ComputeServiceAttachment


Property Value
Google Cloud Service Name Compute Engine
Google Cloud Service Documentation /compute/docs/
Google Cloud REST Resource Name beta.serviceAttachments
Google Cloud REST Resource Documentation /compute/docs/reference/rest/beta/serviceAttachments
Config Connector Resource Short Names gcpcomputeserviceattachment
gcpcomputeserviceattachments
computeserviceattachment
Config Connector Service Name compute.googleapis.com
Config Connector Resource Fully Qualified Name computeserviceattachments.compute.cnrm.cloud.google.com
Can Be Referenced by IAMPolicy/IAMPolicyMember No
Config Connector Default Average Reconcile Interval In Seconds 600

Custom Resource Definition Properties

Spec

Schema

connectionPreference: string
consumerAcceptLists:
- connectionLimit: integer
  projectRef:
    external: string
    name: string
    namespace: string
consumerRejectLists:
- external: string
  name: string
  namespace: string
description: string
enableProxyProtocol: boolean
location: string
natSubnets:
- external: string
  name: string
  namespace: string
projectRef:
  external: string
  name: string
  namespace: string
resourceID: string
targetServiceRef:
  external: string
  name: string
  namespace: string
Fields

connectionPreference

Required

string

The connection preference of service attachment. The value can be set to `ACCEPT_AUTOMATIC`. An `ACCEPT_AUTOMATIC` service attachment is one that always accepts the connection from consumer forwarding rules. Possible values: CONNECTION_PREFERENCE_UNSPECIFIED, ACCEPT_AUTOMATIC, ACCEPT_MANUAL

consumerAcceptLists

Optional

list (object)

Projects that are allowed to connect to this service attachment.

consumerAcceptLists[]

Optional

object

consumerAcceptLists[].connectionLimit

Optional

integer

The value of the limit to set.

consumerAcceptLists[].projectRef

Required*

object

consumerAcceptLists[].projectRef.external

Optional

string

The project id or number for the project to set the limit for. Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).

consumerAcceptLists[].projectRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

consumerAcceptLists[].projectRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

consumerRejectLists

Optional

list (object)

consumerRejectLists[]

Optional

object

consumerRejectLists[].external

Optional

string

Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).

consumerRejectLists[].name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

consumerRejectLists[].namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

description

Optional

string

An optional description of this resource. Provide this property when you create the resource.

enableProxyProtocol

Optional

boolean

Immutable. If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.

location

Required

string

Immutable. The location for the resource

natSubnets

Required

list (object)

natSubnets[]

Required

object

natSubnets[].external

Optional

string

Allowed value: The `selfLink` field of a `ComputeSubnetwork` resource.

natSubnets[].name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

natSubnets[].namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

projectRef

Required

object

Immutable. The Project that this resource belongs to.

projectRef.external

Optional

string

The project for the resource Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).

projectRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

projectRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

resourceID

Optional

string

Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default.

targetServiceRef

Required

object

Immutable.

targetServiceRef.external

Optional

string

The URL of a service serving the endpoint identified by this service attachment. Allowed value: The `selfLink` field of a `ComputeForwardingRule` resource.

targetServiceRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

targetServiceRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

* Field is required when parent field is specified

Status

Schema

conditions:
- lastTransitionTime: string
  message: string
  reason: string
  status: string
  type: string
connectedEndpoints:
- endpoint: string
  pscConnectionId: integer
  status: string
fingerprint: string
id: integer
observedGeneration: integer
pscServiceAttachmentId:
  high: integer
  low: integer
region: string
selfLink: string
Fields
conditions

list (object)

Conditions represent the latest available observation of the resource's current state.

conditions[]

object

conditions[].lastTransitionTime

string

Last time the condition transitioned from one status to another.

conditions[].message

string

Human-readable message indicating details about last transition.

conditions[].reason

string

Unique, one-word, CamelCase reason for the condition's last transition.

conditions[].status

string

Status is the status of the condition. Can be True, False, Unknown.

