https://pulumi.com
Join Slack
```aws eks create-cluster \ --name <CLUSTER_NAME> \ --role-arn <CLUSTER_ROLE_ARN> \ --resour...
# aws
g
Copy code
aws eks create-cluster \
   --name <CLUSTER_NAME> \
   --role-arn <CLUSTER_ROLE_ARN> \
  --resources-vpc-config subnetIds=<value>,endpointPublicAccess=true,endpointPrivateAccess=true \
  --logging '{"clusterLogging":[{"types":["api","audit","authenticator","controllerManager","scheduler"],"enabled":true}]}' \
  --access-config authenticationMode=API
This is the aws-cli command to create eks cluster. See the last line of access-config. I’d like to add this option for aws.eks.cluster() command. Tried pulumi ai, no luck. It’s to enable clusterApi which seems to me allows to do rbac mappings automatically with iam. though not sure will experiment futher.
ok found it
Copy code
import pulumi
import pulumi_aws as aws

example = aws.iam.Role("example",
    assume_role_policy=example_assume_role_policy["json"],
    name="example")
example_cluster = aws.eks.Cluster("example",
    name="example-cluster",
    role_arn=example.arn,
    vpc_config={
        "endpointPrivateAccess": True,
        "endpointPublicAccess": False,
    },
    access_config={
        "authenticationMode": "CONFIG_MAP",
        "bootstrapClusterCreatorAdminPermissions": True,
    })
Copy code
Wonder if anyone even tried to use ClusterAPI auth method with pulumi: <https://aws.amazon.com/blogs/containers/a-deep-dive-into-simplified-amazon-eks-access-management-controls/>
q
Wonder if anyone even tried to use ClusterAPI auth method with pulumi: https://aws.amazon.com/blogs/containers/a-deep-dive-into-simplified-amazon-eks-access-management-controls/
We have a few examples using that authentication mode through our pulumi-eks component provider: https://github.com/pulumi/pulumi-eks/blob/986c528a058381be989c382d38a2e74238c9502b/examples/authentication-mode/index.ts#L80
👀 1
6 Views
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by