Broker
mq.services.k8s.aws/v1alpha1
Type | Link |
---|---|
GoDoc | mq-controller/apis/v1alpha1#Broker |
Metadata
Property | Value |
---|---|
Scope | Namespaced |
Kind | Broker |
ListKind | BrokerList |
Plural | brokers |
Singular | broker |
Spec
authenticationStrategy: string
autoMinorVersionUpgrade: boolean
configuration:
id: string
revision: integer
creatorRequestID: string
deploymentMode: string
encryptionOptions:
kmsKeyID: string
useAWSOwnedKey: boolean
engineType: string
engineVersion: string
hostInstanceType: string
ldapServerMetadata:
hosts:
- string
roleBase: string
roleName: string
roleSearchMatching: string
roleSearchSubtree: boolean
serviceAccountPassword: string
serviceAccountUsername: string
userBase: string
userRoleName: string
userSearchMatching: string
userSearchSubtree: boolean
logs:
audit: boolean
general: boolean
maintenanceWindowStartTime:
dayOfWeek: string
timeOfDay: string
timeZone: string
name: string
publiclyAccessible: boolean
securityGroupRefs:
from:
name: string
namespace: string
securityGroups:
- string
storageType: string
subnetIDs:
- string
subnetRefs:
from:
name: string
namespace: string
tags: {}
users:
- consoleAccess: boolean
groups:
- string
password:
key: string
name: string
namespace: string
username: string
Field | Description |
---|---|
authenticationStrategy Optional | string Optional. The authentication strategy used to secure the broker. The default is SIMPLE. |
autoMinorVersionUpgrade Optional | boolean Enables automatic upgrades to new patch versions for brokers as new versions are released and supported by Amazon MQ. Automatic upgrades occur during the scheduled maintenance window or after a manual broker reboot. Set to true by default, if no value is specified. Must be set to true for ActiveMQ brokers version 5.18 and above and for RabbitMQ brokers version 3.13 and above. |
configuration Optional | object A list of information about the configuration. |
configuration.id Optional | string |
configuration.revision Optional | integer |
creatorRequestID Optional | string The unique ID that the requester receives for the created broker. Amazon MQ passes your ID with the API action. We recommend using a Universally Unique Identifier (UUID) for the creatorRequestId. You may omit the creatorRequestId if your application doesn’t require idempotency. |
deploymentMode Required | string Required. The broker’s deployment mode. |
encryptionOptions Optional | object Encryption options for the broker. |
encryptionOptions.kmsKeyID Optional | string |
encryptionOptions.useAWSOwnedKey Optional | boolean |
engineType Required | string Required. The type of broker engine. Currently, Amazon MQ supports ACTIVEMQ and RABBITMQ. |
engineVersion Optional | string The broker engine version. Defaults to the latest available version for the specified broker engine type. For more information, see the ActiveMQ version management (https://docs.aws.amazon.com//amazon-mq/latest/developer-guide/activemq-version-management.html) and the RabbitMQ version management (https://docs.aws.amazon.com//amazon-mq/latest/developer-guide/rabbitmq-version-management.html) sections in the Amazon MQ Developer Guide. |
hostInstanceType Required | string Required. The broker’s instance type. |
ldapServerMetadata Optional | object Optional. The metadata of the LDAP server used to authenticate and authorize connections to the broker. Does not apply to RabbitMQ brokers. |
ldapServerMetadata.hosts Optional | array |
ldapServerMetadata.hosts.[] Required | string |
ldapServerMetadata.roleName Optional | string |
ldapServerMetadata.roleSearchMatching Optional | string |
ldapServerMetadata.roleSearchSubtree Optional | boolean |
ldapServerMetadata.serviceAccountPassword Optional | string |
ldapServerMetadata.serviceAccountUsername Optional | string |
ldapServerMetadata.userBase Optional | string |
ldapServerMetadata.userRoleName Optional | string |
ldapServerMetadata.userSearchMatching Optional | string |
ldapServerMetadata.userSearchSubtree Optional | boolean |
logs Optional | object Enables Amazon CloudWatch logging for brokers. |
logs.audit Optional | boolean |
logs.general Optional | boolean |
maintenanceWindowStartTime Optional | object The parameters that determine the WeeklyStartTime. |
maintenanceWindowStartTime.dayOfWeek Optional | string |
maintenanceWindowStartTime.timeOfDay Optional | string |
maintenanceWindowStartTime.timeZone Optional | string |
name Required | string Required. The broker’s name. This value must be unique in your Amazon Web Services account, 1-50 characters long, must contain only letters, numbers, dashes, and underscores, and must not contain white spaces, brackets, wildcard characters, or special characters. Do not add personally identifiable information (PII) or other confidential or sensitive information in broker names. Broker names are accessible to other Amazon Web Services services, including CloudWatch Logs. Broker names are not intended to be used for private or sensitive data. |
publiclyAccessible Required | boolean Enables connections from applications outside of the VPC that hosts the broker’s subnets. Set to false by default, if no value is provided. |
securityGroupRefs Optional | array |
securityGroupRefs.[] Required | object AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReference |
type to provide more user friendly syntax for references using ‘from’ field | |
Ex: | |
APIIDRef: |
from:
name: my-api || **securityGroupRefs.[].from**<br/>Optional | **object**<br/>AWSResourceReference provides all the values necessary to reference another<br/>k8s resource for finding the identifier(Id/ARN/Name) |
| securityGroupRefs.[].from.name
Optional | string
|
| securityGroupRefs.[].from.namespace
Optional | string
|
| securityGroups
Optional | array
The list of rules (1 minimum, 125 maximum) that authorize connections to
brokers. |
| securityGroups.[]
Required | string
|| storageType
Optional | string
The broker’s storage type. |
| subnetIDs
Optional | array
The list of groups that define which subnets and IP ranges the broker can
use from different Availability Zones. If you specify more than one subnet,
the subnets must be in different Availability Zones. Amazon MQ will not be
able to create VPC endpoints for your broker with multiple subnets in the
same Availability Zone. A SINGLE_INSTANCE deployment requires one subnet
(for example, the default subnet). An ACTIVE_STANDBY_MULTI_AZ Amazon MQ for
ActiveMQ deployment requires two subnets. A CLUSTER_MULTI_AZ Amazon MQ for
RabbitMQ deployment has no subnet requirements when deployed with public
accessibility. Deployment without public accessibility requires at least
one subnet.
