apiVersion: sources.triggermesh.io/v1alpha1
kind: AWSCodeCommitSource
metadata:
  name: mybroker-awscodecommitsource
spec:
  arn: <arn>
  branch: master

  eventTypes:
  - pull_request

  auth:
    credentials:
      accessKeyID:
        valueFromSecret:
          name: awscreds
          key: aws_access_key_id
      secretAccessKey:
        valueFromSecret:
          name: awscreds
          key: aws_secret_access_key

  sink:
    ref:
      apiVersion: eventing.triggermesh.io/v1alpha1
      kind: RedisBroker
      name: mybroker

---

apiVersion: eventing.triggermesh.io/v1alpha1
kind: Trigger
metadata:
  name: codecommittrigger
spec:
  broker:
    kind: RedisBroker
    group: eventing.triggermesh.io
    name: mybroker
  filters:
  - any:
    - exact:
        type: com.amazon.codecommit.pull_request
  target:
    ref:
       apiVersion: v1alpha1
       kind: CloudEventsTarget
       name: mybroker-cloudeventstarget

---

apiVersion: targets.triggermesh.io/v1alpha1
kind: CloudEventsTarget
metadata:
  name: mybroker-cloudeventstarget
spec:
  endpoint: https://example.com/pii-scan-function.py

apiVersion: sources.triggermesh.io/v1alpha1
kind: GoogleCloudAuditLogsSource
metadata:
  name: auditlogssource
spec:
  serviceName: reports.googleapis.com
  methodName: google.admin.reports.v1.suspicious_login

  pubsub:
    project: my-project
    # Alternatively, provide a pre-existing Pub/Sub topic:
    # topic: projects/my-project/topics/my-topic

  serviceAccountKey:
    value: >-
      {
        "type": "service_account",
        "project_id": "my-project",
        "private_key_id": "0000000000000000000000000000000000000000",
        "private_key": "-----BEGIN PRIVATE KEY-----\nMIIE...\n-----END PRIVATE KEY-----\n",
        "client_email": "triggermesh-auditlogs-source@my-project.iam.gserviceaccount.com",
        "client_id": "000000000000000000000",
        "auth_uri": "https://accounts.google.com/o/oauth2/auth",
        "token_uri": "https://oauth2.googleapis.com/token",
        "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
        "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/triggermesh-auditlogs-source%40my-project.iam.gserviceaccount.com"
      }

  sink:
    ref:
      apiVersion: eventing.triggermesh.io/v1alpha1
      kind: RedisBroker
      name: mybroker

---

apiVersion: eventing.triggermesh.io/v1alpha1
kind: Trigger
metadata:
  name: auditlogstrigger
spec:
  broker:
    kind: RedisBroker
    group: eventing.triggermesh.io
    name: mybroker
  filters:
  - any:
    - exact:
        type: com.google.cloud.auditlogs.message
  target:
    ref:
       apiVersion: v1alpha1
       kind: KafkaTarget
       name: mybroker-kafkatarget

---

apiVersion: targets.triggermesh.io/v1alpha1
kind: KafkaTarget
metadata:
  name: mybroker-kafkatarget
spec:
  bootstrapServers:
  - 127.0.0.1:47561
  topic: suspicous-logins
  auth:
    saslEnable: true
    tlsEnable: false
    securityMechanism: PLAIN
    username: admin
    password:
      value: admin-secret