Package com.pulumi.aws.eks

Class PodIdentityAssociationArgs.Builder

  • Enclosing class:
    PodIdentityAssociationArgs
    public static final class PodIdentityAssociationArgs.Builder
extends java.lang.Object

    • Method Detail

      • clusterName

        public PodIdentityAssociationArgs.Builder clusterName​(com.pulumi.core.Output<java.lang.String> clusterName)
        Parameters:
        clusterName - The name of the cluster to create the association in.
        Returns:
        builder

      • clusterName

        public PodIdentityAssociationArgs.Builder clusterName​(java.lang.String clusterName)
        Parameters:
        clusterName - The name of the cluster to create the association in.
        Returns:
        builder

      • disableSessionTags

        public PodIdentityAssociationArgs.Builder disableSessionTags​(@Nullable
                                                             com.pulumi.core.Output<java.lang.Boolean> disableSessionTags)
        Parameters:
        disableSessionTags - Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.
        Returns:
        builder

      • disableSessionTags

        public PodIdentityAssociationArgs.Builder disableSessionTags​(java.lang.Boolean disableSessionTags)
        Parameters:
        disableSessionTags - Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.
        Returns:
        builder

      • namespace

        public PodIdentityAssociationArgs.Builder namespace​(com.pulumi.core.Output<java.lang.String> namespace)
        Parameters:
        namespace - The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
        Returns:
        builder

      • namespace

        public PodIdentityAssociationArgs.Builder namespace​(java.lang.String namespace)
        Parameters:
        namespace - The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
        Returns:
        builder

      • policy

        public PodIdentityAssociationArgs.Builder policy​(@Nullable
                                                 com.pulumi.core.Output<java.lang.String> policy)
        Parameters:
        policy - An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.
        Returns:
        builder

      • policy

        public PodIdentityAssociationArgs.Builder policy​(java.lang.String policy)
        Parameters:
        policy - An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.
        Returns:
        builder

      • region

        public PodIdentityAssociationArgs.Builder region​(@Nullable
                                                 com.pulumi.core.Output<java.lang.String> region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • region

        public PodIdentityAssociationArgs.Builder region​(java.lang.String region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • roleArn

        public PodIdentityAssociationArgs.Builder roleArn​(com.pulumi.core.Output<java.lang.String> roleArn)
        Parameters:
        roleArn - ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
        Returns:
        builder

      • roleArn

        public PodIdentityAssociationArgs.Builder roleArn​(java.lang.String roleArn)
        Parameters:
        roleArn - ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
        Returns:
        builder

      • serviceAccount

        public PodIdentityAssociationArgs.Builder serviceAccount​(com.pulumi.core.Output<java.lang.String> serviceAccount)
        Parameters:
        serviceAccount - The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:
        Returns:
        builder

      • serviceAccount

        public PodIdentityAssociationArgs.Builder serviceAccount​(java.lang.String serviceAccount)
        Parameters:
        serviceAccount - The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:
        Returns:
        builder

      • tags

        public PodIdentityAssociationArgs.Builder tags​(@Nullable
                                               com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public PodIdentityAssociationArgs.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • targetRoleArn

        public PodIdentityAssociationArgs.Builder targetRoleArn​(@Nullable
                                                        com.pulumi.core.Output<java.lang.String> targetRoleArn)
        Parameters:
        targetRoleArn - ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.
        Returns:
        builder

      • targetRoleArn

        public PodIdentityAssociationArgs.Builder targetRoleArn​(java.lang.String targetRoleArn)
        Parameters:
        targetRoleArn - ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.
        Returns:
        builder