitParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorInfoInitParameters. +func (in *ErrorInfoInitParameters) DeepCopy() *ErrorInfoInitParameters { + if in == nil { + return nil + } + out := new(ErrorInfoInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorInfoObservation) DeepCopyInto(out *ErrorInfoObservation) { + *out = *in + if in.Domain != nil { + in, out := &in.Domain, &out.Domain + *out = new(string) + **out = **in + } + if in.Metadata != nil { + in, out := &in.Metadata, &out.Metadata + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.Reason != nil { + in, out := &in.Reason, &out.Reason + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorInfoObservation. +func (in *ErrorInfoObservation) DeepCopy() *ErrorInfoObservation { + if in == nil { + return nil + } + out := new(ErrorInfoObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorInfoParameters) DeepCopyInto(out *ErrorInfoParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorInfoParameters. +func (in *ErrorInfoParameters) DeepCopy() *ErrorInfoParameters { + if in == nil { + return nil + } + out := new(ErrorInfoParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorInitParameters) DeepCopyInto(out *ErrorInitParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorInitParameters. +func (in *ErrorInitParameters) DeepCopy() *ErrorInitParameters { + if in == nil { + return nil + } + out := new(ErrorInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorObservation) DeepCopyInto(out *ErrorObservation) { + *out = *in + if in.Code != nil { + in, out := &in.Code, &out.Code + *out = new(float64) + **out = **in + } + if in.Details != nil { + in, out := &in.Details, &out.Details + *out = make([]map[string]*string, len(*in)) + for i := range *in { + if (*in)[i] != nil { + in, out := &(*in)[i], &(*out)[i] + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + } + } + if in.Message != nil { + in, out := &in.Message, &out.Message + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorObservation. +func (in *ErrorObservation) DeepCopy() *ErrorObservation { + if in == nil { + return nil + } + out := new(ErrorObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ErrorParameters) DeepCopyInto(out *ErrorParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ErrorParameters. +func (in *ErrorParameters) DeepCopy() *ErrorParameters { + if in == nil { + return nil + } + out := new(ErrorParameters) + in.DeepCopyInto(out) + return out +} + // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. func (in *Hub) DeepCopyInto(out *Hub) { *out = *in @@ -784,6 +932,213 @@ func (in *LinkedVPNTunnelsParameters) DeepCopy() *LinkedVPNTunnelsParameters { return out } +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConfigInitParameters) DeepCopyInto(out *PscConfigInitParameters) { + *out = *in + if in.Limit != nil { + in, out := &in.Limit, &out.Limit + *out = new(string) + **out = **in + } + if in.Subnetworks != nil { + in, out := &in.Subnetworks, &out.Subnetworks + *out = make([]*string, len(*in)) + for i := range *in { + if (*in)[i] != nil { + in, out := &(*in)[i], &(*out)[i] + *out = new(string) + **out = **in + } + } + } + if in.SubnetworksRefs != nil { + in, out := &in.SubnetworksRefs, &out.SubnetworksRefs + *out = make([]v1.Reference, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } + if in.SubnetworksSelector != nil { + in, out := &in.SubnetworksSelector, &out.SubnetworksSelector + *out = new(v1.Selector) + (*in).DeepCopyInto(*out) + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConfigInitParameters. +func (in *PscConfigInitParameters) DeepCopy() *PscConfigInitParameters { + if in == nil { + return nil + } + out := new(PscConfigInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConfigObservation) DeepCopyInto(out *PscConfigObservation) { + *out = *in + if in.Limit != nil { + in, out := &in.Limit, &out.Limit + *out = new(string) + **out = **in + } + if in.Subnetworks != nil { + in, out := &in.Subnetworks, &out.Subnetworks + *out = make([]*string, len(*in)) + for i := range *in { + if (*in)[i] != nil { + in, out := &(*in)[i], &(*out)[i] + *out = new(string) + **out = **in + } + } + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConfigObservation. +func (in *PscConfigObservation) DeepCopy() *PscConfigObservation { + if in == nil { + return nil + } + out := new(PscConfigObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConfigParameters) DeepCopyInto(out *PscConfigParameters) { + *out = *in + if in.Limit != nil { + in, out := &in.Limit, &out.Limit + *out = new(string) + **out = **in + } + if in.Subnetworks != nil { + in, out := &in.Subnetworks, &out.Subnetworks + *out = make([]*string, len(*in)) + for i := range *in { + if (*in)[i] != nil { + in, out := &(*in)[i], &(*out)[i] + *out = new(string) + **out = **in + } + } + } + if in.SubnetworksRefs != nil { + in, out := &in.SubnetworksRefs, &out.SubnetworksRefs + *out = make([]v1.Reference, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } + if in.SubnetworksSelector != nil { + in, out := &in.SubnetworksSelector, &out.SubnetworksSelector + *out = new(v1.Selector) + (*in).DeepCopyInto(*out) + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConfigParameters. +func (in *PscConfigParameters) DeepCopy() *PscConfigParameters { + if in == nil { + return nil + } + out := new(PscConfigParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConnectionsInitParameters) DeepCopyInto(out *PscConnectionsInitParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConnectionsInitParameters. +func (in *PscConnectionsInitParameters) DeepCopy() *PscConnectionsInitParameters { + if in == nil { + return nil + } + out := new(PscConnectionsInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConnectionsObservation) DeepCopyInto(out *PscConnectionsObservation) { + *out = *in + if in.ConsumerAddress != nil { + in, out := &in.ConsumerAddress, &out.ConsumerAddress + *out = new(string) + **out = **in + } + if in.ConsumerForwardingRule != nil { + in, out := &in.ConsumerForwardingRule, &out.ConsumerForwardingRule + *out = new(string) + **out = **in + } + if in.ConsumerTargetProject != nil { + in, out := &in.ConsumerTargetProject, &out.ConsumerTargetProject + *out = new(string) + **out = **in + } + if in.Error != nil { + in, out := &in.Error, &out.Error + *out = new(ErrorObservation) + (*in).DeepCopyInto(*out) + } + if in.ErrorInfo != nil { + in, out := &in.ErrorInfo, &out.ErrorInfo + *out = new(ErrorInfoObservation) + (*in).DeepCopyInto(*out) + } + if in.ErrorType != nil { + in, out := &in.ErrorType, &out.ErrorType + *out = new(string) + **out = **in + } + if in.GceOperation != nil { + in, out := &in.GceOperation, &out.GceOperation + *out = new(string) + **out = **in + } + if in.PscConnectionID != nil { + in, out := &in.PscConnectionID, &out.PscConnectionID + *out = new(string) + **out = **in + } + if in.State != nil { + in, out := &in.State, &out.State + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConnectionsObservation. +func (in *PscConnectionsObservation) DeepCopy() *PscConnectionsObservation { + if in == nil { + return nil + } + out := new(PscConnectionsObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *PscConnectionsParameters) DeepCopyInto(out *PscConnectionsParameters) { + *out = *in +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PscConnectionsParameters. +func (in *PscConnectionsParameters) DeepCopy() *PscConnectionsParameters { + if in == nil { + return nil + } + out := new(PscConnectionsParameters) + in.DeepCopyInto(out) + return out +} + // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. func (in *RoutingVpcsInitParameters) DeepCopyInto(out *RoutingVpcsInitParameters) { *out = *in @@ -834,6 +1189,362 @@ func (in *RoutingVpcsParameters) DeepCopy() *RoutingVpcsParameters { return out } +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicy) DeepCopyInto(out *ServiceConnectionPolicy) { + *out = *in + out.TypeMeta = in.TypeMeta + in.ObjectMeta.DeepCopyInto(&out.ObjectMeta) + in.Spec.DeepCopyInto(&out.Spec) + in.Status.DeepCopyInto(&out.Status) +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicy. +func (in *ServiceConnectionPolicy) DeepCopy() *ServiceConnectionPolicy { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicy) + in.DeepCopyInto(out) + return out +} + +// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object. +func (in *ServiceConnectionPolicy) DeepCopyObject() runtime.Object { + if c := in.DeepCopy(); c != nil { + return c + } + return nil +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicyInitParameters) DeepCopyInto(out *ServiceConnectionPolicyInitParameters) { + *out = *in + if in.Description != nil { + in, out := &in.Description, &out.Description + *out = new(string) + **out = **in + } + if in.Labels != nil { + in, out := &in.Labels, &out.Labels + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.Network != nil { + in, out := &in.Network, &out.Network + *out = new(string) + **out = **in + } + if in.NetworkRef != nil { + in, out := &in.NetworkRef, &out.NetworkRef + *out = new(v1.Reference) + (*in).DeepCopyInto(*out) + } + if in.NetworkSelector != nil { + in, out := &in.NetworkSelector, &out.NetworkSelector + *out = new(v1.Selector) + (*in).DeepCopyInto(*out) + } + if in.Project != nil { + in, out := &in.Project, &out.Project + *out = new(string) + **out = **in + } + if in.PscConfig != nil { + in, out := &in.PscConfig, &out.PscConfig + *out = new(PscConfigInitParameters) + (*in).DeepCopyInto(*out) + } + if in.ServiceClass != nil { + in, out := &in.ServiceClass, &out.ServiceClass + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicyInitParameters. +func (in *ServiceConnectionPolicyInitParameters) DeepCopy() *ServiceConnectionPolicyInitParameters { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicyInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicyList) DeepCopyInto(out *ServiceConnectionPolicyList) { + *out = *in + out.TypeMeta = in.TypeMeta + in.ListMeta.DeepCopyInto(&out.ListMeta) + if in.Items != nil { + in, out := &in.Items, &out.Items + *out = make([]ServiceConnectionPolicy, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicyList. +func (in *ServiceConnectionPolicyList) DeepCopy() *ServiceConnectionPolicyList { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicyList) + in.DeepCopyInto(out) + return out +} + +// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object. +func (in *ServiceConnectionPolicyList) DeepCopyObject() runtime.Object { + if c := in.DeepCopy(); c != nil { + return c + } + return nil +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicyObservation) DeepCopyInto(out *ServiceConnectionPolicyObservation) { + *out = *in + if in.CreateTime != nil { + in, out := &in.CreateTime, &out.CreateTime + *out = new(string) + **out = **in + } + if in.Description != nil { + in, out := &in.Description, &out.Description + *out = new(string) + **out = **in + } + if in.EffectiveLabels != nil { + in, out := &in.EffectiveLabels, &out.EffectiveLabels + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.Etag != nil { + in, out := &in.Etag, &out.Etag + *out = new(string) + **out = **in + } + if in.ID != nil { + in, out := &in.ID, &out.ID + *out = new(string) + **out = **in + } + if in.Infrastructure != nil { + in, out := &in.Infrastructure, &out.Infrastructure + *out = new(string) + **out = **in + } + if in.Labels != nil { + in, out := &in.Labels, &out.Labels + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.Location != nil { + in, out := &in.Location, &out.Location + *out = new(string) + **out = **in + } + if in.Network != nil { + in, out := &in.Network, &out.Network + *out = new(string) + **out = **in + } + if in.Project != nil { + in, out := &in.Project, &out.Project + *out = new(string) + **out = **in + } + if in.PscConfig != nil { + in, out := &in.PscConfig, &out.PscConfig + *out = new(PscConfigObservation) + (*in).DeepCopyInto(*out) + } + if in.PscConnections != nil { + in, out := &in.PscConnections, &out.PscConnections + *out = make([]PscConnectionsObservation, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } + if in.ServiceClass != nil { + in, out := &in.ServiceClass, &out.ServiceClass + *out = new(string) + **out = **in + } + if in.TerraformLabels != nil { + in, out := &in.TerraformLabels, &out.TerraformLabels + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.UpdateTime != nil { + in, out := &in.UpdateTime, &out.UpdateTime + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicyObservation. +func (in *ServiceConnectionPolicyObservation) DeepCopy() *ServiceConnectionPolicyObservation { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicyObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicyParameters) DeepCopyInto(out *ServiceConnectionPolicyParameters) { + *out = *in + if in.Description != nil { + in, out := &in.Description, &out.Description + *out = new(string) + **out = **in + } + if in.Labels != nil { + in, out := &in.Labels, &out.Labels + *out = make(map[string]*string, len(*in)) + for key, val := range *in { + var outVal *string + if val == nil { + (*out)[key] = nil + } else { + inVal := (*in)[key] + in, out := &inVal, &outVal + *out = new(string) + **out = **in + } + (*out)[key] = outVal + } + } + if in.Location != nil { + in, out := &in.Location, &out.Location + *out = new(string) + **out = **in + } + if in.Network != nil { + in, out := &in.Network, &out.Network + *out = new(string) + **out = **in + } + if in.NetworkRef != nil { + in, out := &in.NetworkRef, &out.NetworkRef + *out = new(v1.Reference) + (*in).DeepCopyInto(*out) + } + if in.NetworkSelector != nil { + in, out := &in.NetworkSelector, &out.NetworkSelector + *out = new(v1.Selector) + (*in).DeepCopyInto(*out) + } + if in.Project != nil { + in, out := &in.Project, &out.Project + *out = new(string) + **out = **in + } + if in.PscConfig != nil { + in, out := &in.PscConfig, &out.PscConfig + *out = new(PscConfigParameters) + (*in).DeepCopyInto(*out) + } + if in.ServiceClass != nil { + in, out := &in.ServiceClass, &out.ServiceClass + *out = new(string) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicyParameters. +func (in *ServiceConnectionPolicyParameters) DeepCopy() *ServiceConnectionPolicyParameters { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicyParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicySpec) DeepCopyInto(out *ServiceConnectionPolicySpec) { + *out = *in + in.ResourceSpec.DeepCopyInto(&out.ResourceSpec) + in.ForProvider.DeepCopyInto(&out.ForProvider) + in.InitProvider.DeepCopyInto(&out.InitProvider) +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicySpec. +func (in *ServiceConnectionPolicySpec) DeepCopy() *ServiceConnectionPolicySpec { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicySpec) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *ServiceConnectionPolicyStatus) DeepCopyInto(out *ServiceConnectionPolicyStatus) { + *out = *in + in.ResourceStatus.DeepCopyInto(&out.ResourceStatus) + in.AtProvider.DeepCopyInto(&out.AtProvider) +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceConnectionPolicyStatus. +func (in *ServiceConnectionPolicyStatus) DeepCopy() *ServiceConnectionPolicyStatus { + if in == nil { + return nil + } + out := new(ServiceConnectionPolicyStatus) + in.DeepCopyInto(out) + return out +} + // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. func (in *Spoke) DeepCopyInto(out *Spoke) { *out = *in diff --git a/apis/networkconnectivity/v1beta1/zz_generated.managed.go b/apis/networkconnectivity/v1beta1/zz_generated.managed.go index c7c0c4555..efb952b6e 100644 --- a/apis/networkconnectivity/v1beta1/zz_generated.managed.go +++ b/apis/networkconnectivity/v1beta1/zz_generated.managed.go @@ -67,6 +67,66 @@ func (mg *Hub) SetWriteConnectionSecretToReference(r *xpv1.SecretReference) { mg.Spec.WriteConnectionSecretToReference = r } +// GetCondition of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetCondition(ct xpv1.ConditionType) xpv1.Condition { + return mg.Status.GetCondition(ct) +} + +// GetDeletionPolicy of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetDeletionPolicy() xpv1.DeletionPolicy { + return mg.Spec.DeletionPolicy +} + +// GetManagementPolicies of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetManagementPolicies() xpv1.ManagementPolicies { + return mg.Spec.ManagementPolicies +} + +// GetProviderConfigReference of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetProviderConfigReference() *xpv1.Reference { + return mg.Spec.ProviderConfigReference +} + +// GetPublishConnectionDetailsTo of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetPublishConnectionDetailsTo() *xpv1.PublishConnectionDetailsTo { + return mg.Spec.PublishConnectionDetailsTo +} + +// GetWriteConnectionSecretToReference of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) GetWriteConnectionSecretToReference() *xpv1.SecretReference { + return mg.Spec.WriteConnectionSecretToReference +} + +// SetConditions of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetConditions(c ...xpv1.Condition) { + mg.Status.SetConditions(c...) +} + +// SetDeletionPolicy of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetDeletionPolicy(r xpv1.DeletionPolicy) { + mg.Spec.DeletionPolicy = r +} + +// SetManagementPolicies of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetManagementPolicies(r xpv1.ManagementPolicies) { + mg.Spec.ManagementPolicies = r +} + +// SetProviderConfigReference of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetProviderConfigReference(r *xpv1.Reference) { + mg.Spec.ProviderConfigReference = r +} + +// SetPublishConnectionDetailsTo of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetPublishConnectionDetailsTo(r *xpv1.PublishConnectionDetailsTo) { + mg.Spec.PublishConnectionDetailsTo = r +} + +// SetWriteConnectionSecretToReference of this ServiceConnectionPolicy. +func (mg *ServiceConnectionPolicy) SetWriteConnectionSecretToReference(r *xpv1.SecretReference) { + mg.Spec.WriteConnectionSecretToReference = r +} + // GetCondition of this Spoke. func (mg *Spoke) GetCondition(ct xpv1.ConditionType) xpv1.Condition { return mg.Status.GetCondition(ct) diff --git a/apis/networkconnectivity/v1beta1/zz_generated.managedlist.go b/apis/networkconnectivity/v1beta1/zz_generated.managedlist.go index 2c4966994..37a910f89 100644 --- a/apis/networkconnectivity/v1beta1/zz_generated.managedlist.go +++ b/apis/networkconnectivity/v1beta1/zz_generated.managedlist.go @@ -16,6 +16,15 @@ func (l *HubList) GetItems() []resource.Managed { return items } +// GetItems of this ServiceConnectionPolicyList. +func (l *ServiceConnectionPolicyList) GetItems() []resource.Managed { + items := make([]resource.Managed, len(l.Items)) + for i := range l.Items { + items[i] = &l.Items[i] + } + return items +} + // GetItems of this SpokeList. func (l *SpokeList) GetItems() []resource.Managed { items := make([]resource.Managed, len(l.Items)) diff --git a/apis/networkconnectivity/v1beta1/zz_generated.resolvers.go b/apis/networkconnectivity/v1beta1/zz_generated.resolvers.go index a21218ee1..cd5c9b7f4 100644 --- a/apis/networkconnectivity/v1beta1/zz_generated.resolvers.go +++ b/apis/networkconnectivity/v1beta1/zz_generated.resolvers.go @@ -13,12 +13,105 @@ import ( errors "github.com/pkg/errors" xpresource "github.com/crossplane/crossplane-runtime/pkg/resource" - client "sigs.k8s.io/controller-runtime/pkg/client" - - // ResolveReferences of this Spoke. apisresolver "github.com/upbound/provider-gcp/internal/apis" + client "sigs.k8s.io/controller-runtime/pkg/client" ) +func (mg *ServiceConnectionPolicy) ResolveReferences( // ResolveReferences of this ServiceConnectionPolicy. + ctx context.Context, c client.Reader) error { + var m xpresource.Managed + var l xpresource.ManagedList + r := reference.NewAPIResolver(c, mg) + + var rsp reference.ResolutionResponse + var mrsp reference.MultiResolutionResponse + var err error + { + m, l, err = apisresolver.GetManagedResource("compute.gcp.upbound.io", "v1beta1", "Network", "NetworkList") + if err != nil { + return errors.Wrap(err, "failed to get the reference target managed resource and its list for reference resolution") + } + + rsp, err = r.Resolve(ctx, reference.ResolutionRequest{ + CurrentValue: reference.FromPtrValue(mg.Spec.ForProvider.Network), + Extract: resource.ExtractResourceID(), + Reference: mg.Spec.ForProvider.NetworkRef, + Selector: mg.Spec.ForProvider.NetworkSelector, + To: reference.To{List: l, Managed: m}, + }) + } + if err != nil { + return errors.Wrap(err, "mg.Spec.ForProvider.Network") + } + mg.Spec.ForProvider.Network = reference.ToPtrValue(rsp.ResolvedValue) + mg.Spec.ForProvider.NetworkRef = rsp.ResolvedReference + + if mg.Spec.ForProvider.PscConfig != nil { + { + m, l, err = apisresolver.GetManagedResource("compute.gcp.upbound.io", "v1beta2", "Subnetwork", "SubnetworkList") + if err != nil { + return errors.Wrap(err, "failed to get the reference target managed resource and its list for reference resolution") + } + mrsp, err = r.ResolveMultiple(ctx, reference.MultiResolutionRequest{ + CurrentValues: reference.FromPtrValues(mg.Spec.ForProvider.PscConfig.Subnetworks), + Extract: resource.ExtractResourceID(), + References: mg.Spec.ForProvider.PscConfig.SubnetworksRefs, + Selector: mg.Spec.ForProvider.PscConfig.SubnetworksSelector, + To: reference.To{List: l, Managed: m}, + }) + } + if err != nil { + return errors.Wrap(err, "mg.Spec.ForProvider.PscConfig.Subnetworks") + } + mg.Spec.ForProvider.PscConfig.Subnetworks = reference.ToPtrValues(mrsp.ResolvedValues) + mg.Spec.ForProvider.PscConfig.SubnetworksRefs = mrsp.ResolvedReferences + + } + { + m, l, err = apisresolver.GetManagedResource("compute.gcp.upbound.io", "v1beta1", "Network", "NetworkList") + if err != nil { + return errors.Wrap(err, "failed to get the reference target managed resource and its list for reference resolution") + } + rsp, err = r.Resolve(ctx, reference.ResolutionRequest{ + CurrentValue: reference.FromPtrValue(mg.Spec.InitProvider.Network), + Extract: resource.ExtractResourceID(), + Reference: mg.Spec.InitProvider.NetworkRef, + Selector: mg.Spec.InitProvider.NetworkSelector, + To: reference.To{List: l, Managed: m}, + }) + } + if err != nil { + return errors.Wrap(err, "mg.Spec.InitProvider.Network") + } + mg.Spec.InitProvider.Network = reference.ToPtrValue(rsp.ResolvedValue) + mg.Spec.InitProvider.NetworkRef = rsp.ResolvedReference + + if mg.Spec.InitProvider.PscConfig != nil { + { + m, l, err = apisresolver.GetManagedResource("compute.gcp.upbound.io", "v1beta2", "Subnetwork", "SubnetworkList") + if err != nil { + return errors.Wrap(err, "failed to get the reference target managed resource and its list for reference resolution") + } + mrsp, err = r.ResolveMultiple(ctx, reference.MultiResolutionRequest{ + CurrentValues: reference.FromPtrValues(mg.Spec.InitProvider.PscConfig.Subnetworks), + Extract: resource.ExtractResourceID(), + References: mg.Spec.InitProvider.PscConfig.SubnetworksRefs, + Selector: mg.Spec.InitProvider.PscConfig.SubnetworksSelector, + To: reference.To{List: l, Managed: m}, + }) + } + if err != nil { + return errors.Wrap(err, "mg.Spec.InitProvider.PscConfig.Subnetworks") + } + mg.Spec.InitProvider.PscConfig.Subnetworks = reference.ToPtrValues(mrsp.ResolvedValues) + mg.Spec.InitProvider.PscConfig.SubnetworksRefs = mrsp.ResolvedReferences + + } + + return nil +} + +// ResolveReferences of this Spoke. func (mg *Spoke) ResolveReferences(ctx context.Context, c client.Reader) error { var m xpresource.Managed var l xpresource.ManagedList diff --git a/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_terraformed.go