conditions[].type

string

Type is the type of the condition.

connectedEndpoints

list (object)

An array of connections for all the consumers connected to this service attachment.

connectedEndpoints[]

object

connectedEndpoints[].endpoint

string

The url of a connected endpoint.

connectedEndpoints[].pscConnectionId

integer

The PSC connection id of the connected endpoint.

connectedEndpoints[].status

string

The status of a connected endpoint to this service attachment. Possible values: PENDING, RUNNING, DONE

fingerprint

string

Fingerprint of this resource. This field is used internally during updates of this resource.

id

integer

The unique identifier for the resource type. The server generates this identifier.

observedGeneration

integer

ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource.

pscServiceAttachmentId

object

An 128-bit global unique ID of the PSC service attachment.

pscServiceAttachmentId.high

integer

pscServiceAttachmentId.low

integer

region

string

URL of the region where the service attachment resides. This field applies only to the region resource. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.

selfLink

string

Server-defined URL for the resource.

Sample YAML(s)

Typical Use Case

# Copyright 2021 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeServiceAttachment
metadata:
  name: computeserviceattachment-sample
spec:
  projectRef:
     # Replace ${PROJECT_ID?} with your project ID
     external: "projects/${PROJECT_ID?}"
  location: "us-west2"
  description: "A sample service attachment"
  targetServiceRef:
    name: "computeserviceattachment-dep"
  connectionPreference: "ACCEPT_MANUAL"
  natSubnets:
  - name: "computeserviceattachment-dep1"
  enableProxyProtocol: false
  consumerRejectLists:
  - name: "computeserviceattachment-dep1"
  consumerAcceptLists:
  - projectRef:
      name: "computeserviceattachment-dep2"
    connectionLimit: 2
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeBackendService
metadata:
  name: computeserviceattachment-dep
spec:
  location: "us-west2"
  networkRef:
    name: "computeserviceattachment-dep"
  loadBalancingScheme: "INTERNAL"
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeForwardingRule
metadata:
  name: computeserviceattachment-dep
spec:
  location: "us-west2"
  networkRef:
    name: "computeserviceattachment-dep"
  subnetworkRef:
    name: "computeserviceattachment-dep3"
  description: "A test forwarding rule with internal load balancing scheme"
  loadBalancingScheme: "INTERNAL"
  backendServiceRef:
    name: "computeserviceattachment-dep"
  networkTier: "PREMIUM"
  allPorts: true
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeNetwork
metadata:
  name: computeserviceattachment-dep
spec:
  autoCreateSubnetworks: false
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeSubnetwork
metadata:
  name: computeserviceattachment-dep1
spec:
  region: "us-west2"
  ipCidrRange: "10.2.0.0/16"
  networkRef:
    name: "computeserviceattachment-dep"
  purpose: "PRIVATE_SERVICE_CONNECT"
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeSubnetwork
metadata:
  name: computeserviceattachment-dep2
spec:
  region: "us-west2"
  ipCidrRange: "10.3.0.0/16"
  networkRef:
    name: "computeserviceattachment-dep"
  purpose: "PRIVATE_SERVICE_CONNECT"
---
apiVersion: compute.cnrm.cloud.google.com/v1beta1
kind: ComputeSubnetwork
metadata:
  name: computeserviceattachment-dep3
spec:
  region: "us-west2"
  ipCidrRange: "10.4.0.0/16"
  networkRef:
    name: "computeserviceattachment-dep"
  purpose: "PRIVATE"
---
apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
kind: Project
metadata:
  name: computeserviceattachment-dep1
spec:
  organizationRef:
    # Replace "${ORG_ID?}" with the numeric ID for your organization
    external: "${ORG_ID?}"
  name: "computeserviceattachment-dep1"
---
apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
kind: Project
metadata:
  name: computeserviceattachment-dep2
spec:
  organizationRef:
    # Replace "${ORG_ID?}" with the numeric ID for your organization
    external: "${ORG_ID?}"
  name: "computeserviceattachment-dep2"