cdk8s-team · cdk8s-automation · Jan 31, 2025 · Jan 31, 2025 · Jan 31, 2025
diff --git a/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresJks.go b/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresJks.go
@@ -7,18 +7,26 @@ type CertificateSpecKeystoresJks struct {
 	//
 	// If true, a file named `keystore.jks` will be created in the target
 	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef`.
+	// `passwordSecretRef` or `password`.
 	// The keystore file will be updated immediately.
 	// If the issuer provided a CA certificate, a file named `truststore.jks`
 	// will also be created in the target Secret resource, encrypted using the
 	// password stored in `passwordSecretRef`
 	// containing the issuing Certificate Authority.
 	Create *bool `field:"required" json:"create" yaml:"create"`
-	// PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the JKS keystore.
-	PasswordSecretRef *CertificateSpecKeystoresJksPasswordSecretRef `field:"required" json:"passwordSecretRef" yaml:"passwordSecretRef"`
 	// Alias specifies the alias of the key in the keystore, required by the JKS format.
 	//
 	// If not provided, the default alias `certificate` will be used.
 	Alias *string `field:"optional" json:"alias" yaml:"alias"`
+	// Password provides a literal password used to encrypt the JKS keystore.
+	//
+	// Mutually exclusive with passwordSecretRef.
+	// One of password or passwordSecretRef must provide a password with a non-zero length.
+	Password *string `field:"optional" json:"password" yaml:"password"`
+	// PasswordSecretRef is a reference to a non-empty key in a Secret resource containing the password used to encrypt the JKS keystore.
+	//
+	// Mutually exclusive with password.
+	// One of password or passwordSecretRef must provide a password with a non-zero length.
+	PasswordSecretRef *CertificateSpecKeystoresJksPasswordSecretRef `field:"optional" json:"passwordSecretRef" yaml:"passwordSecretRef"`
 }
 
diff --git a/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresJksPasswordSecretRef.go b/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresJksPasswordSecretRef.go
@@ -1,7 +1,10 @@
 package certmanagerio
 
 
-// PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the JKS keystore.
+// PasswordSecretRef is a reference to a non-empty key in a Secret resource containing the password used to encrypt the JKS keystore.
+//
+// Mutually exclusive with password.
+// One of password or passwordSecretRef must provide a password with a non-zero length.
 type CertificateSpecKeystoresJksPasswordSecretRef struct {
 	// Name of the resource being referred to.
 	//

diff --git a/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresPkcs12.go b/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresPkcs12.go
@@ -7,15 +7,23 @@ type CertificateSpecKeystoresPkcs12 struct {
 	//
 	// If true, a file named `keystore.p12` will be created in the target
 	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef`.
+	// `passwordSecretRef` or in `password`.
 	// The keystore file will be updated immediately.
 	// If the issuer provided a CA certificate, a file named `truststore.p12` will
 	// also be created in the target Secret resource, encrypted using the
 	// password stored in `passwordSecretRef` containing the issuing Certificate
 	// Authority.
 	Create *bool `field:"required" json:"create" yaml:"create"`
-	// PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the PKCS12 keystore.
-	PasswordSecretRef *CertificateSpecKeystoresPkcs12PasswordSecretRef `field:"required" json:"passwordSecretRef" yaml:"passwordSecretRef"`
+	// Password provides a literal password used to encrypt the PKCS#12 keystore.
+	//
+	// Mutually exclusive with passwordSecretRef.
+	// One of password or passwordSecretRef must provide a password with a non-zero length.
+	Password *string `field:"optional" json:"password" yaml:"password"`
+	// PasswordSecretRef is a reference to a non-empty key in a Secret resource containing the password used to encrypt the PKCS#12 keystore.
+	//
+	// Mutually exclusive with password.
+	// One of password or passwordSecretRef must provide a password with a non-zero length.
+	PasswordSecretRef *CertificateSpecKeystoresPkcs12PasswordSecretRef `field:"optional" json:"passwordSecretRef" yaml:"passwordSecretRef"`
 	// Profile specifies the key and certificate encryption algorithms and the HMAC algorithm used to create the PKCS12 keystore.
 	//
 	// Default value is `LegacyRC2` for backward compatibility.

diff --git a/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresPkcs12PasswordSecretRef.go b/go/cdk8s-crd/imports/certmanagerio/CertificateSpecKeystoresPkcs12PasswordSecretRef.go
@@ -1,7 +1,10 @@
 package certmanagerio
 