b/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_terraformed.go new file mode 100755 index 000000000..9f3513341 --- /dev/null +++ b/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_terraformed.go @@ -0,0 +1,129 @@ +// SPDX-FileCopyrightText: 2024 The Crossplane Authors +// +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by upjet. DO NOT EDIT. + +package v1beta1 + +import ( + "dario.cat/mergo" + "github.com/pkg/errors" + + "github.com/crossplane/upjet/pkg/resource" + "github.com/crossplane/upjet/pkg/resource/json" +) + +// GetTerraformResourceType returns Terraform resource type for this ServiceConnectionPolicy +func (mg *ServiceConnectionPolicy) GetTerraformResourceType() string { + return "google_network_connectivity_service_connection_policy" +} + +// GetConnectionDetailsMapping for this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetConnectionDetailsMapping() map[string]string { + return nil +} + +// GetObservation of this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetObservation() (map[string]any, error) { + o, err := json.TFParser.Marshal(tr.Status.AtProvider) + if err != nil { + return nil, err + } + base := map[string]any{} + return base, json.TFParser.Unmarshal(o, &base) +} + +// SetObservation for this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) SetObservation(obs map[string]any) error { + p, err := json.TFParser.Marshal(obs) + if err != nil { + return err + } + return json.TFParser.Unmarshal(p, &tr.Status.AtProvider) +} + +// GetID returns ID of underlying Terraform resource of this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetID() string { + if tr.Status.AtProvider.ID == nil { + return "" + } + return *tr.Status.AtProvider.ID +} + +// GetParameters of this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetParameters() (map[string]any, error) { + p, err := json.TFParser.Marshal(tr.Spec.ForProvider) + if err != nil { + return nil, err + } + base := map[string]any{} + return base, json.TFParser.Unmarshal(p, &base) +} + +// SetParameters for this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) SetParameters(params map[string]any) error { + p, err := json.TFParser.Marshal(params) + if err != nil { + return err + } + return json.TFParser.Unmarshal(p, &tr.Spec.ForProvider) +} + +// GetInitParameters of this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetInitParameters() (map[string]any, error) { + p, err := json.TFParser.Marshal(tr.Spec.InitProvider) + if err != nil { + return nil, err + } + base := map[string]any{} + return base, json.TFParser.Unmarshal(p, &base) +} + +// GetInitParameters of this ServiceConnectionPolicy +func (tr *ServiceConnectionPolicy) GetMergedParameters(shouldMergeInitProvider bool) (map[string]any, error) { + params, err := tr.GetParameters() + if err != nil { + return nil, errors.Wrapf(err, "cannot get parameters for resource '%q'", tr.GetName()) + } + if !shouldMergeInitProvider { + return params, nil + } + + initParams, err := tr.GetInitParameters() + if err != nil { + return nil, errors.Wrapf(err, "cannot get init parameters for resource '%q'", tr.GetName()) + } + + // Note(lsviben): mergo.WithSliceDeepCopy is needed to merge the + // slices from the initProvider to forProvider. As it also sets + // overwrite to true, we need to set it back to false, we don't + // want to overwrite the forProvider fields with the initProvider + // fields. + err = mergo.Merge(¶ms, initParams, mergo.WithSliceDeepCopy, func(c *mergo.Config) { + c.Overwrite = false + }) + if err != nil { + return nil, errors.Wrapf(err, "cannot merge spec.initProvider and spec.forProvider parameters for resource '%q'", tr.GetName()) + } + + return params, nil +} + +// LateInitialize this ServiceConnectionPolicy using its observed tfState. +// returns True if there are any spec changes for the resource. +func (tr *ServiceConnectionPolicy) LateInitialize(attrs []byte) (bool, error) { + params := &ServiceConnectionPolicyParameters{} + if err := json.TFParser.Unmarshal(attrs, params); err != nil { + return false, errors.Wrap(err, "failed to unmarshal Terraform state parameters for late-initialization") + } + opts := []resource.GenericLateInitializerOption{resource.WithZeroValueJSONOmitEmptyFilter(resource.CNameWildcard)} + + li := resource.NewGenericLateInitializer(opts...) + return li.LateInitialize(&tr.Spec.ForProvider, params) +} + +// GetTerraformSchemaVersion returns the associated Terraform schema version +func (tr *ServiceConnectionPolicy) GetTerraformSchemaVersion() int { + return 0 +} diff --git a/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_types.go b/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_types.go new file mode 100755 index 000000000..8f41fc038 --- /dev/null +++ b/apis/networkconnectivity/v1beta1/zz_serviceconnectionpolicy_types.go @@ -0,0 +1,340 @@ +// SPDX-FileCopyrightText: 2024 The Crossplane Authors +// +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by upjet. DO NOT EDIT. + +package v1beta1 + +import ( + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/apimachinery/pkg/runtime/schema" + + v1 "github.com/crossplane/crossplane-runtime/apis/common/v1" +) + +type ErrorInfoInitParameters struct { +} + +type ErrorInfoObservation struct { + + // The logical grouping to which the "reason" belongs. + Domain *string `json:"domain,omitempty" tf:"domain,omitempty"` + + // Additional structured details about this error. + // +mapType=granular + Metadata map[string]*string `json:"metadata,omitempty" tf:"metadata,omitempty"` + + // The reason of the error. + Reason *string `json:"reason,omitempty" tf:"reason,omitempty"` +} + +type ErrorInfoParameters struct { +} + +type ErrorInitParameters struct { +} + +type ErrorObservation struct { + + // The status code, which should be an enum value of [google.rpc.Code][]. + Code *float64 `json:"code,omitempty" tf:"code,omitempty"` + + // (Output) + // A list of messages that carry the error details. + Details []map[string]*string `json:"details,omitempty" tf:"details,omitempty"` + + // A developer-facing error message. + Message *string `json:"message,omitempty" tf:"message,omitempty"` +} + +type ErrorParameters struct { +} + +type PscConfigInitParameters struct { + + // Max number of PSC connections for this policy. + Limit *string `json:"limit,omitempty" tf:"limit,omitempty"` + + // IDs of the subnetworks or fully qualified identifiers for the subnetworks + // +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/compute/v1beta2.Subnetwork + // +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID() + Subnetworks []*string `json:"subnetworks,omitempty" tf:"subnetworks,omitempty"` + + // References to Subnetwork in compute to populate subnetworks. + // +kubebuilder:validation:Optional + SubnetworksRefs []v1.Reference `json:"subnetworksRefs,omitempty" tf:"-"` + + // Selector for a list of Subnetwork in compute to populate subnetworks. + // +kubebuilder:validation:Optional + SubnetworksSelector *v1.Selector `json:"subnetworksSelector,omitempty" tf:"-"` +} + +type PscConfigObservation struct { + + // Max number of PSC connections for this policy. + Limit *string `json:"limit,omitempty" tf:"limit,omitempty"` + + // IDs of the subnetworks or fully qualified identifiers for the subnetworks + Subnetworks []*string `json:"subnetworks,omitempty" tf:"subnetworks,omitempty"` +} + +type PscConfigParameters struct { + + // Max number of PSC connections for this policy. + // +kubebuilder:validation:Optional + Limit *string `json:"limit,omitempty" tf:"limit,omitempty"` + + // IDs of the subnetworks or fully qualified identifiers for the subnetworks + // +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/compute/v1beta2.Subnetwork + // +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID() + // +kubebuilder:validation:Optional + Subnetworks []*string `json:"subnetworks,omitempty" tf:"subnetworks,omitempty"` + + // References to Subnetwork in compute to populate subnetworks. + // +kubebuilder:validation:Optional + SubnetworksRefs []v1.Reference `json:"subnetworksRefs,omitempty" tf:"-"` + + // Selector for a list of Subnetwork in compute to populate subnetworks. + // +kubebuilder:validation:Optional + SubnetworksSelector *v1.Selector `json:"subnetworksSelector,omitempty" tf:"-"` +} + +type PscConnectionsInitParameters struct { +} + +type PscConnectionsObservation struct { + + // The resource reference of the consumer address. + ConsumerAddress *string `json:"consumerAddress,omitempty" tf:"consumer_address,omitempty"` + + // The resource reference of the PSC Forwarding Rule within the consumer VPC. + ConsumerForwardingRule *string `json:"consumerForwardingRule,omitempty" tf:"consumer_forwarding_rule,omitempty"` + + // The project where the PSC connection is created. + ConsumerTargetProject *string `json:"consumerTargetProject,omitempty" tf:"consumer_target_project,omitempty"` + + // The most recent error during operating this connection. + // Structure is documented below. + Error *ErrorObservation `json:"error,omitempty" tf:"error,omitempty"` + + // The error info for the latest error during operating this connection. + // Structure is documented below. + ErrorInfo *ErrorInfoObservation `json:"errorInfo,omitempty" tf:"error_info,omitempty"` + + // The error type indicates whether the error is consumer facing, producer + // facing or system internal. + // Possible values are: CONNECTION_ERROR_TYPE_UNSPECIFIED, ERROR_INTERNAL, ERROR_CONSUMER_SIDE, ERROR_PRODUCER_SIDE. + ErrorType *string `json:"errorType,omitempty" tf:"error_type,omitempty"` + + // The last Compute Engine operation to setup PSC connection. + GceOperation *string `json:"gceOperation,omitempty" tf:"gce_operation,omitempty"` + + // The PSC connection id of the PSC forwarding rule. + PscConnectionID *string `json:"pscConnectionId,omitempty" tf:"psc_connection_id,omitempty"` + + // The state of the PSC connection. + // Possible values are: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, FAILED. + State *string `json:"state,omitempty" tf:"state,omitempty"` +} + +type PscConnectionsParameters struct { +} + +type ServiceConnectionPolicyInitParameters struct { + + // Free-text description of the resource. + Description *string `json:"description,omitempty" tf:"description,omitempty"` + + // User-defined labels. + // +mapType=granular + Labels map[string]*string `json:"labels,omitempty" tf:"labels,omitempty"` + + // The resource path of the consumer network. Example: - projects/{projectNumOrId}/global/networks/{resourceId}. + // +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/compute/v1beta1.Network + // +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID() + Network *string `json:"network,omitempty" tf:"network,omitempty"` + + // Reference to a Network in compute to populate network. + // +kubebuilder:validation:Optional + NetworkRef *v1.Reference `json:"networkRef,omitempty" tf:"-"` + + // Selector for a Network in compute to populate network. + // +kubebuilder:validation:Optional + NetworkSelector *v1.Selector `json:"networkSelector,omitempty" tf:"-"` + + // The ID of the project in which the resource belongs. + // If it is not provided, the provider project is used. + Project *string `json:"project,omitempty" tf:"project,omitempty"` + + // Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + // Structure is documented below. + PscConfig *PscConfigInitParameters `json:"pscConfig,omitempty" tf:"psc_config,omitempty"` + + // The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + // It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + ServiceClass *string `json:"serviceClass,omitempty" tf:"service_class,omitempty"` +} + +type ServiceConnectionPolicyObservation struct { + + // The timestamp when the resource was created. + CreateTime *string `json:"createTime,omitempty" tf:"create_time,omitempty"` + + // Free-text