software.amazon.awscdk.services.eks

Interface ClusterAttributes

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

ClusterAttributes.Jsii$Proxy

@Generated(value="jsii-pacmak/1.14.1 (build 828de8a)",
           date="2020-11-24T22:28:23.717Z")
 @Stability(value=Experimental)
public interface ClusterAttributes
extends software.amazon.jsii.JsiiSerializable

(experimental) Attributes for EKS clusters.

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	ClusterAttributes.Builder A builder for ClusterAttributes
static class	ClusterAttributes.Jsii$Proxy An implementation for ClusterAttributes

Method Summary

Modifier and Type	Method and Description
static ClusterAttributes.Builder	builder()
default String	getClusterCertificateAuthorityData() (experimental) The certificate-authority-data for your cluster.
default String	getClusterEncryptionConfigKeyArn() (experimental) Amazon Resource Name (ARN) or alias of the customer master key (CMK).
default String	getClusterEndpoint() (experimental) The API Server endpoint URL.
String	getClusterName() (experimental) The physical name of the Cluster.
default String	getClusterSecurityGroupId() (experimental) The cluster security group that was created by Amazon EKS for the cluster.
default Map<String,String>	getKubectlEnvironment() (experimental) Environment variables to use when running `kubectl` against this cluster.
default ILayerVersion	getKubectlLayer() (experimental) An AWS Lambda Layer which includes `kubectl`, Helm and the AWS CLI.
default List<String>	getKubectlPrivateSubnetIds() (experimental) Subnets to host the `kubectl` compute resources.
default String	getKubectlRoleArn() (experimental) An IAM role with cluster administrator and "system:masters" permissions.
default String	getKubectlSecurityGroupId() (experimental) A security group to use for `kubectl` execution.
default IOpenIdConnectProvider	getOpenIdConnectProvider() (experimental) An Open ID Connect provider for this cluster that can be used to configure service accounts.
default List<String>	getSecurityGroupIds() (experimental) Additional security groups associated with this cluster.
default IVpc	getVpc() (experimental) The VPC in which this Cluster was created.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getClusterName

@Stability(value=Experimental)
 @NotNull
String getClusterName()

(experimental) The physical name of the Cluster.

getClusterCertificateAuthorityData

@Stability(value=Experimental)
 @Nullable
default String getClusterCertificateAuthorityData()

(experimental) The certificate-authority-data for your cluster.

Default: - if not specified `cluster.clusterCertificateAuthorityData` will throw an error

getClusterEncryptionConfigKeyArn

@Stability(value=Experimental)
 @Nullable
default String getClusterEncryptionConfigKeyArn()

(experimental) Amazon Resource Name (ARN) or alias of the customer master key (CMK).

Default: - if not specified `cluster.clusterEncryptionConfigKeyArn` will throw an error

getClusterEndpoint

@Stability(value=Experimental)
 @Nullable
default String getClusterEndpoint()

(experimental) The API Server endpoint URL.

Default: - if not specified `cluster.clusterEndpoint` will throw an error.

getClusterSecurityGroupId

@Stability(value=Experimental)
 @Nullable
default String getClusterSecurityGroupId()

(experimental) The cluster security group that was created by Amazon EKS for the cluster.

Default: - if not specified `cluster.clusterSecurityGroupId` will throw an error

getKubectlEnvironment

@Stability(value=Experimental)
 @Nullable
default Map<String,String> getKubectlEnvironment()

(experimental) Environment variables to use when running `kubectl` against this cluster.

Default: - no additional variables

getKubectlLayer

@Stability(value=Experimental)
 @Nullable
default ILayerVersion getKubectlLayer()

(experimental) An AWS Lambda Layer which includes `kubectl`, Helm and the AWS CLI.

By default, the provider will use the layer included in the "aws-lambda-layer-kubectl" SAR application which is available in all commercial regions.

To deploy the layer locally, visit https://github.com/aws-samples/aws-lambda-layer-kubectl/blob/master/cdk/README.md for instructions on how to prepare the .zip file and then define it in your app as follows:

 // Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
 var layer = LayerVersion.Builder.create(this, "kubectl-layer")
         .code(lambda.Code.fromAsset(__dirname + "/layer.zip"))
         .build();
 var compatibleRuntimes = ;
 Or;you;can;use;the;standard;layer;like;this();with options
 tocustomize;the;version;and;SAR;application;ID;
 ```ts
 const layer = new eks.KubectlLayer(this, 'KubectlLayer');;
 

Default: - the layer provided by the `aws-lambda-layer-kubectl` SAR app.

See Also:

https://github.com/aws-samples/aws-lambda-layer-kubectl

getKubectlPrivateSubnetIds

@Stability(value=Experimental)
 @Nullable
default List<String> getKubectlPrivateSubnetIds()

(experimental) Subnets to host the `kubectl` compute resources.

If not specified, the k8s endpoint is expected to be accessible publicly.

Default: - k8s endpoint is expected to be accessible publicly

getKubectlRoleArn

@Stability(value=Experimental)
 @Nullable
default String getKubectlRoleArn()

(experimental) An IAM role with cluster administrator and "system:masters" permissions.

Default: - if not specified, it not be possible to issue `kubectl` commands against an imported cluster.

getKubectlSecurityGroupId

@Stability(value=Experimental)
 @Nullable
default String getKubectlSecurityGroupId()

(experimental) A security group to use for `kubectl` execution.

If not specified, the k8s endpoint is expected to be accessible publicly.

Default: - k8s endpoint is expected to be accessible publicly

getOpenIdConnectProvider

@Stability(value=Experimental)
 @Nullable
default IOpenIdConnectProvider getOpenIdConnectProvider()

(experimental) An Open ID Connect provider for this cluster that can be used to configure service accounts.

You can either import an existing provider using iam.OpenIdConnectProvider.fromProviderArn, or create a new provider using new eks.OpenIdConnectProvider

Default: - if not specified `cluster.openIdConnectProvider` and `cluster.addServiceAccount` will throw an error.

getSecurityGroupIds

@Stability(value=Experimental)
 @Nullable
default List<String> getSecurityGroupIds()

(experimental) Additional security groups associated with this cluster.

Default: - if not specified, no additional security groups will be considered in `cluster.connections`.

getVpc

@Stability(value=Experimental)
 @Nullable
default IVpc getVpc()

(experimental) The VPC in which this Cluster was created.

Default: - if not specified `cluster.vpc` will throw an error

builder

@Stability(value=Experimental)
static ClusterAttributes.Builder builder()

Returns:

a ClusterAttributes.Builder of ClusterAttributes