 
-// PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the PKCS12 keystore.
+// PasswordSecretRef is a reference to a non-empty key in a Secret resource containing the password used to encrypt the PKCS#12 keystore.
+//
+// Mutually exclusive with password.
+// One of password or passwordSecretRef must provide a password with a non-zero length.
 type CertificateSpecKeystoresPkcs12PasswordSecretRef struct {
 	// Name of the resource being referred to.
 	//

diff --git a/go/kubernetes-end-to-end-aws/cdk.out/kubernetes-end-to-end-aws.assets.json b/go/kubernetes-end-to-end-aws/cdk.out/kubernetes-end-to-end-aws.assets.json
@@ -105,41 +105,41 @@
         }
       }
     },
-    "3d6d954a698964f5fef5b4c3e79ff67b53c746277c03290ca3d6617be8c01874": {
+    "0bdd7852b00076aeabd4467eaa513b4f89c147b1b76a4b8a9844d1fe24484b1c": {
       "source": {
         "path": "kubernetesendtoendawsawscdkawseksClusterResourceProvider5E6E6F1A.nested.template.json",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "3d6d954a698964f5fef5b4c3e79ff67b53c746277c03290ca3d6617be8c01874.json",
+          "objectKey": "0bdd7852b00076aeabd4467eaa513b4f89c147b1b76a4b8a9844d1fe24484b1c.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "74d50af048c3d2687024f6a59ece42246a2aebf198ee571d9062e184dcd1d63f": {
+    "8154b6009d8c431ea28dc9e70e934d1510a914f15d1113c421735a8741df57d3": {
       "source": {
         "path": "kubernetesendtoendawsawscdkawseksKubectlProvider1BCE4654.nested.template.json",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "74d50af048c3d2687024f6a59ece42246a2aebf198ee571d9062e184dcd1d63f.json",
+          "objectKey": "8154b6009d8c431ea28dc9e70e934d1510a914f15d1113c421735a8741df57d3.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "803ee365d276768ad63caa6b682387eb1913016dcb5f954343e73f10cbb3e257": {
+    "a42482c0007a7571e8580363affad3b4f80d227b13103fe621d37146e814509d": {
       "source": {
         "path": "kubernetes-end-to-end-aws.template.json",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "803ee365d276768ad63caa6b682387eb1913016dcb5f954343e73f10cbb3e257.json",
+          "objectKey": "a42482c0007a7571e8580363affad3b4f80d227b13103fe621d37146e814509d.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }

diff --git a/go/kubernetes-end-to-end-aws/cdk.out/kubernetes-end-to-end-aws.template.json b/go/kubernetes-end-to-end-aws/cdk.out/kubernetes-end-to-end-aws.template.json
@@ -1212,7 +1212,7 @@
        {
         "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
        },
-       "/3d6d954a698964f5fef5b4c3e79ff67b53c746277c03290ca3d6617be8c01874.json"
+       "/0bdd7852b00076aeabd4467eaa513b4f89c147b1b76a4b8a9844d1fe24484b1c.json"
       ]
      ]
     },
@@ -1252,7 +1252,7 @@
        {
         "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
        },
-       "/74d50af048c3d2687024f6a59ece42246a2aebf198ee571d9062e184dcd1d63f.json"
+       "/8154b6009d8c431ea28dc9e70e934d1510a914f15d1113c421735a8741df57d3.json"
       ]
      ]
     },
@@ -1863,7 +1863,7 @@
   "CDKMetadata": {
    "Type": "AWS::CDK::Metadata",
    "Properties": {
-    "Analytics": "v2:deflate64:H4sIAAAAAAAA/1VSXW/bMAz8LXmXlS5ptz3OFYYu/ViMePBrQct0okamDIlKFhj+74PtZm6feDxQ1JG8ley+fZc3CziHRFfHxJpSdjmDPgo4h9curF8hBOQg0yGIsJb3UR+R7yGgsNCUFUhV0zNc0Bfog3Ek8Bhkp2wMjF6k55BGPoinWKInZAwvQKbGwGLbIm0q5YhQc+bdyVToxW9X4d672ApV05z8QtuoA3j+0GlbvqHmAmxEkdpSOWLvrEUvcvQnozHV2kXiXqBeya5o9dCzyJTIYmmNzmNJyAM3o52LjH+gtDjzM5eG4LQBHsa8Fg/g5yYb5QI/AOMZLiLz5gSMc+MN8Sj7WjApec9SZtCHBolFjjp6w5eH6w4+Eb0w0Mhu5yZ9Y8ycNXpsOKG+F+O1coa9ob3YYXDRaxQqBnbNnNb0EW8jt3HaxmgAVdNjGOb89Or/nVRNL9C2wweqJuWoMsNaenEj14sf74ZaThZJ7OCP5BhL1GyT0+pOPk24WN2N3unF3n2Rq7W8XVpD8e8Smurr7eItGJP4SGwalLsp/gPcu9bctAIAAA=="
+    "Analytics": "v2:deflate64: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"
    },
    "Metadata": {
     "aws:cdk:path": "kubernetes-end-to-end-aws/CDKMetadata/Default"

