secretsmanager-controller/generator.yaml at main · aws-controllers-k8s/secretsmanager-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
ignore:
  field_paths:
    - CreateSecretInput.ClientRequestToken
    - CreateSecretInput.SecretBinary
resources:
  Secret:
    hooks:
      sdk_create_pre_set_output:
        template_path: hooks/secret/sdk_create_pre_set_output.go.tpl
      sdk_read_one_pre_set_output:
        template_path: hooks/secret/sdk_read_one_pre_set_output.go.tpl
      sdk_update_pre_build_request:
        template_path: hooks/secret/sdk_update_pre_build_request.go.tpl
      sdk_read_one_pre_build_request:
        template_path: hooks/secret/sdk_read_one_pre_build_request.go.tpl
      sdk_delete_post_build_request:
        template_path: hooks/secret/sdk_delete_post_build_request.go.tpl
    fields:
      # Only present on the DeleteSecret input shape, so it is not picked up
      # from the CreateSecret input like the other spec fields.
      RecoveryWindowInDays:
        from:
          operation: DeleteSecret
          path: RecoveryWindowInDays
        compare:
          # DescribeSecret never returns this value, so comparing it against
          # the latest state would report a permanent difference.
          is_ignored: true
      ID:
        from:
          operation: DescribeSecret
          path: ARN
        is_read_only: true
      Name:
        is_primary_key: true
        is_immutable: true
      SecretString:
        is_secret: true
      KmsKeyId:
        references:
          resource: Key
          service_name: kms
          path: Status.KeyID
    exceptions:
      errors:
        404:
          # https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DescribeSecret.html#API_DescribeSecret_Errors
          code: ResourceNotFoundException
    renames:
      # SecretId
      #  The ARN or name of the secret.
      #  For an ARN, we recommend that you specify a complete ARN rather than a partial ARN. See Finding a secret from a partial ARN.The ARN or name of the secret.
      operations:
        DescribeSecret:
          input_fields:
            SecretId: ID
        UpdateSecret:
          input_fields:
            SecretId: ID
        DeleteSecret:
          input_fields:
            SecretId: ID
        CreateSecret:
          input_fields:
            AddReplicaRegions: ReplicaRegions
sdk_names:
  model_name: secrets-manager