apiVersion: organizations.aws.m.upbound.io/v1beta1
kind: OrganizationalUnit
metadata:
  name: production-ou
  namespace: aws-organization
  labels:
    environment: production
    managed-by: crossplane
spec:
  forProvider:
    name: Production
    # IMPORTANT: Replace r-xxxx with your actual root ID
    # Get it with: kubectl get organization my-organization -n aws-organization -o jsonpath='{.status.atProvider.roots[0].id}'
    parentId: "r-xxxx"
  providerConfigRef:
    name: org-config

---
apiVersion: organizations.aws.m.upbound.io/v1beta1
kind: OrganizationalUnit
metadata:
  name: non-production-ou
  namespace: aws-organization
  labels:
    environment: non-production
    managed-by: crossplane
spec:
  forProvider:
    name: NonProduction
    parentId: "r-xxxx"  # Replace with your root ID
  providerConfigRef:
    name: org-config

---
apiVersion: organizations.aws.m.upbound.io/v1beta1
kind: OrganizationalUnit
metadata:
  name: management-ou
  namespace: aws-organization
  labels:
    environment: management
    managed-by: crossplane
spec:
  forProvider:
    name: Management
    parentId: "r-xxxx"  # Replace with your root ID
  providerConfigRef:
    name: org-config