description of the resource. + Description *string `json:"description,omitempty" tf:"description,omitempty"` + + // for all of the labels present on the resource. + // +mapType=granular + EffectiveLabels map[string]*string `json:"effectiveLabels,omitempty" tf:"effective_labels,omitempty"` + + // The etag is computed by the server, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. + Etag *string `json:"etag,omitempty" tf:"etag,omitempty"` + + // an identifier for the resource with format projects/{{project}}/locations/{{location}}/serviceConnectionPolicies/{{name}} + ID *string `json:"id,omitempty" tf:"id,omitempty"` + + // The type of underlying resources used to create the connection. + Infrastructure *string `json:"infrastructure,omitempty" tf:"infrastructure,omitempty"` + + // User-defined labels. + // +mapType=granular + Labels map[string]*string `json:"labels,omitempty" tf:"labels,omitempty"` + + // The location of the ServiceConnectionPolicy. + Location *string `json:"location,omitempty" tf:"location,omitempty"` + + // The resource path of the consumer network. Example: - projects/{projectNumOrId}/global/networks/{resourceId}. + Network *string `json:"network,omitempty" tf:"network,omitempty"` + + // The ID of the project in which the resource belongs. + // If it is not provided, the provider project is used. + Project *string `json:"project,omitempty" tf:"project,omitempty"` + + // Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + // Structure is documented below. + PscConfig *PscConfigObservation `json:"pscConfig,omitempty" tf:"psc_config,omitempty"` + + // Information about each Private Service Connect connection. + // Structure is documented below. + PscConnections []PscConnectionsObservation `json:"pscConnections,omitempty" tf:"psc_connections,omitempty"` + + // The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + // It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + ServiceClass *string `json:"serviceClass,omitempty" tf:"service_class,omitempty"` + + // The combination of labels configured directly on the resource + // and default labels configured on the provider. + // +mapType=granular + TerraformLabels map[string]*string `json:"terraformLabels,omitempty" tf:"terraform_labels,omitempty"` + + // The timestamp when the resource was updated. + UpdateTime *string `json:"updateTime,omitempty" tf:"update_time,omitempty"` +} + +type ServiceConnectionPolicyParameters struct { + + // Free-text description of the resource. + // +kubebuilder:validation:Optional + Description *string `json:"description,omitempty" tf:"description,omitempty"` + + // User-defined labels. + // +kubebuilder:validation:Optional + // +mapType=granular + Labels map[string]*string `json:"labels,omitempty" tf:"labels,omitempty"` + + // The location of the ServiceConnectionPolicy. + // +kubebuilder:validation:Required + Location *string `json:"location" tf:"location,omitempty"` + + // The resource path of the consumer network. Example: - projects/{projectNumOrId}/global/networks/{resourceId}. + // +crossplane:generate:reference:type=github.com/upbound/provider-gcp/apis/compute/v1beta1.Network + // +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractResourceID() + // +kubebuilder:validation:Optional + Network *string `json:"network,omitempty" tf:"network,omitempty"` + + // Reference to a Network in compute to populate network. + // +kubebuilder:validation:Optional + NetworkRef *v1.Reference `json:"networkRef,omitempty" tf:"-"` + + // Selector for a Network in compute to populate network. + // +kubebuilder:validation:Optional + NetworkSelector *v1.Selector `json:"networkSelector,omitempty" tf:"-"` + + // The ID of the project in which the resource belongs. + // If it is not provided, the provider project is used. + // +kubebuilder:validation:Optional + Project *string `json:"project,omitempty" tf:"project,omitempty"` + + // Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + // Structure is documented below. + // +kubebuilder:validation:Optional + PscConfig *PscConfigParameters `json:"pscConfig,omitempty" tf:"psc_config,omitempty"` + + // The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + // It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + // +kubebuilder:validation:Optional + ServiceClass *string `json:"serviceClass,omitempty" tf:"service_class,omitempty"` +} + +// ServiceConnectionPolicySpec defines the desired state of ServiceConnectionPolicy +type ServiceConnectionPolicySpec struct { + v1.ResourceSpec `json:",inline"` + ForProvider ServiceConnectionPolicyParameters `json:"forProvider"` + // THIS IS A BETA FIELD. It will be honored + // unless the Management Policies feature flag is disabled. + // InitProvider holds the same fields as ForProvider, with the exception + // of Identifier and other resource reference fields. The fields that are + // in InitProvider are merged into ForProvider when the resource is created. + // The same fields are also added to the terraform ignore_changes hook, to + // avoid updating them after creation. This is useful for fields that are + // required on creation, but we do not desire to update them after creation, + // for example because of an external controller is managing them, like an + // autoscaler. + InitProvider ServiceConnectionPolicyInitParameters `json:"initProvider,omitempty"` +} + +// ServiceConnectionPolicyStatus defines the observed state of ServiceConnectionPolicy. +type ServiceConnectionPolicyStatus struct { + v1.ResourceStatus `json:",inline"` + AtProvider ServiceConnectionPolicyObservation `json:"atProvider,omitempty"` +} + +// +kubebuilder:object:root=true +// +kubebuilder:subresource:status +// +kubebuilder:storageversion + +// ServiceConnectionPolicy is the Schema for the ServiceConnectionPolicys API. Manage Service Connection Policies. +// +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" +// +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" +// +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" +// +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp" +// +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,gcp} +type ServiceConnectionPolicy struct { + metav1.TypeMeta `json:",inline"` + metav1.ObjectMeta `json:"metadata,omitempty"` + // +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.serviceClass) || (has(self.initProvider) && has(self.initProvider.serviceClass))",message="spec.forProvider.serviceClass is a required parameter" + Spec ServiceConnectionPolicySpec `json:"spec"` + Status ServiceConnectionPolicyStatus `json:"status,omitempty"` +} + +// +kubebuilder:object:root=true + +// ServiceConnectionPolicyList contains a list of ServiceConnectionPolicys +type ServiceConnectionPolicyList struct { + metav1.TypeMeta `json:",inline"` + metav1.ListMeta `json:"metadata,omitempty"` + Items []ServiceConnectionPolicy `json:"items"` +} + +// Repository type metadata. +var ( + ServiceConnectionPolicy_Kind = "ServiceConnectionPolicy" + ServiceConnectionPolicy_GroupKind = schema.GroupKind{Group: CRDGroup, Kind: ServiceConnectionPolicy_Kind}.String() + ServiceConnectionPolicy_KindAPIVersion = ServiceConnectionPolicy_Kind + "." + CRDGroupVersion.String() + ServiceConnectionPolicy_GroupVersionKind = CRDGroupVersion.WithKind(ServiceConnectionPolicy_Kind) +) + +func init() { + SchemeBuilder.Register(&ServiceConnectionPolicy{}, &ServiceConnectionPolicyList{}) +} diff --git a/config/externalname.go b/config/externalname.go index 67a143088..c7dfb478e 100644 --- a/config/externalname.go +++ b/config/externalname.go @@ -622,6 +622,8 @@ var terraformPluginSDKExternalNameConfigs = map[string]config.ExternalName{ "google_network_connectivity_hub": config.IdentifierFromProvider, // Spoke can be imported using {{location}}/{{name}} "google_network_connectivity_spoke": config.IdentifierFromProvider, + // ServiceConnectionPolicy can be imported using projects/{{project}}/locations/{{location}}/serviceConnectionPolicies/{{name}} + "google_network_connectivity_service_connection_policy": config.TemplatedStringAsIdentifier("name", "projects/{{ .setup.configuration.project }}/locations/{{ .parameters.location }}/serviceConnectionPolicies/{{ .external_name }}"), // mlengine // diff --git a/config/generated.lst b/config/generated.lst index 308619073..7e6231495 100644 --- a/config/generated.lst +++ b/config/generated.lst @@ -1 +1 @@ -["google_access_context_manager_access_level","google_access_context_manager_access_level_condition","google_access_context_manager_access_policy","google_access_context_manager_access_policy_iam_member","google_access_context_manager_service_perimeter","google_access_context_manager_service_perimeter_resource","google_active_directory_domain","google_alloydb_backup","google_alloydb_cluster","google_alloydb_instance","google_apigee_addons_config","google_apigee_endpoint_attachment","google_apigee_envgroup","google_apigee_envgroup_attachment","google_apigee_environment","google_apigee_environment_iam_member","google_apigee_instance","google_apigee_instance_attachment","google_apigee_nat_address","google_apigee_organization","google_apigee_sync_authorization","google_app_engine_application","google_app_engine_application_url_dispatch_rules","google_app_engine_firewall_rule","google_app_engine_service_network_settings","google_app_engine_standard_app_version","google_artifact_registry_repository","google_artifact_registry_repository_iam_member","google_beyondcorp_app_connection","google_beyondcorp_app_connector","google_beyondcorp_app_gateway","google_bigquery_analytics_hub_data_exchange","google_bigquery_analytics_hub_data_exchange_iam_member","google_bigquery_analytics_hub_listing","google_bigquery_connection","google_bigquery_data_transfer_config","google_bigquery_dataset","google_bigquery_dataset_access","google_bigquery_dataset_iam_binding","google_bigquery_dataset_iam_member","google_bigquery_dataset_iam_policy","google_bigquery_job","google_bigquery_reservation","google_bigquery_reservation_assignment","google_bigquery_routine","google_bigquery_table","google_bigquery_table_iam_binding","google_bigquery_table_iam_member","google_bigquery_table_iam_policy","google_bigtable_app_profile","google_bigtable_gc_policy","google_bigtable_instance","google_bigtable_instance_iam_binding","google_bigtable_instance_iam_member","google_bigtable_instance_iam_policy","google_bigtable_table","google_bigtable_table_iam_binding","google_bigtable_table_iam_member","google_bigtable_table_iam_policy","google_binary_authorization_attestor","google_binary_authorization_policy","google_certificate_manager_certificate","google_certificate_manager_certificate_map","google_certificate_manager_certificate_map_entry","google_certificate_manager_dns_authorization","google_cloud_ids_endpoint","google_cloud_run_domain_mapping","google_cloud_run_service","google_cloud_run_service_iam_member","google_cloud_run_v2_job","google_cloud_run_v2_service","google_cloud_scheduler_job","google_cloud_tasks_queue","google_cloudbuild_trigger","google_cloudbuild_worker_pool","google_cloudfunctions2_function","google_cloudfunctions_function","google_cloudfunctions_function_iam_member","google_composer_environment","google_compute_address","google_compute_attached_disk","google_compute_autoscaler","google_compute_backend_bucket","google_compute_backend_bucket_signed_url_key","google_compute_backend_service","google_compute_backend_service_signed_url_key","google_compute_disk","google_compute_disk_iam_member","google_compute_disk_resource_policy_attachment","google_compute_external_vpn_gateway","google_compute_firewall","google_compute_firewall_policy","google_compute_firewall_policy_association","google_compute_firewall_policy_rule","google_compute_forwarding_rule","google_compute_global_address","google_compute_global_forwarding_rule","google_compute_global_network_endpoint","google_compute_global_network_endpoint_group","google_compute_ha_vpn_gateway","google_compute_health_check","google_compute_http_health_check","google_compute_https_health_check","google_compute_image","google_compute_image_iam_member","google_compute_instance","google_compute_instance_from_template","google_compute_instance_group","google_compute_instance_group_manager","google_compute_instance_group_named_port","google_compute_instance_iam_member","google_compute_instance_template","google_compute_interconnect_attachment","google_compute_managed_ssl_certificate","google_compute_network","google_compute_network_endpoint","google_compute_network_endpoint_group","google_compute_network_firewall_policy","google_compute_network_firewall_policy_association","google_compute_network_peering","google_compute_network_peering_routes_config","google_compute_node_group","google_compute_node_template","google_compute_packet_mirroring","google_compute_per_instance_config","google_compute_project_default_network_tier","google_compute_project_metadata","google_compute_project_metadata_item","google_compute_region_autoscaler","google_compute_region_backend_service","google_compute_region_disk","google_compute_region_disk_iam_member","google_compute_region_disk_resource_policy_attachment","google_compute_region_health_check","google_compute_region_instance_group_manager","google_compute_region_network_endpoint","google_compute_region_network_endpoint_group","google_compute_region_network_firewall_policy","google_compute_region_network_firewall_policy_association","google_compute_region_per_instance_config","google_compute_region_ssl_certificate","google_compute_region_target_http_proxy","google_compute_region_target_https_proxy","google_compute_region_target_tcp_proxy","google_compute_region_url_map","google_compute_reservation","google_compute_resource_policy","google_compute_route","google_compute_router","google_compute_router_interface","google_compute_router_nat","google_compute_router_peer","google_compute_security_policy","google_compute_service_attachment","google_compute_shared_vpc_host_project","google_compute_shared_vpc_service_project","google_compute_snapshot","google_compute_snapshot_iam_member","google_compute_ssl_certificate","google_compute_ssl_policy","google_compute_subnetwork","google_compute_subnetwork_iam_member","google_compute_target_grpc_proxy","google_compute_target_http_proxy","google_compute_target_https_proxy","google_compute_target_instance","google_compute_target_pool","google_compute_target_ssl_proxy","google_compute_target_tcp_proxy","google_compute_url_map","google_compute_vpn_gateway","google_compute_vpn_tunnel","google_container_analysis_note","google_container_attached_cluster","google_container_aws_cluster","google_container_aws_node_pool","google_container_azure_client","google_container_azure_cluster","google_container_azure_node_pool","google_container_cluster","google_container_node_pool","google_container_registry","google_data_catalog_entry","google_data_catalog_entry_group","google_data_catalog_tag","google_data_catalog_tag_template","google_data_fusion_instance","google_data_loss_prevention_deidentify_template","google_data_loss_prevention_inspect_template","google_data_loss_prevention_job_trigger","google_data_loss_prevention_stored_info_type","google_dataflow_job","google_dataplex_asset","google_dataplex_lake","google_dataplex_zone","google_dataproc_autoscaling_policy","google_dataproc_cluster","google_dataproc_job","google_dataproc_metastore_service","google_dataproc_workflow_template","google_datastore_index","google_datastream_connection_profile","google_datastream_private_connection","google_dialogflow_cx_agent","google_dialogflow_cx_entity_type","google_dialogflow_cx_environment","google_dialogflow_cx_flow","google_dialogflow_cx_intent","google_dialogflow_cx_page","google_dialogflow_cx_version","google_dialogflow_cx_webhook","google_dns_managed_zone","google_dns_managed_zone_iam_member","google_dns_policy","google_dns_record_set","google_document_ai_processor","google_essential_contacts_contact","google_eventarc_channel","google_eventarc_google_channel_config","google_eventarc_trigger","google_filestore_backup","google_filestore_instance","google_filestore_snapshot","google_firebaserules_release","google_firebaserules_ruleset","google_folder","google_folder_iam_member","google_gke_backup_backup_plan","google_gke_hub_membership","google_gke_hub_membership_iam_member","google_healthcare_consent_store","google_healthcare_dataset","google_healthcare_dataset_iam_member","google_iam_workload_identity_pool","google_iam_workload_identity_pool_provider","google_iap_app_engine_service_iam_member","google_iap_app_engine_version_iam_member","google_iap_tunnel_iam_member","google_iap_web_backend_service_iam_member","google_iap_web_iam_member","google_iap_web_type_app_engine_iam_member","google_iap_web_type_compute_iam_member","google_identity_platform_default_supported_idp_config","google_identity_platform_inbound_saml_config","google_identity_platform_oauth_idp_config","google_identity_platform_project_default_config","google_identity_platform_tenant","google_identity_platform_tenant_default_supported_idp_config","google_identity_platform_tenant_inbound_saml_config","google_identity_platform_tenant_oauth_idp_config","google_kms_crypto_key","google_kms_crypto_key_iam_member","google_kms_crypto_key_version","google_kms_key_ring","google_kms_key_ring_iam_member","google_kms_key_ring_import_job","google_kms_secret_ciphertext","google_logging_folder_bucket_config","google_logging_folder_exclusion","google_logging_folder_sink","google_logging_log_view","google_logging_metric","google_logging_project_bucket_config","google_logging_project_exclusion","google_logging_project_sink","google_memcache_instance","google_ml_engine_model","google_monitoring_alert_policy","google_monitoring_custom_service","google_monitoring_dashboard","google_monitoring_group","google_monitoring_metric_descriptor","google_monitoring_notification_channel","google_monitoring_service","google_monitoring_slo","google_monitoring_uptime_check_config","google_network_connectivity_hub","google_network_connectivity_spoke","google_network_management_connectivity_test","google_notebooks_environment","google_notebooks_instance","google_notebooks_instance_iam_member","google_notebooks_runtime","google_notebooks_runtime_iam_member","google_org_policy_policy","google_organization_iam_audit_config","google_organization_iam_custom_role","google_organization_iam_member","google_os_config_os_policy_assignment","google_os_config_patch_deployment","google_os_login_ssh_public_key","google_privateca_ca_pool","google_privateca_ca_pool_iam_member","google_privateca_certificate","google_privateca_certificate_authority","google_privateca_certificate_template","google_privateca_certificate_template_iam_member","google_project","google_project_default_service_accounts","google_project_iam_audit_config","google_project_iam_custom_role","google_project_iam_member","google_project_service","google_project_usage_export_bucket","google_pubsub_lite_reservation","google_pubsub_lite_subscription","google_pubsub_lite_topic","google_pubsub_schema","google_pubsub_subscription","google_pubsub_subscription_iam_member","google_pubsub_topic","google_pubsub_topic_iam_member","google_redis_instance","google_secret_manager_secret","google_secret_manager_secret_iam_member","google_secret_manager_secret_version","google_service_account","google_service_account_iam_member","google_service_account_key","google_service_networking_connection","google_service_networking_peered_dns_domain","google_sourcerepo_repository","google_sourcerepo_repository_iam_member","google_spanner_database","google_spanner_database_iam_member","google_spanner_instance","google_spanner_instance_iam_member","google_sql_database","google_sql_database_instance","google_sql_source_representation_instance","google_sql_ssl_cert","google_sql_user","google_storage_bucket","google_storage_bucket_access_control","google_storage_bucket_acl","google_storage_bucket_iam_member","google_storage_bucket_object","google_storage_default_object_access_control","google_storage_default_object_acl","google_storage_hmac_key","google_storage_notification","google_storage_object_access_control","google_storage_object_acl","google_storage_transfer_agent_pool","google_tags_tag_binding","google_tags_tag_key","google_tags_tag_value","google_tpu_node","google_vertex_ai_dataset","google_vertex_ai_featurestore","google_vertex_ai_featurestore_entitytype","google_vertex_ai_tensorboard","google_vpc_access_connector","google_workflows_workflow"] \ No newline at end of file +["google_access_context_manager_access_level","google_access_context_manager_access_level_condition","google_access_context_manager_access_policy","google_access_context_manager_access_policy_iam_member","google_access_context_manager_service_perimeter","google_access_context_manager_service_perimeter_resource","google_active_directory_domain","google_alloydb_backup","google_alloydb_cluster","google_alloydb_instance","google_apigee_addons_config","google_apigee_endpoint_attachment","google_apigee_envgroup","google_apigee_envgroup_attachment","google_apigee_environment","google_apigee_environment_iam_member","google_apigee_instance","google_apigee_instance_attachment","google_apigee_nat_address","google_apigee_organization","google_apigee_sync_authorization","google_app_engine_application","google_app_engine_application_url_dispatch_rules","google_app_engine_firewall_rule","google_app_engine_service_network_settings","google_app_engine_standard_app_version","google_artifact_registry_repository","google_artifact_registry_repository_iam_member","google_beyondcorp_app_connection","google_beyondcorp_app_connector","google_beyondcorp_app_gateway","google_bigquery_analytics_hub_data_exchange","google_bigquery_analytics_hub_data_exchange_iam_member","google_bigquery_analytics_hub_listing","google_bigquery_connection","google_bigquery_data_transfer_config","google_bigquery_dataset","google_bigquery_dataset_access","google_bigquery_dataset_iam_binding","google_bigquery_dataset_iam_member","google_bigquery_dataset_iam_policy","google_bigquery_job","google_bigquery_reservation","google_bigquery_reservation_assignment","google_bigquery_routine","google_bigquery_table","google_bigquery_table_iam_binding","google_bigquery_table_iam_member","google_bigquery_table_iam_policy","google_bigtable_app_profile","google_bigtable_gc_policy","google_bigtable_instance","google_bigtable_instance_iam_binding","google_bigtable_instance_iam_member","google_bigtable_instance_iam_policy","google_bigtable_table","google_bigtable_table_iam_binding","google_bigtable_table_iam_member","google_bigtable_table_iam_policy","google_binary_authorization_attestor","google_binary_authorization_policy","google_certificate_manager_certificate","google_certificate_manager_certificate_map","google_certificate_manager_certificate_map_entry","google_certificate_manager_dns_authorization","google_cloud_ids_endpoint","google_cloud_run_domain_mapping","google_cloud_run_service","google_cloud_run_service_iam_member","google_cloud_run_v2_job","google_cloud_run_v2_service","google_cloud_scheduler_job","google_cloud_tasks_queue","google_cloudbuild_trigger","google_cloudbuild_worker_pool","google_cloudfunctions2_function","google_cloudfunctions_function","google_cloudfunctions_function_iam_member","google_composer_environment","google_compute_address","google_compute_attached_disk","google_compute_autoscaler","google_compute_backend_bucket","google_compute_backend_bucket_signed_url_key","google_compute_backend