eks

Documentation

Index

• func SyncAuthConfigMap(ctx *pulumi.Context, config AuthConfigMapInput) error
• type AuthConfigMapInput
• type ConfigMap
• type ConfigMapMetadata
• type IAMIdentityInput
• type MapRolesElement
• type MapUsersElement
• type SSORolePermissionSetInput

Functions

func SyncAuthConfigMap

func SyncAuthConfigMap(ctx *pulumi.Context, config AuthConfigMapInput) error

Types

type AuthConfigMapInput

type AuthConfigMapInput struct {
	// disables all extra auth configuration, so that the configmap can be
	// imported by pulumi. set this value to true on new clusters, disable
	// after the configmap is imported and all additional permissions will be
	// added
	InitialImport bool `json:"initial-import"`

	// required if nodegroup IAM role autodiscovery not enabled
	NodeGroupIamRole string `json:"nodegroup-iam-role"`

	// required if nodegroup IAM role not supplied
	NodeGroupIamRoleAutoDiscover bool   `json:"nodegroup-iam-role-autodiscover"`
	EKSClusterName               string `json:"eks-cluster-name"`

	// optional list of AWS SSO permission set roles to autodiscover
	AutoDiscoverSSORoles []SSORolePermissionSetInput `json:"sso-permission-set-roles"`

	// optional list of IAM roles and users
	IAMRoles []IAMIdentityInput `json:"iam-roles"`
	IAMUsers []IAMIdentityInput `json:"iam-users"`
}

type ConfigMap

type ConfigMap struct {
	ApiVersion string            `yaml:"apiVersion"`
	Data       map[string]string `yaml:"data"`
	Kind       string            `yaml:"kind"`
	Metadata   ConfigMapMetadata `yaml:"metadata"`
}

type ConfigMapMetadata

type ConfigMapMetadata struct {
	Name      string `yaml:"name"`
	Namespace string `yaml:"namespace"`
}

type IAMIdentityInput

type IAMIdentityInput struct {
	// arn of IAM role to use in configmap
	Arn string `json:"arn"`

	// required groups to add role to
	PermissionGroups []string `json:"permission-groups"`

	// optional username field, defaults to role name
	Username string `json:"username"`
}

type MapRolesElement

type MapRolesElement struct {
	Groups   []string `yaml:"groups"`
	RoleArn  string   `yaml:"rolearn"`
	Username string   `yaml:"username"`
}

type MapUsersElement

type MapUsersElement struct {
	Groups   []string `yaml:"groups"`
	UserArn  string   `yaml:"userarn"`
	Username string   `yaml:"username"`
}

type SSORolePermissionSetInput

type SSORolePermissionSetInput struct {
	// name of permission set to discover for use in configmap
	Name string `json:"name"`

	// required groups to add role to
	PermissionGroups []string `json:"permission-groups"`

	// optional username field, defaults to name field
	Username string `json:"username"`
}