Add support for Workflow resource

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2026-07-13T18:36:33Z"
+  build_date: "2026-07-21T20:02:26Z"
   build_hash: 01fb153549af6a2df3747478105143e989ff4355
   go_version: go1.25.0
-  version: v0.60.0-7-g01fb153
-api_directory_checksum: d3137e7b874e92eeec596f22d86192a74a244409
+  version: v0.61.0-1-g01fb153
+api_directory_checksum: 90e12cbe8c76d4bf443051923203ad1c479b5710
 api_version: v1alpha1
-aws_sdk_go_version: v1.42.0
+aws_sdk_go_version: v1.42.1
 generator_config_info:
-  file_checksum: 7a5ea9c886c80beb718544ec22f6d5a38fc4aca3
+  file_checksum: c03d838a63196bdce030590d3395dc99e07e33bb
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -1,5 +1,106 @@
 sdk_names:
   model_name: mwaa-serverless
 ignore:
-  resource_names:
-    - Workflow
+  field_paths:
+    # Warnings/RevisionId/IsLatestVersion are transient create/update response
+    # metadata, not part of the desired or observed resource state, so there is
+    # nothing for the controller to reconcile against.
+    - CreateWorkflowOutput.Warnings
+    - CreateWorkflowOutput.RevisionId
+    - CreateWorkflowOutput.IsLatestVersion
+    - UpdateWorkflowOutput.Warnings
+    # The user supplies the workflow definition out-of-band via
+    # DefinitionS3Location; it can be arbitrarily large. Reflecting it back into
+    # status would bloat the CR in etcd for no benefit, so drop it from the read.
+    - GetWorkflowOutput.WorkflowDefinition
+resources:
+  Workflow:
+    is_arn_primary_key: true
+    ignore_idempotency_token: true
+    exceptions:
+      errors:
+        404:
+          code: ResourceNotFoundException
+      terminal_codes:
+        - ValidationException
+    fields:
+      Name:
+        is_immutable: true
+      EncryptionConfiguration:
+        is_immutable: true
+      EncryptionConfiguration.Type:
+        go_tag: json:"type,omitempty"
+      WorkflowStatus:
+        go_tag: json:"status,omitempty"
+      WorkflowVersion:
+        go_tag: json:"version,omitempty"
+      # GetWorkflow server-defaults these when the user omits them (TriggerMode
+      # -> "manual_only", LoggingConfiguration -> a synthesized log group), so
+      # let the runtime late-initialize the spec from the read instead of
+      # masking the phantom delta in sdkFind. skip_incomplete_check avoids
+      # holding the resource unsynced while it settles.
+      TriggerMode:
+        late_initialize:
+          skip_incomplete_check: {}
+      LoggingConfiguration:
+        late_initialize:
+          skip_incomplete_check: {}
+      ScheduleConfiguration:
+        is_read_only: true
+        from:
+          operation: GetWorkflow
+          path: ScheduleConfiguration
+      ModifiedAt:
+        is_read_only: true
+        from:
+          operation: GetWorkflow
+          path: ModifiedAt
+      RoleArn:
+        references:
+          resource: Role
+          service_name: iam
+          path: Status.ACKResourceMetadata.ARN
+      DefinitionS3Location.Bucket:
+        references:
+          resource: Bucket
+          service_name: s3
+          path: Spec.Name
+      EncryptionConfiguration.KmsKeyId:
+        references:
+          resource: Key
+          service_name: kms
+          path: Status.ACKResourceMetadata.ARN
+      NetworkConfiguration.SecurityGroupIds:
+        references:
+          resource: SecurityGroup
+          service_name: ec2
+          path: Status.ID
+      NetworkConfiguration.SubnetIds:
+        references:
+          resource: Subnet
+          service_name: ec2
+          path: Status.SubnetID
+    hooks:
+      sdk_read_one_post_set_output:
+        template_path: hooks/workflow/sdk_read_one_post_set_output.go.tpl
+      sdk_update_pre_build_request:
+        template_path: hooks/workflow/sdk_update_pre_build_request.go.tpl
+      sdk_delete_post_build_request:
+        template_path: hooks/workflow/sdk_delete_post_build_request.go.tpl
+    synced:
+      when:
+        - path: Status.WorkflowStatus
+          in:
+            - READY
+    print:
+      add_age_column: true
+      add_synced_column: true
+      additional_columns:
+        - name: STATUS
+          json_path: .status.status
+          type: string
+          index: 10
+        - name: VERSION
+          json_path: .status.version
+          type: string
+          index: 20