If you specify subnets in a shared VPC (https://docs.aws.amazon.com/vpc/latest/userguide/vpc-sharing.html)
for a RabbitMQ broker, the associated VPC to which the specified subnets
belong must be owned by your Amazon Web Services account. Amazon MQ will
not be able to create VPC endpoints in VPCs that are not owned by your Amazon
Web Services account. |
| subnetIDs.[]
Required | string
|| subnetRefs
Optional | array
|
| subnetRefs.[]
Required | object
AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReference
type to provide more user friendly syntax for references using ‘from’ field
Ex:
APIIDRef:
from:
name: my-api || **subnetRefs.[].from**<br/>Optional | **object**<br/>AWSResourceReference provides all the values necessary to reference another<br/>k8s resource for finding the identifier(Id/ARN/Name) |
| subnetRefs.[].from.name
Optional | string
|
| subnetRefs.[].from.namespace
Optional | string
|
| tags
Optional | object
Create tags when creating the broker. |
| users
Required | array
The list of broker users (persons or applications) who can access queues
and topics. For Amazon MQ for RabbitMQ brokers, one and only one administrative
user is accepted and created when a broker is first provisioned. All subsequent
broker users are created by making RabbitMQ API calls directly to brokers
or via the RabbitMQ web console. |
| users.[]
Required | object
A user associated with the broker. For Amazon MQ for RabbitMQ brokers, one
and only one administrative user is accepted and created when a broker is
first provisioned. All subsequent broker users are created by making RabbitMQ
API calls directly to brokers or via the RabbitMQ web console. || users.[].consoleAccess
Optional | boolean
|
| users.[].groups
Optional | array
|
| users.[].groups.[]
Required | string
|| users.[].password
Optional | object
SecretKeyReference combines a k8s corev1.SecretReference with a
specific key within the referred-to Secret |
| users.[].password.key
Required | string
Key is the key within the secret |
| users.[].password.name
Optional | string
name is unique within a namespace to reference a secret resource. |
| users.[].password.namespace
Optional | string
namespace defines the space within which the secret name must be unique. |
| users.[].username
Optional | string
|
Status
ackResourceMetadata:
arn: string
ownerAccountID: string
region: string
brokerID: string
brokerInstances:
- consoleURL: string
endpoints:
- string
ipAddress: string
brokerState: string
conditions:
- lastTransitionTime: string
message: string
reason: string
status: string
type: string
Field | Description |
---|---|
ackResourceMetadata Optional | object All CRs managed by ACK have a common Status.ACKResourceMetadata memberthat is used to contain resource sync state, account ownership, constructed ARN for the resource |
ackResourceMetadata.arn Optional | string ARN is the Amazon Resource Name for the resource. This is a globally-unique identifier and is set only by the ACK service controller once the controller has orchestrated the creation of the resource OR when it has verified that an “adopted” resource (a resource where the ARN annotation was set by the Kubernetes user on the CR) exists and matches the supplied CR’s Spec field values. https://github.com/aws/aws-controllers-k8s/issues/270 |
ackResourceMetadata.ownerAccountID Required | string OwnerAccountID is the AWS Account ID of the account that owns the backend AWS service API resource. |
ackResourceMetadata.region Required | string Region is the AWS region in which the resource exists or will exist. |
brokerID Optional | string The unique ID that Amazon MQ generates for the broker. |
brokerInstances Optional | array A list of information about allocated brokers. |
brokerInstances.[] Required | object Returns information about all brokers. |
brokerInstances.[].endpoints Optional | array |
brokerInstances.[].endpoints.[] Required | string |
brokerState Optional | string The broker’s status. |
conditions Optional | array All CRs managed by ACK have a common Status.Conditions member thatcontains a collection of ackv1alpha1.Condition objects that describethe various terminal states of the CR and its backend AWS service API resource |
conditions.[] Required | object Condition is the common struct used by all CRDs managed by ACK service |
controllers to indicate terminal states of the CR and its backend AWS | |
service API resource | |
conditions.[].message Optional | string A human readable message indicating details about the transition. |
conditions.[].reason Optional | string The reason for the condition’s last transition. |
conditions.[].status Optional | string Status of the condition, one of True, False, Unknown. |
conditions.[].type Optional | string Type is the type of the Condition |