diff --git a/...out/kubernetesendtoendawsawscdkawseksClusterResourceProvider5E6E6F1A.nested.template.json b/...out/kubernetesendtoendawsawscdkawseksClusterResourceProvider5E6E6F1A.nested.template.json
@@ -828,7 +828,7 @@
   "CDKMetadata": {
    "Type": "AWS::CDK::Metadata",
    "Properties": {
-    "Analytics": "v2:deflate64:H4sIAAAAAAAA/zWNwW6DMBBEvyV3x2lD1PaaIPXURohIvVobe0EuZo28dhOE+PfKJJxm3mp2Zi/fP+TLBm681abbOnuV0xk5orlE0J1w0F8NKAcjBkXeoBqCv48KWqQoz95glfmY8SuHBNxYTVwoYMbI8phFcCFPSXcYT8D4LJVT2dDy84OBrSfxmUjHbMqGVj8LC72cau8wnxetvLN6zPhw8yyWmUuE1lIramSfgkahE0ffq/BkllXwf9ZgWKrWVNlQ6cnYdfobhsFSO4vWv8p9IQ87Zyndd9Cbt8Pml63dhkTR9ijrh/4D4qZ4p0YBAAA="
+    "Analytics": "v2:deflate64:H4sIAAAAAAAA/zWNzW6DMBCEnyV347Shf9cEqac2QkTq1drYC3Ixa+S1myDEu1cmyWnmW83O7OT7h3zawIULbfrC2bOcj8gRzSmC7oWD4WxAOZgwKPIG1Rj8dVLQIUV59AbrzPuMXzkk4MJq5lIBM0aW+yyCS3lIusd4AMZ7qZyrltafHwxsPYnPRDpmU7X08IuwMMi58Q7zedXaO6unjDe3LGKdOUXoLHWiQfYpaBQ6cfSDCndmWQf/Zw2GteqRqlqqPBn7mP6GcbTULaLzz3JXytets5SuWxjM28vml60tQqJoB5TNTf8B1Pf6g0YBAAA="
    },
    "Metadata": {
     "aws:cdk:path": "kubernetes-end-to-end-aws/@aws-cdk--aws-eks.ClusterResourceProvider/CDKMetadata/Default"

diff --git a/...aws/cdk.out/kubernetesendtoendawsawscdkawseksKubectlProvider1BCE4654.nested.template.json b/...aws/cdk.out/kubernetesendtoendawsawscdkawseksKubectlProvider1BCE4654.nested.template.json
@@ -334,7 +334,7 @@
   "CDKMetadata": {
    "Type": "AWS::CDK::Metadata",
    "Properties": {
-    "Analytics": "v2:deflate64:H4sIAAAAAAAA/02PzWrDQAyEnyX3tdLGoe01MfTSHoILvS7yWjWK9wdWu3WD8buXdUzpaUYaGH06wPMLPOxwksr0Y2W5gxkn0TONAm+5I5PsJYZv7ikqi67rEebX7E3i4FXz5f/7d7xR/KQoHPyiGB3MbbBUolUvwbK5lfHuFiW1RhFKAqciSmo4ZzNSOqPQolqSkKMhtaYfCQf2w4ahbbmmcRJjGU6TNJZXgNLfBN/zimWypOB03JoE/r4pVNt2UUN4hEMNx71ln3/26Pqn4+4qzFXMPrEjaO/6CzD3XQgxAQAA"
+    "Analytics": "v2:deflate64:H4sIAAAAAAAA/02PS2vDQAyEf0vua6WN+7omhl7aQ3Ch10Veq0bxPmC1WzcY//eyjik9zUgDo08HeH6Bux1OUpl+rCx3MOMkeqZR4C13ZJI9x/DNPUVl0XU9wvyavUkcvGq+/H//jleKnxSFg18Uo4O5DZZKtOo5WDbXMt7coqTWKEJJ4FhESQ2nbEZKJxRaVEsScjSk1vQj4cB+2DC0Ldc0TmIsw3GSxvIKUPqb4HtesUyWFJyOW5PA3zeFatsuagj3cKjhcW/Z5589uv7pYXcR5ipmn9gRtDf9BQam3ywxAQAA"
    },
    "Metadata": {
     "aws:cdk:path": "kubernetes-end-to-end-aws/@aws-cdk--aws-eks.KubectlProvider/CDKMetadata/Default"

diff --git a/go/kubernetes-end-to-end-aws/cdk.out/manifest.json b/go/kubernetes-end-to-end-aws/cdk.out/manifest.json
@@ -17,7 +17,7 @@
         "validateOnSynth": false,
         "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
         "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
-        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/803ee365d276768ad63caa6b682387eb1913016dcb5f954343e73f10cbb3e257.json",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/a42482c0007a7571e8580363affad3b4f80d227b13103fe621d37146e814509d.json",
         "requiresBootstrapStackVersion": 6,
         "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
         "additionalDependencies": [

diff --git a/go/kubernetes-end-to-end-aws/cdk.out/tree.json b/go/kubernetes-end-to-end-aws/cdk.out/tree.json
@@ -2772,7 +2772,7 @@
                           {
                             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
                           },
-                          "/3d6d954a698964f5fef5b4c3e79ff67b53c746277c03290ca3d6617be8c01874.json"
+                          "/0bdd7852b00076aeabd4467eaa513b4f89c147b1b76a4b8a9844d1fe24484b1c.json"
                         ]
                       ]
                     },
@@ -3462,7 +3462,7 @@
                           {
                             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
                           },
-                          "/74d50af048c3d2687024f6a59ece42246a2aebf198ee571d9062e184dcd1d63f.json"
+                          "/8154b6009d8c431ea28dc9e70e934d1510a914f15d1113c421735a8741df57d3.json"
                         ]
                       ]
                     },