aws-controllers-k8s · Oct 10, 2024 · Oct 25, 2024 · Nov 15, 2024 · Nov 18, 2024 · Jan 14, 2025
diff --git a/OWNERS b/OWNERS
@@ -1,5 +1,4 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
 approvers:
-  - core-ack-team
-  - service-team
+  - core-ack-team
diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
@@ -3,11 +3,14 @@
 aliases:
   core-ack-team:
     - a-hilaly
-    - RedbackThomson
-    - jljaco
-  # TODO: Add your team members' GitHub aliases to the team alias
-  service-team:
-    - ndbhat
-    - anbaig
-    - divyansh-gupta
-    - Hamidhasan
+    - jlbutler
+    - michaelhtm
+    - TiberiuGC
+    - rushmash91
+  # emeritus-core-ack-team:
+  #   - jaypipes
+  #   - jljaco
+  #   - mhausenblas
+  #   - RedbackThomson
+  #   - vijtrip2
+  #   - ivelichkovich
diff --git a/README.md b/README.md
@@ -1,13 +1,83 @@
-# ACK service controller for AWS Certificate Manager Private Certificate Authority
+# ACK service controller for AWS Private Certificate Authority
 
 This repository contains source code for the AWS Controllers for Kubernetes
-(ACK) service controller for ACM-PCA.
+(ACK) service controller for AWS Private Certificate Authority.
 
 Please [log issues][ack-issues] and feedback on the main AWS Controllers for
 Kubernetes Github project.
 
 [ack-issues]: https://github.com/aws/aws-controllers-k8s/issues
 
+## Resources Supported
+The ACK service controller for AWS Private Certificate Authority supports the following resources:
+- CertificateAuthority
+- Certificate
+- CertificateAuthorityActivation
+
+## Getting Started
+
+### Pricing
+The ACK service controller for AWS Private Certificate Authority is free of charge. With AWS Private Certificate Authority (AWS Private CA), you pay a monthly fee for the operation of each private certificate authority (CA), the private certificates you issue each month, and the use of the Online Certificate Status Protocol (OCSP). Learn more about [AWS Private Certificate Authority Pricing](https://aws.amazon.com/private-ca/pricing).
+
+### Samples 
+Go to the [samples directory][samples] and follow the README to create resources.
+
+[samples]: https://github.com/aws-controllers-k8s/acmpca-controller/tree/main/samples
+
+### Use with the Cert-Manager AWS Private CA Issuer Plugin
+After creating your CA hierarchy via the ACK service controller for AWS Private Certificate Authority, you can use [cert-manager](https://cert-manager.io/) and the [AWS Private CA Issuer Plugin](https://github.com/cert-manager/aws-privateca-issuer) to deploy managed private certificates in your cluster.
+
+### Kubernetes Secrets
+The ACK service controller for AWS Private Certificate Authority uses Kubernetes Secrets to store certificate and certificate chains. Users are expected to create Secrets before creating Certificate and CertificateAuthorityActivation resources. As these resources are created, the Secrets will be injected with either the certificate or certificate chain. Users are responsible for deleting Secrets.
+
+#### Certificate Secret
+Before creating the Certificate resource, users must specify the namespace, name, and key of the Secret using the `certificateOutput` field of the Certificate resource, as shown below. If a namespace isn't specified, the namespace of the Certificate resource will be used.
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: certificate-secret
+  namespace: default
+data:
+  certificate: ""
+---
+apiVersion: acmpca.services.k8s.aws/v1alpha1
+kind: Certificate
+metadata:
+  name: my-certificate
+spec:
+  certificateOutput:
+    namespace: default
+    name:  certificate-secret
+    key: certificate
+...
+```
+
+#### CertificateChain Secret
+Before creating the CertificateAuthorityActivation resource, users must specify the namespace, name, and key of the Secret using the `completeCertificateChainOutput` field of the CertificateAuthorityActivation resource, as shown below. If a namespace isn't specified, the namespace of the CertificateAuthorityActivation resource will be used.
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: certificate-chain-secret
+  namespace: default
+data:
+  certificateChain: ""
+---
+apiVersion: acmpca.services.k8s.aws/v1alpha1
+kind: CertificateAuthorityActivation
+metadata:
+  name: my-ca-activation
+spec:
+  completeCertificateChainOutput:
+    namespace: default
+    name: certificate-chain-secret
+    key: certificateChain
+...
+```
+
 ## Contributing
 
 We welcome community contributions and pull requests.

diff --git a/apis/v1alpha1/ack-generate-metadata.yaml b/apis/v1alpha1/ack-generate-metadata.yaml
@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2024-09-05T13:35:46Z"
-  build_hash: f8f98563404066ac3340db0a049d2e530e5c51cc
-  go_version: go1.22.5
-  version: v0.38.1
-api_directory_checksum: bd1c805e13428d024256fc04295c87e9bee1524c
+  build_date: "2025-02-21T00:50:58Z"
+  build_hash: a326346bd3a6973254d247c9ab2dc76790c36241
+  go_version: go1.24.0
+  version: v0.43.2
+api_directory_checksum: b40da118f1911726e790de72e761cf61b62f1a5e
 api_version: v1alpha1
-aws_sdk_go_version: v1.49.6
+aws_sdk_go_version: 1.32.6
 generator_config_info:
-  file_checksum: 8c8ac630b5041df827e873b967655a762fa3877b
+  file_checksum: f7ab836c2ac49ebc67301d15d78022bc176a4e69
   original_file_name: generator.yaml
 last_modification:
   reason: API generation
diff --git a/apis/v1alpha1/certificate.go b/apis/v1alpha1/certificate.go
diff --git a/apis/v1alpha1/certificate_authority.go b/apis/v1alpha1/certificate_authority.go
diff --git a/apis/v1alpha1/certificate_authority_activation.go b/apis/v1alpha1/certificate_authority_activation.go