Package com.pulumi.aws.eks

Class PodIdentityAssociationArgs

  • public final class PodIdentityAssociationArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • clusterName

        public com.pulumi.core.Output<java.lang.String> clusterName()
        Returns:
        The name of the cluster to create the association in.

      • disableSessionTags

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> disableSessionTags()
        Returns:
        Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.

      • namespace

        public com.pulumi.core.Output<java.lang.String> namespace()
        Returns:
        The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.

      • policy

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> policy()
        Returns:
        An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • roleArn

        public com.pulumi.core.Output<java.lang.String> roleArn()
        Returns:
        ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.

      • serviceAccount

        public com.pulumi.core.Output<java.lang.String> serviceAccount()
        Returns:
        The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • targetRoleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> targetRoleArn()
        Returns:
        ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.