_service","google_compute_backend_service_signed_url_key","google_compute_disk","google_compute_disk_iam_member","google_compute_disk_resource_policy_attachment","google_compute_external_vpn_gateway","google_compute_firewall","google_compute_firewall_policy","google_compute_firewall_policy_association","google_compute_firewall_policy_rule","google_compute_forwarding_rule","google_compute_global_address","google_compute_global_forwarding_rule","google_compute_global_network_endpoint","google_compute_global_network_endpoint_group","google_compute_ha_vpn_gateway","google_compute_health_check","google_compute_http_health_check","google_compute_https_health_check","google_compute_image","google_compute_image_iam_member","google_compute_instance","google_compute_instance_from_template","google_compute_instance_group","google_compute_instance_group_manager","google_compute_instance_group_named_port","google_compute_instance_iam_member","google_compute_instance_template","google_compute_interconnect_attachment","google_compute_managed_ssl_certificate","google_compute_network","google_compute_network_endpoint","google_compute_network_endpoint_group","google_compute_network_firewall_policy","google_compute_network_firewall_policy_association","google_compute_network_peering","google_compute_network_peering_routes_config","google_compute_node_group","google_compute_node_template","google_compute_packet_mirroring","google_compute_per_instance_config","google_compute_project_default_network_tier","google_compute_project_metadata","google_compute_project_metadata_item","google_compute_region_autoscaler","google_compute_region_backend_service","google_compute_region_disk","google_compute_region_disk_iam_member","google_compute_region_disk_resource_policy_attachment","google_compute_region_health_check","google_compute_region_instance_group_manager","google_compute_region_network_endpoint","google_compute_region_network_endpoint_group","google_compute_region_network_firewall_policy","google_compute_region_network_firewall_policy_association","google_compute_region_per_instance_config","google_compute_region_ssl_certificate","google_compute_region_target_http_proxy","google_compute_region_target_https_proxy","google_compute_region_target_tcp_proxy","google_compute_region_url_map","google_compute_reservation","google_compute_resource_policy","google_compute_route","google_compute_router","google_compute_router_interface","google_compute_router_nat","google_compute_router_peer","google_compute_security_policy","google_compute_service_attachment","google_compute_shared_vpc_host_project","google_compute_shared_vpc_service_project","google_compute_snapshot","google_compute_snapshot_iam_member","google_compute_ssl_certificate","google_compute_ssl_policy","google_compute_subnetwork","google_compute_subnetwork_iam_member","google_compute_target_grpc_proxy","google_compute_target_http_proxy","google_compute_target_https_proxy","google_compute_target_instance","google_compute_target_pool","google_compute_target_ssl_proxy","google_compute_target_tcp_proxy","google_compute_url_map","google_compute_vpn_gateway","google_compute_vpn_tunnel","google_container_analysis_note","google_container_attached_cluster","google_container_aws_cluster","google_container_aws_node_pool","google_container_azure_client","google_container_azure_cluster","google_container_azure_node_pool","google_container_cluster","google_container_node_pool","google_container_registry","google_data_catalog_entry","google_data_catalog_entry_group","google_data_catalog_tag","google_data_catalog_tag_template","google_data_fusion_instance","google_data_loss_prevention_deidentify_template","google_data_loss_prevention_inspect_template","google_data_loss_prevention_job_trigger","google_data_loss_prevention_stored_info_type","google_dataflow_job","google_dataplex_asset","google_dataplex_lake","google_dataplex_zone","google_dataproc_autoscaling_policy","google_dataproc_cluster","google_dataproc_job","google_dataproc_metastore_service","google_dataproc_workflow_template","google_datastore_index","google_datastream_connection_profile","google_datastream_private_connection","google_dialogflow_cx_agent","google_dialogflow_cx_entity_type","google_dialogflow_cx_environment","google_dialogflow_cx_flow","google_dialogflow_cx_intent","google_dialogflow_cx_page","google_dialogflow_cx_version","google_dialogflow_cx_webhook","google_dns_managed_zone","google_dns_managed_zone_iam_member","google_dns_policy","google_dns_record_set","google_document_ai_processor","google_essential_contacts_contact","google_eventarc_channel","google_eventarc_google_channel_config","google_eventarc_trigger","google_filestore_backup","google_filestore_instance","google_filestore_snapshot","google_firebaserules_release","google_firebaserules_ruleset","google_folder","google_folder_iam_member","google_gke_backup_backup_plan","google_gke_hub_membership","google_gke_hub_membership_iam_member","google_healthcare_consent_store","google_healthcare_dataset","google_healthcare_dataset_iam_member","google_iam_workload_identity_pool","google_iam_workload_identity_pool_provider","google_iap_app_engine_service_iam_member","google_iap_app_engine_version_iam_member","google_iap_tunnel_iam_member","google_iap_web_backend_service_iam_member","google_iap_web_iam_member","google_iap_web_type_app_engine_iam_member","google_iap_web_type_compute_iam_member","google_identity_platform_default_supported_idp_config","google_identity_platform_inbound_saml_config","google_identity_platform_oauth_idp_config","google_identity_platform_project_default_config","google_identity_platform_tenant","google_identity_platform_tenant_default_supported_idp_config","google_identity_platform_tenant_inbound_saml_config","google_identity_platform_tenant_oauth_idp_config","google_kms_crypto_key","google_kms_crypto_key_iam_member","google_kms_crypto_key_version","google_kms_key_ring","google_kms_key_ring_iam_member","google_kms_key_ring_import_job","google_kms_secret_ciphertext","google_logging_folder_bucket_config","google_logging_folder_exclusion","google_logging_folder_sink","google_logging_log_view","google_logging_metric","google_logging_project_bucket_config","google_logging_project_exclusion","google_logging_project_sink","google_memcache_instance","google_ml_engine_model","google_monitoring_alert_policy","google_monitoring_custom_service","google_monitoring_dashboard","google_monitoring_group","google_monitoring_metric_descriptor","google_monitoring_notification_channel","google_monitoring_service","google_monitoring_slo","google_monitoring_uptime_check_config","google_network_connectivity_hub","google_network_connectivity_service_connection_policy","google_network_connectivity_spoke","google_network_management_connectivity_test","google_notebooks_environment","google_notebooks_instance","google_notebooks_instance_iam_member","google_notebooks_runtime","google_notebooks_runtime_iam_member","google_org_policy_policy","google_organization_iam_audit_config","google_organization_iam_custom_role","google_organization_iam_member","google_os_config_os_policy_assignment","google_os_config_patch_deployment","google_os_login_ssh_public_key","google_privateca_ca_pool","google_privateca_ca_pool_iam_member","google_privateca_certificate","google_privateca_certificate_authority","google_privateca_certificate_template","google_privateca_certificate_template_iam_member","google_project","google_project_default_service_accounts","google_project_iam_audit_config","google_project_iam_custom_role","google_project_iam_member","google_project_service","google_project_usage_export_bucket","google_pubsub_lite_reservation","google_pubsub_lite_subscription","google_pubsub_lite_topic","google_pubsub_schema","google_pubsub_subscription","google_pubsub_subscription_iam_member","google_pubsub_topic","google_pubsub_topic_iam_member","google_redis_instance","google_secret_manager_secret","google_secret_manager_secret_iam_member","google_secret_manager_secret_version","google_service_account","google_service_account_iam_member","google_service_account_key","google_service_networking_connection","google_service_networking_peered_dns_domain","google_sourcerepo_repository","google_sourcerepo_repository_iam_member","google_spanner_database","google_spanner_database_iam_member","google_spanner_instance","google_spanner_instance_iam_member","google_sql_database","google_sql_database_instance","google_sql_source_representation_instance","google_sql_ssl_cert","google_sql_user","google_storage_bucket","google_storage_bucket_access_control","google_storage_bucket_acl","google_storage_bucket_iam_member","google_storage_bucket_object","google_storage_default_object_access_control","google_storage_default_object_acl","google_storage_hmac_key","google_storage_notification","google_storage_object_access_control","google_storage_object_acl","google_storage_transfer_agent_pool","google_tags_tag_binding","google_tags_tag_key","google_tags_tag_value","google_tpu_node","google_vertex_ai_dataset","google_vertex_ai_featurestore","google_vertex_ai_featurestore_entitytype","google_vertex_ai_tensorboard","google_vpc_access_connector","google_workflows_workflow"] \ No newline at end of file diff --git a/config/networkconnectivity/config.go b/config/networkconnectivity/config.go new file mode 100644 index 000000000..6aaf482a8 --- /dev/null +++ b/config/networkconnectivity/config.go @@ -0,0 +1,17 @@ +// SPDX-FileCopyrightText: 2024 The Crossplane Authors +// +// SPDX-License-Identifier: CC0-1.0 + +package networkconnectivity + +import ( + "github.com/crossplane/upjet/pkg/config" +) + +// Configure configures individual resources by adding custom +// ResourceConfigurators. +func Configure(p *config.Provider) { + p.AddResourceConfigurator("google_network_connectivity_service_connection_policy", func(r *config.Resource) { + config.MarkAsRequired(r.TerraformResource, "region") + }) +} diff --git a/examples-generated/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml b/examples-generated/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml new file mode 100644 index 000000000..119ad4626 --- /dev/null +++ b/examples-generated/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml @@ -0,0 +1,52 @@ +apiVersion: networkconnectivity.gcp.upbound.io/v1beta1 +kind: ServiceConnectionPolicy +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: default + name: default +spec: + forProvider: + description: my basic service connection policy + location: us-central1 + networkSelector: + matchLabels: + testing.upbound.io/example-name: producer_net + pscConfig: + - limit: 2 + subnetworksRefs: + - name: producer_subnet + serviceClass: my-basic-service-class + +--- + +apiVersion: compute.gcp.upbound.io/v1beta1 +kind: Network +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: producer_net + name: producer-net +spec: + forProvider: + autoCreateSubnetworks: false + +--- + +apiVersion: compute.gcp.upbound.io/v1beta2 +kind: Subnetwork +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: producer_subnet + name: producer-subnet +spec: + forProvider: + ipCidrRange: 10.0.0.0/16 + networkSelector: + matchLabels: + testing.upbound.io/example-name: producer_net + region: us-central1 diff --git a/examples/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml b/examples/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml new file mode 100644 index 000000000..e1b1c8e07 --- /dev/null +++ b/examples/networkconnectivity/v1beta1/serviceconnectionpolicy.yaml @@ -0,0 +1,52 @@ +apiVersion: networkconnectivity.gcp.upbound.io/v1beta1 +kind: ServiceConnectionPolicy +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: default + name: default +spec: + forProvider: + description: my basic service