Package com.pulumi.aws.eks.inputs

Class PodIdentityAssociationState.Builder

    • Method Detail

      • associationArn

        public PodIdentityAssociationState.Builder associationArn​(@Nullable
                                                          com.pulumi.core.Output<java.lang.String> associationArn)
        Parameters:
        associationArn - ARN of the association.
        Returns:
        builder

      • associationArn

        public PodIdentityAssociationState.Builder associationArn​(java.lang.String associationArn)
        Parameters:
        associationArn - ARN of the association.
        Returns:
        builder

      • associationId

        public PodIdentityAssociationState.Builder associationId​(@Nullable
                                                         com.pulumi.core.Output<java.lang.String> associationId)
        Parameters:
        associationId - The ID of the association.
        Returns:
        builder

      • associationId

        public PodIdentityAssociationState.Builder associationId​(java.lang.String associationId)
        Parameters:
        associationId - The ID of the association.
        Returns:
        builder

      • clusterName

        public PodIdentityAssociationState.Builder clusterName​(@Nullable
                                                       com.pulumi.core.Output<java.lang.String> clusterName)
        Parameters:
        clusterName - The name of the cluster to create the association in.
        Returns:
        builder

      • clusterName

        public PodIdentityAssociationState.Builder clusterName​(java.lang.String clusterName)
        Parameters:
        clusterName - The name of the cluster to create the association in.
        Returns:
        builder

      • disableSessionTags

        public PodIdentityAssociationState.Builder disableSessionTags​(@Nullable
                                                              com.pulumi.core.Output<java.lang.Boolean> disableSessionTags)
        Parameters:
        disableSessionTags - Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.
        Returns:
        builder

      • disableSessionTags

        public PodIdentityAssociationState.Builder disableSessionTags​(java.lang.Boolean disableSessionTags)
        Parameters:
        disableSessionTags - Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.
        Returns:
        builder

      • externalId

        public PodIdentityAssociationState.Builder externalId​(@Nullable
                                                      com.pulumi.core.Output<java.lang.String> externalId)
        Parameters:
        externalId - The unique identifier for this association for a target IAM role. You put this value in the trust policy of the target role, in a Condition to match the sts.ExternalId.
        Returns:
        builder

      • externalId

        public PodIdentityAssociationState.Builder externalId​(java.lang.String externalId)
        Parameters:
        externalId - The unique identifier for this association for a target IAM role. You put this value in the trust policy of the target role, in a Condition to match the sts.ExternalId.
        Returns:
        builder

      • namespace

        public PodIdentityAssociationState.Builder namespace​(@Nullable
                                                     com.pulumi.core.Output<java.lang.String> namespace)
        Parameters:
        namespace - The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
        Returns:
        builder

      • namespace

        public PodIdentityAssociationState.Builder namespace​(java.lang.String namespace)
        Parameters:
        namespace - The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
        Returns:
        builder

      • policy

        public PodIdentityAssociationState.Builder policy​(@Nullable
                                                  com.pulumi.core.Output<java.lang.String> policy)
        Parameters:
        policy - An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.
        Returns:
        builder

      • policy

        public PodIdentityAssociationState.Builder policy​(java.lang.String policy)
        Parameters:
        policy - An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.
        Returns:
        builder

      • region

        public PodIdentityAssociationState.Builder region​(@Nullable
                                                  com.pulumi.core.Output<java.lang.String> region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • region

        public PodIdentityAssociationState.Builder region​(java.lang.String region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • roleArn

        public PodIdentityAssociationState.Builder roleArn​(@Nullable
                                                   com.pulumi.core.Output<java.lang.String> roleArn)
        Parameters:
        roleArn - ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
        Returns:
        builder

      • roleArn

        public PodIdentityAssociationState.Builder roleArn​(java.lang.String roleArn)
        Parameters:
        roleArn - ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
        Returns:
        builder

      • serviceAccount

        public PodIdentityAssociationState.Builder serviceAccount​(@Nullable
                                                          com.pulumi.core.Output<java.lang.String> serviceAccount)
        Parameters:
        serviceAccount - The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:
        Returns:
        builder

      • serviceAccount

        public PodIdentityAssociationState.Builder serviceAccount​(java.lang.String serviceAccount)
        Parameters:
        serviceAccount - The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:
        Returns:
        builder

      • tags

        public PodIdentityAssociationState.Builder tags​(@Nullable
                                                com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public PodIdentityAssociationState.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tagsAll

        public PodIdentityAssociationState.Builder tagsAll​(@Nullable
                                                   com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll)
        Parameters:
        tagsAll - A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • tagsAll

        public PodIdentityAssociationState.Builder tagsAll​(java.util.Map<java.lang.String,​java.lang.String> tagsAll)
        Parameters:
        tagsAll - A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • targetRoleArn

        public PodIdentityAssociationState.Builder targetRoleArn​(@Nullable
                                                         com.pulumi.core.Output<java.lang.String> targetRoleArn)
        Parameters:
        targetRoleArn - ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.
        Returns:
        builder

      • targetRoleArn

        public PodIdentityAssociationState.Builder targetRoleArn​(java.lang.String targetRoleArn)
        Parameters:
        targetRoleArn - ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.
        Returns:
        builder