No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hey guys, i'm looking to install load balancer mentioned here for my eks cluster - <https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html>

I wrote a component resource to install this in nodejs:
<https://github.com/jaxxstorm/pulumi-aws-loadbalancercontroller>

you might be able to use it as inspiration for the Go SDK. I'll try and port it if I get some time

In your code, Jaxx you assume in the config there is a preexisting OIDC provider to attach to the policies

it's mentioned as step one in the aws notes

```Create an IAM OIDC provider and associate it with your cluster. Replace the &lt;example values&gt; (including &lt;&gt;) with your own.

eksctl utils associate-iam-oidc-provider \
    --region &lt;region-code&gt; \
    --cluster &lt;my-cluster&gt; \
    --approve```

is there a way to do this via the pulumi code, I can't see anything in aws/eks that resembles this ^

here's my cluster <@U019FLYTC48>
```const cluster = new eks.Cluster(`eks-${stack}`, {
    providerCredentialOpts: kubeconfigOpts,
    name: `lbrlabs-eks-${stack}`,
    vpcId: vpc,
    privateSubnetIds: privateSubnets,
    publicSubnetIds: publicSubnets,
    instanceType: "t2.medium",
    desiredCapacity: 2,
    minSize: 1,
    maxSize: 2,
    createOidcProvider: true, // this is the thing you need

export const clusterName = cluster.eksCluster.name
export const kubeconfig = cluster.kubeconfig
export const clusterOidcProvider = cluster.core.oidcProvider?.url
export const clusterOidcProviderArn = cluster.core.oidcProvider?.arn
});```

yeah the go sdk doesn't have
``` createOidcProvider: true, // this is the thing you need```

<https://github.com/pulumi/pulumi-aws/blob/master/sdk/go/aws/iam/openIdConnectProvider.go>

ah yeah you found it already, you create the provider that way. You'll need to specify the cert thumbprint which is here:
<https://github.com/aws/aws-cdk/pull/6062/files#diff-1b5abdf4656d868abf37929ca321aeb6901593bb7bfcad698927ac4bfa1e4a6eR658>