connection policy + location: us-central1 + networkSelector: + matchLabels: + testing.upbound.io/example-name: producer_net + pscConfig: + - limit: 2 + subnetworksRefs: + - name: producer_subnet + serviceClass: gcp-memorystore-redis + +--- + +apiVersion: compute.gcp.upbound.io/v1beta1 +kind: Network +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: producer_net + name: producer-net +spec: + forProvider: + autoCreateSubnetworks: false + +--- + +apiVersion: compute.gcp.upbound.io/v1beta2 +kind: Subnetwork +metadata: + annotations: + meta.upbound.io/example-id: networkconnectivity/v1beta1/serviceconnectionpolicy + labels: + testing.upbound.io/example-name: producer_subnet + name: producer-subnet +spec: + forProvider: + ipCidrRange: 10.0.0.0/16 + networkSelector: + matchLabels: + testing.upbound.io/example-name: producer_net + region: us-central1 diff --git a/internal/controller/networkconnectivity/serviceconnectionpolicy/zz_controller.go b/internal/controller/networkconnectivity/serviceconnectionpolicy/zz_controller.go new file mode 100755 index 000000000..a3f1814a1 --- /dev/null +++ b/internal/controller/networkconnectivity/serviceconnectionpolicy/zz_controller.go @@ -0,0 +1,92 @@ +// SPDX-FileCopyrightText: 2024 The Crossplane Authors +// +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by upjet. DO NOT EDIT. + +package serviceconnectionpolicy + +import ( + "time" + + "github.com/crossplane/crossplane-runtime/pkg/connection" + "github.com/crossplane/crossplane-runtime/pkg/event" + "github.com/crossplane/crossplane-runtime/pkg/ratelimiter" + "github.com/crossplane/crossplane-runtime/pkg/reconciler/managed" + xpresource "github.com/crossplane/crossplane-runtime/pkg/resource" + "github.com/crossplane/crossplane-runtime/pkg/statemetrics" + tjcontroller "github.com/crossplane/upjet/pkg/controller" + "github.com/crossplane/upjet/pkg/controller/handler" + "github.com/crossplane/upjet/pkg/metrics" + "github.com/pkg/errors" + ctrl "sigs.k8s.io/controller-runtime" + + v1beta1 "github.com/upbound/provider-gcp/apis/networkconnectivity/v1beta1" + features "github.com/upbound/provider-gcp/internal/features" +) + +// Setup adds a controller that reconciles ServiceConnectionPolicy managed resources. +func Setup(mgr ctrl.Manager, o tjcontroller.Options) error { + name := managed.ControllerName(v1beta1.ServiceConnectionPolicy_GroupVersionKind.String()) + var initializers managed.InitializerChain + initializers = append(initializers, managed.NewNameAsExternalName(mgr.GetClient())) + cps := []managed.ConnectionPublisher{managed.NewAPISecretPublisher(mgr.GetClient(), mgr.GetScheme())} + if o.SecretStoreConfigGVK != nil { + cps = append(cps, connection.NewDetailsManager(mgr.GetClient(), *o.SecretStoreConfigGVK, connection.WithTLSConfig(o.ESSOptions.TLSConfig))) + } + eventHandler := handler.NewEventHandler(handler.WithLogger(o.Logger.WithValues("gvk", v1beta1.ServiceConnectionPolicy_GroupVersionKind))) + ac := tjcontroller.NewAPICallbacks(mgr, xpresource.ManagedKind(v1beta1.ServiceConnectionPolicy_GroupVersionKind), tjcontroller.WithEventHandler(eventHandler), tjcontroller.WithStatusUpdates(false)) + opts := []managed.ReconcilerOption{ + managed.WithExternalConnecter( + tjcontroller.NewTerraformPluginSDKAsyncConnector(mgr.GetClient(), o.OperationTrackerStore, o.SetupFn, o.Provider.Resources["google_network_connectivity_service_connection_policy"], + tjcontroller.WithTerraformPluginSDKAsyncLogger(o.Logger), + tjcontroller.WithTerraformPluginSDKAsyncConnectorEventHandler(eventHandler), + tjcontroller.WithTerraformPluginSDKAsyncCallbackProvider(ac), + tjcontroller.WithTerraformPluginSDKAsyncMetricRecorder(metrics.NewMetricRecorder(v1beta1.ServiceConnectionPolicy_GroupVersionKind, mgr, o.PollInterval)), + tjcontroller.WithTerraformPluginSDKAsyncManagementPolicies(o.Features.Enabled(features.EnableBetaManagementPolicies)))), + managed.WithLogger(o.Logger.WithValues("controller", name)), + managed.WithRecorder(event.NewAPIRecorder(mgr.GetEventRecorderFor(name))), + managed.WithFinalizer(tjcontroller.NewOperationTrackerFinalizer(o.OperationTrackerStore, xpresource.NewAPIFinalizer(mgr.GetClient(), managed.FinalizerName))), + managed.WithTimeout(3 * time.Minute), + managed.WithInitializers(initializers), + managed.WithConnectionPublishers(cps...), + managed.WithPollInterval(o.PollInterval), + } + if o.PollJitter != 0 { + opts = append(opts, managed.WithPollJitterHook(o.PollJitter)) + } + if o.Features.Enabled(features.EnableBetaManagementPolicies) { + opts = append(opts, managed.WithManagementPolicies()) + } + if o.MetricOptions != nil { + opts = append(opts, managed.WithMetricRecorder(o.MetricOptions.MRMetrics)) + } + + // register webhooks for the kind v1beta1.ServiceConnectionPolicy + // if they're enabled. + if o.StartWebhooks { + if err := ctrl.NewWebhookManagedBy(mgr). + For(&v1beta1.ServiceConnectionPolicy{}). + Complete(); err != nil { + return errors.Wrap(err, "cannot register webhook for the kind v1beta1.ServiceConnectionPolicy") + } + } + + if o.MetricOptions != nil && o.MetricOptions.MRStateMetrics != nil { + stateMetricsRecorder := statemetrics.NewMRStateRecorder( + mgr.GetClient(), o.Logger, o.MetricOptions.MRStateMetrics, &v1beta1.ServiceConnectionPolicyList{}, o.MetricOptions.PollStateMetricInterval, + ) + if err := mgr.Add(stateMetricsRecorder); err != nil { + return errors.Wrap(err, "cannot register MR state metrics recorder for kind v1beta1.ServiceConnectionPolicyList") + } + } + + r := managed.NewReconciler(mgr, xpresource.ManagedKind(v1beta1.ServiceConnectionPolicy_GroupVersionKind), opts...) + + return ctrl.NewControllerManagedBy(mgr). + Named(name). + WithOptions(o.ForControllerRuntime()). + WithEventFilter(xpresource.DesiredStateChanged()). + Watches(&v1beta1.ServiceConnectionPolicy{}, eventHandler). + Complete(ratelimiter.NewReconciler(name, r, o.GlobalRateLimiter)) +} diff --git a/internal/controller/zz_monolith_setup.go b/internal/controller/zz_monolith_setup.go index 3ade62fb4..9e705b9a5 100755 --- a/internal/controller/zz_monolith_setup.go +++ b/internal/controller/zz_monolith_setup.go @@ -300,6 +300,7 @@ import ( slo "github.com/upbound/provider-gcp/internal/controller/monitoring/slo" uptimecheckconfig "github.com/upbound/provider-gcp/internal/controller/monitoring/uptimecheckconfig" hub "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/hub" + serviceconnectionpolicy "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/serviceconnectionpolicy" spoke "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/spoke" connectivitytest "github.com/upbound/provider-gcp/internal/controller/networkmanagement/connectivitytest" environmentnotebooks "github.com/upbound/provider-gcp/internal/controller/notebooks/environment" @@ -661,6 +662,7 @@ func Setup_monolith(mgr ctrl.Manager, o controller.Options) error { slo.Setup, uptimecheckconfig.Setup, hub.Setup, + serviceconnectionpolicy.Setup, spoke.Setup, connectivitytest.Setup, environmentnotebooks.Setup, diff --git a/internal/controller/zz_networkconnectivity_setup.go b/internal/controller/zz_networkconnectivity_setup.go index fe410b830..da675020d 100755 --- a/internal/controller/zz_networkconnectivity_setup.go +++ b/internal/controller/zz_networkconnectivity_setup.go @@ -10,6 +10,7 @@ import ( "github.com/crossplane/upjet/pkg/controller" hub "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/hub" + serviceconnectionpolicy "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/serviceconnectionpolicy" spoke "github.com/upbound/provider-gcp/internal/controller/networkconnectivity/spoke" ) @@ -18,6 +19,7 @@ import ( func Setup_networkconnectivity(mgr ctrl.Manager, o controller.Options) error { for _, setup := range []func(ctrl.Manager, controller.Options) error{ hub.Setup, + serviceconnectionpolicy.Setup, spoke.Setup, } { if err := setup(mgr, o); err != nil { diff --git a/package/crds/networkconnectivity.gcp.upbound.io_serviceconnectionpolicies.yaml b/package/crds/networkconnectivity.gcp.upbound.io_serviceconnectionpolicies.yaml new file mode 100644 index 000000000..bcf22779c --- /dev/null +++ b/package/crds/networkconnectivity.gcp.upbound.io_serviceconnectionpolicies.yaml @@ -0,0 +1,870 @@ +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.14.0 + name: serviceconnectionpolicies.networkconnectivity.gcp.upbound.io +spec: + group: networkconnectivity.gcp.upbound.io + names: + categories: + - crossplane + - managed + - gcp + kind: ServiceConnectionPolicy + listKind: ServiceConnectionPolicyList + plural: serviceconnectionpolicies + singular: serviceconnectionpolicy + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.conditions[?(@.type=='Synced')].status + name: SYNCED + type: string + - jsonPath: .status.conditions[?(@.type=='Ready')].status + name: READY + type: string + - jsonPath: .metadata.annotations.crossplane\.io/external-name + name: EXTERNAL-NAME + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: ServiceConnectionPolicy is the Schema for the ServiceConnectionPolicys + API. Manage Service Connection Policies. + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: ServiceConnectionPolicySpec defines the desired state of + ServiceConnectionPolicy + properties: + deletionPolicy: + default: Delete + description: |- + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + enum: + - Orphan + - Delete + type: string + forProvider: + properties: + description: + description: Free-text description of the resource. + type: string + labels: + additionalProperties: + type: string + description: User-defined labels. + type: object + x-kubernetes-map-type: granular + location: + description: The location of the ServiceConnectionPolicy. + type: string + network: + description: 'The resource path of the consumer network. Example: + - projects/{projectNumOrId}/global/networks/{resourceId}.' + type: string + networkRef: + description: Reference to a Network in compute to populate network. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + networkSelector: + description: Selector for a Network in compute to populate network. + properties: + matchControllerRef: + description: |- + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + type: boolean + matchLabels: + additionalProperties: + type: string + description: MatchLabels ensures an object with matching labels + is selected. + type: object + policy: + description: Policies for selection. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + type: object + project: + description: |- + The ID of the project in which the resource belongs. + If it is not provided, the provider project is used. + type: string + pscConfig: + description: |- + Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + Structure is documented below. + properties: + limit: + description: Max number of PSC connections for this policy. + type: string + subnetworks: + description: IDs of the subnetworks or fully qualified identifiers + for the subnetworks + items: + type: string + type: array + subnetworksRefs: + description: References to Subnetwork in compute to populate + subnetworks. + items: + description: A Reference to a named object. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + type: array + subnetworksSelector: + description: Selector for a list of Subnetwork in compute + to populate subnetworks. + properties: + matchControllerRef: + description: |- + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + type: boolean + matchLabels: + additionalProperties: + type: string + description: MatchLabels ensures an object with matching + labels is selected. + type: object + policy: + description: Policies for selection. