// cluster autoscaler; <https://github.com/kubernetes/autoscaler>
Logger.LogDebug("Installing cluster autoscaler");
var clusterAutoscalerRole = new RoleX($"{k8sPrefix}-cluster-autoscaler",
    new RoleXArgs
    {
        AssumeRolePolicy = IamHelpers.AssumeRoleForServiceAccount(oidcArn, oidcUrl, "kube-system", "cluster-autoscaler", awsProvider),
        InlinePolicies = { ["policy"] = ReadResource("ClusterAutoscalerPolicy.json") }
    },
    new ComponentResourceOptions { Provider = awsProvider });

var clusterAutoscalerValues = Output.Tuple(clusterName, clusterAutoscalerRole.Arn).Apply(((string ClusterName, string RoleArn) tuple) =>
    new Dictionary<string, object>
    {
        ["nameOverride"] = "cluster-autoscaler",
        ["kubeTargetVersionOverride"] = K8sConfig.Version,
        ["image"] = new
        {
            tag = $"v{K8sConfig.Version}.0",
            pullPolicy = "IfNotPresent"
        },
        ["priorityClassName"] = "system-cluster-critical",
        ["serviceMonitor"] = new
        {
            enabled = true,
            @namespace = "kube-system",
            selector = new { }
        },
        //["prometheusRule"] = new
        //{
        //    enabled = true,
        //    @namespace = "kube-system",
        //    rules = new[] { new { } }
        //},
        ["cloudProvider"] = "aws",
        ["autoDiscovery"] = new
        {
            enabled = true,
            clusterName = tuple.ClusterName
        },
        ["awsRegion"] = AwsConfig.Region,
        ["extraArgs"] = new Dictionary<string, object>
        {
            ["v"] = 3,
            ["balance-similar-node-groups"] = true,
            ["expander"] = "least-waste",
            ["skip-nodes-with-local-storage"] = false,
            ["skip-nodes-with-system-pods"] = false
        },
        ["podAnnotations"] = new Dictionary<string, string> { ["<http://cluster-autoscaler.kubernetes.io/safe-to-evict|cluster-autoscaler.kubernetes.io/safe-to-evict>"] = "false" },
        ["rbac"] = new { serviceAccount = new { annotations = new Dictionary<string, string> { ["<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>"] = tuple.RoleArn } } }
    }.ToDictionary()); // workaround <https://github.com/pulumi/pulumi/issues/8013>

new Release("cluster-autoscaler",
    new ReleaseArgs
    {
        Namespace = "kube-system",
        Name = "cluster-autoscaler",
        RepositoryOpts = new RepositoryOptsArgs { Repo = "<https://kubernetes.github.io/autoscaler>" },
        Chart = "cluster-autoscaler",
        Version = K8sConfig.ClusterAutoscalerChartVersion,
        Values = clusterAutoscalerValues,
        Atomic = true
    },
    new CustomResourceOptions { DependsOn = kubePrometheusStackCrds, Provider = k8sProvider });