polite-napkin-90098
01/26/2022, 9:13 PMsg, err := ec2.NewSecurityGroup(ctx, "EKS", &ec2.SecurityGroupArgs{
Description: pulumi.String("Group for the EKS cluster"),
VpcId: pulumi.String(vpcid),
Ingress: ec2.SecurityGroupIngressArray{
&ec2.SecurityGroupIngressArgs{
Description: pulumi.String("https in from the nodes"),
FromPort: <http://pulumi.Int|pulumi.Int>(443),
ToPort: <http://pulumi.Int|pulumi.Int>(443),
Protocol: pulumi.String("tcp"),
SecurityGroups: pulumi.StringArray{
pulumi.String(cluster.NodeSecurityGroup),
},
},
},
Egress: ec2.SecurityGroupEgressArray{
// allow https out to anywhere
&ec2.SecurityGroupEgressArgs{
FromPort: <http://pulumi.Int|pulumi.Int>(443),
ToPort: <http://pulumi.Int|pulumi.Int>(443),
Protocol: pulumi.String("tcp"),
CidrBlocks: pulumi.StringArray{
pulumi.String("0.0.0.0/0"),
},
Ipv6CidrBlocks: pulumi.StringArray{
pulumi.String("::/0"),
},
},
},
}, nil)
if err != nil {
return err
}
// Create an EKS cluster
cluster, err := eks.NewCluster(ctx, "Test", &eks.ClusterArgs{
VpcId: pulumi.String(vpcid),
PrivateSubnetIds: pulumi.StringArray{
pulumi.String(private[0]),
pulumi.String(private[1]),
pulumi.String(private[2]),
},
PublicSubnetIds: pulumi.StringArray{
pulumi.String(public[0]),
pulumi.String(public[1]),
pulumi.String(public[2]),
},
ClusterSecurityGroup: sg,
EndpointPrivateAccess: pulumi.Bool(true),
EndpointPublicAccess: pulumi.Bool(false),
})
if err != nil {
return err
}
and if I put it that way round I get ./main.go:150:21: undefined: cluster
and if I put the cluster before the sg I get undefined: sg
billions-processor-3086
01/26/2022, 9:19 PMpolite-napkin-90098
01/26/2022, 9:29 PMcluster.NodeSecurityGroup
which seems to have no method id Id or ID