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + type: object + type: object + serviceClass: + description: |- + The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + type: string + required: + - location + type: object + initProvider: + description: |- + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + properties: + description: + description: Free-text description of the resource. + type: string + labels: + additionalProperties: + type: string + description: User-defined labels. + type: object + x-kubernetes-map-type: granular + network: + description: 'The resource path of the consumer network. Example: + - projects/{projectNumOrId}/global/networks/{resourceId}.' + type: string + networkRef: + description: Reference to a Network in compute to populate network. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + networkSelector: + description: Selector for a Network in compute to populate network. + properties: + matchControllerRef: + description: |- + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + type: boolean + matchLabels: + additionalProperties: + type: string + description: MatchLabels ensures an object with matching labels + is selected. + type: object + policy: + description: Policies for selection. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + type: object + project: + description: |- + The ID of the project in which the resource belongs. + If it is not provided, the provider project is used. + type: string + pscConfig: + description: |- + Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + Structure is documented below. + properties: + limit: + description: Max number of PSC connections for this policy. + type: string + subnetworks: + description: IDs of the subnetworks or fully qualified identifiers + for the subnetworks + items: + type: string + type: array + subnetworksRefs: + description: References to Subnetwork in compute to populate + subnetworks. + items: + description: A Reference to a named object. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + type: array + subnetworksSelector: + description: Selector for a list of Subnetwork in compute + to populate subnetworks. + properties: + matchControllerRef: + description: |- + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + type: boolean + matchLabels: + additionalProperties: + type: string + description: MatchLabels ensures an object with matching + labels is selected. + type: object + policy: + description: Policies for selection. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + type: object + type: object + serviceClass: + description: |- + The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + type: string + type: object + managementPolicies: + default: + - '*' + description: |- + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + items: + description: |- + A ManagementAction represents an action that the Crossplane controllers + can take on an external resource. + enum: + - Observe + - Create + - Update + - Delete + - LateInitialize + - '*' + type: string + type: array + providerConfigRef: + default: + name: default + description: |- + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + publishConnectionDetailsTo: + description: |- + PublishConnectionDetailsTo specifies the connection secret config which + contains a name, metadata and a reference to secret store config to + which any connection details for this managed resource should be written. + Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + properties: + configRef: + default: + name: default + description: |- + SecretStoreConfigRef specifies which secret store config should be used + for this ConnectionSecret. + properties: + name: + description: Name of the referenced object. + type: string + policy: + description: Policies for referencing. + properties: + resolution: + default: Required + description: |- + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + enum: + - Required + - Optional + type: string + resolve: + description: |- + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + enum: + - Always + - IfNotPresent + type: string + type: object + required: + - name + type: object + metadata: + description: Metadata is the metadata for connection secret. + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations are the annotations to be added to connection secret. + - For Kubernetes secrets, this will be used as "metadata.annotations". + - It is up to Secret Store implementation for others store types. + type: object + labels: + additionalProperties: + type: string + description: |- + Labels are the labels/tags to be added to connection secret. + - For Kubernetes secrets, this will be used as "metadata.labels". + - It is up to Secret Store implementation for others store types. + type: object + type: + description: |- + Type is the SecretType for the connection secret. + - Only valid for Kubernetes Secret Stores. + type: string + type: object + name: + description: Name is the name of the connection secret. + type: string + required: + - name + type: object + writeConnectionSecretToRef: + description: |- + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + This field is planned to be replaced in a future release in favor of + PublishConnectionDetailsTo. Currently, both could be set independently + and connection details would be published to both without affecting + each other. + properties: + name: + description: Name of the secret. + type: string + namespace: + description: Namespace of the secret. + type: string + required: + - name + - namespace + type: object + required: + - forProvider + type: object + x-kubernetes-validations: + - message: spec.forProvider.serviceClass is a required parameter + rule: '!(''*'' in self.managementPolicies || ''Create'' in self.managementPolicies + || ''Update'' in self.managementPolicies) || has(self.forProvider.serviceClass) + || (has(self.initProvider) && has(self.initProvider.serviceClass))' + status: + description: ServiceConnectionPolicyStatus defines the observed state + of ServiceConnectionPolicy. + properties: + atProvider: + properties: + createTime: + description: The timestamp when the resource was created. + type: string + description: + description: Free-text description of the resource. + type: string + effectiveLabels: + additionalProperties: + type: string + description: for all of the labels present on the resource. + type: object + x-kubernetes-map-type: granular + etag: + description: The etag is computed by the server, and may be sent + on update and delete requests to ensure the client has an up-to-date + value before proceeding. + type: string + id: + description: an identifier for the resource with format projects/{{project}}/locations/{{location}}/serviceConnectionPolicies/{{name}} + type: string + infrastructure: + description: The type of underlying resources used to create the + connection. + type: string + labels: + additionalProperties: + type: string + description: User-defined labels. + type: object + x-kubernetes-map-type: granular + location: + description: The location of the ServiceConnectionPolicy. + type: string + network: + description: 'The resource path of the consumer network. Example: + - projects/{projectNumOrId}/global/networks/{resourceId}.' + type: string + project: + description: |- + The ID of the project in which the resource belongs. + If it is not provided, the provider project is used. + type: string + pscConfig: + description: |- + Configuration used for Private Service Connect connections. Used when Infrastructure is PSC. + Structure is documented below. + properties: + limit: + description: Max number of PSC connections for this policy. + type: string + subnetworks: + description: IDs of the subnetworks or fully qualified identifiers + for the subnetworks + items: + type: string + type: array + type: object + pscConnections: + description: |- + Information about each Private Service Connect connection. + Structure is documented below. + items: + properties: + consumerAddress: + description: The resource reference of the consumer address. + type: string + consumerForwardingRule: + description: The resource reference of the PSC Forwarding + Rule within the consumer VPC. + type: string + consumerTargetProject: + description: The project where the PSC connection is created. + type: string + error: + description: |- + The most recent error during operating this connection. + Structure is documented below. + properties: + code: + description: The status code, which should be an enum + value of [google.rpc.Code][]. + type: number + details: + description: |- + (Output) + A list of messages that carry the error details. + items: + additionalProperties: + type: string + type: object + type: array + message: + description: A developer-facing error message. + type: string + type: object + errorInfo: + description: |- + The error info for the latest error during operating this connection. + Structure is documented below. + properties: + domain: + description: The logical grouping to which the "reason" + belongs. + type: string + metadata: + additionalProperties: + type: string + description: Additional structured details about this + error. + type: object + x-kubernetes-map-type: granular + reason: + description: The reason of the error. + type: string + type: object + errorType: + description: |- + The error type indicates whether the error is consumer facing, producer + facing or system internal. + Possible values are: CONNECTION_ERROR_TYPE_UNSPECIFIED, ERROR_INTERNAL, ERROR_CONSUMER_SIDE, ERROR_PRODUCER_SIDE. + type: string + gceOperation: + description: The last Compute Engine operation to setup + PSC connection. + type: string + pscConnectionId: + description: The PSC connection id of the PSC forwarding + rule. + type: string + state: + description: |- + The state of the PSC connection. + Possible values are: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, FAILED. + type: string + type: object + type: array + serviceClass: + description: |- + The service class identifier for which this ServiceConnectionPolicy is for. The service class identifier is a unique, symbolic representation of a ServiceClass. + It is provided by the Service Producer. Google services have a prefix of gcp. For example, gcp-cloud-sql. 3rd party services do not. For example, test-service-a3dfcx. + type: string + terraformLabels: + additionalProperties: + type: string + description: |- + The combination of labels configured directly on the resource + and default labels configured on the provider. + type: object + x-kubernetes-map-type: granular + updateTime: + description: The timestamp when the resource was updated. + type: string + type: object + conditions: + description: Conditions of the resource. + items: + description: A Condition that may apply to a resource. + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time this condition transitioned from one + status to another. + format: date-time + type: string + message: + description: |- + A Message containing details about this condition's last transition from + one status to another, if any. + type: string + observedGeneration: + description: |- + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + type: integer + reason: + description: A Reason for this condition's last transition from + one status to another. + type: string + status: + description: Status of this condition; is it currently True, + False, or Unknown? + type: string + type: + description: |- + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + type: string + required: + - lastTransitionTime + - reason + - status + - type + type: object + type: array + x-kubernetes-list-map-keys: + - type + x-kubernetes-list-type: map + observedGeneration: + description: |- + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + format: int64 + type: integer + type: object + required: + - spec + type: object + served: true + storage: true + subresources: + status: {}