feat(statemachine): publish a version on change via spec.publish

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2026-08-28T18:56:47Z"
-  build_hash: 399b047701458765c3dd8e9dd663ce2ef0337c05
-  go_version: go1.26.5
-  version: v0.63.0
-api_directory_checksum: 333ac8bb99faa93498ee5a22b76e68d6884a2d65
+  build_date: "2026-09-11T21:32:52Z"
+  build_hash: 3da9ce283716fa8d0046dc18eeb1a79a9e6fb1a0
+  go_version: go1.27.1
+  version: v0.63.0-8-g3da9ce2
+api_directory_checksum: f785a586e81d4b5fdb3d38b5c7a495af92d7787d
 api_version: v1alpha1
 aws_sdk_go_version: v1.34.0
 generator_config_info:
-  file_checksum: f3809742cdeb56d69ba0edc62c1ac4a76bbc976a
+  file_checksum: b5966cedbd6f8b1099b63295360f6a59eba854d2
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -3,9 +3,7 @@ ignore:
   field_paths:
   - CreateStateMachineInput.EncryptionConfiguration
   - CreateActivityInput.EncryptionConfiguration
-  - CreateStateMachineInput.Publish
   - CreateStateMachineInput.VersionDescription
-  - CreateStateMachineOutput.StateMachineVersionArn
 
 resources:
   StateMachine:
@@ -14,6 +12,14 @@ resources:
         is_document: true
       Name:
         is_immutable: true
+      Publish:
+        compare:
+          is_ignored: true
+      RevisionId:
+        is_read_only: true
+        from:
+          operation: DescribeStateMachine
+          path: RevisionId
       RoleARN:
         references:
           service_name: iam

config/crd/bases/sfn.services.k8s.aws_statemachines.yaml

@@ -78,6 +78,18 @@ spec:
                 x-kubernetes-validations:
                 - message: Value is immutable once set
                   rule: self == oldSelf
+              publish:
+                description: |-
+                  Whether to publish an immutable version of the state machine whenever its
+                  configuration is pushed to AWS. Versions are cut on create and on update, so
+                  leaving this set means every change to the state machine produces a version;
+                  AWS deduplicates per revision, so an unchanged configuration cuts nothing.
+                  Setting this back to false stops further versions being cut and does not delete
+                  any that already exist. Note that stateMachineVersionARN names the version
+                  holding the configuration last pushed rather than the last version ever
+                  published, so the next update carried out with publish set to false clears it.
+                  The default is false.
+                type: boolean
               roleARN:
                 description: The Amazon Resource Name (ARN) of the IAM role to use
                   for this state machine.
@@ -220,6 +232,20 @@ spec:
                 description: The date the state machine is created.
                 format: date-time
                 type: string
+              revisionID:
+                description: |-
+                  The revision identifier for the state machine.
+
+                  Use the revisionId parameter to compare between versions of a state machine
+                  configuration used for executions without performing a diff of the properties,
+                  such as definition and roleArn.
+                type: string
+              stateMachineVersionARN:
+                description: |-
+                  The Amazon Resource Name (ARN) that identifies the created state machine
+                  version. If you do not set the publish parameter to true, this field returns
+                  null value.
+                type: string
             type: object
         type: object
     served: true

documentation.yaml

@@ -0,0 +1,14 @@
+resources:
+  StateMachine:
+    fields:
+      Publish:
+        override: |
+          Whether to publish an immutable version of the state machine whenever its
+          configuration is pushed to AWS. Versions are cut on create and on update, so
+          leaving this set means every change to the state machine produces a version;
+          AWS deduplicates per revision, so an unchanged configuration cuts nothing.
+          Setting this back to false stops further versions being cut and does not delete
+          any that already exist. Note that stateMachineVersionARN names the version
+          holding the configuration last pushed rather than the last version ever
+          published, so the next update carried out with publish set to false clears it.
+          The default is false.

generator.yaml

@@ -3,9 +3,7 @@ ignore:
   field_paths:
   - CreateStateMachineInput.EncryptionConfiguration
   - CreateActivityInput.EncryptionConfiguration
-  - CreateStateMachineInput.Publish
   - CreateStateMachineInput.VersionDescription
-  - CreateStateMachineOutput.StateMachineVersionArn
 
 resources:
   StateMachine:
@@ -14,6 +12,14 @@ resources:
         is_document: true
       Name:
         is_immutable: true
+      Publish:
+        compare:
+          is_ignored: true
+      RevisionId:
+        is_read_only: true
+        from:
+          operation: DescribeStateMachine
+          path: RevisionId
       RoleARN:
         references:
           service_name: iam

helm/crds/sfn.services.k8s.aws_activities.yaml

@@ -48,7 +48,7 @@ spec:
 
                   A name must not contain:
 
-                    - white space
+                     * white space
                 type: string
                 x-kubernetes-validations:
                 - message: Value is immutable once set

helm/crds/sfn.services.k8s.aws_statemachines.yaml

@@ -73,11 +73,23 @@ spec:
 
                   A name must not contain:
 
-                    - white space
+                     * white space
                 type: string
                 x-kubernetes-validations:
                 - message: Value is immutable once set
                   rule: self == oldSelf
+              publish:
+                description: |-
+                  Whether to publish an immutable version of the state machine whenever its
+                  configuration is pushed to AWS. Versions are cut on create and on update, so
+                  leaving this set means every change to the state machine produces a version;
+                  AWS deduplicates per revision, so an unchanged configuration cuts nothing.
+                  Setting this back to false stops further versions being cut and does not delete
+                  any that already exist. Note that stateMachineVersionARN names the version
+                  holding the configuration last pushed rather than the last version ever
+                  published, so the next update carried out with publish set to false clears it.
+                  The default is false.
+                type: boolean
               roleARN:
                 description: The Amazon Resource Name (ARN) of the IAM role to use
                   for this state machine.
@@ -220,6 +232,20 @@ spec:
                 description: The date the state machine is created.
                 format: date-time
                 type: string
+              revisionID:
+                description: |-
+                  The revision identifier for the state machine.
+
+                  Use the revisionId parameter to compare between versions of a state machine
+                  configuration used for executions without performing a diff of the properties,
+                  such as definition and roleArn.
+                type: string
+              stateMachineVersionARN:
+                description: |-
+                  The Amazon Resource Name (ARN) that identifies the created state machine
+                  version. If you do not set the publish parameter to true, this field returns
+                  null value.
+                type: string
             type: object
         type: object
     served: true