Package com.pulumi.aws.eks.inputs

Class PodIdentityAssociationState

  • public final class PodIdentityAssociationState
extends com.pulumi.resources.ResourceArgs

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  PodIdentityAssociationState.Builder  

      • Nested classes/interfaces inherited from class com.pulumi.resources.InputArgs

        com.pulumi.resources.InputArgs.InputArgsInternal

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> associationArn()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> associationId()  
      static PodIdentityAssociationState.Builder builder()  
      static PodIdentityAssociationState.Builder builder​(PodIdentityAssociationState defaults)  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> clusterName()  
      java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> disableSessionTags()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> externalId()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> namespace()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> policy()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> roleArn()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> serviceAccount()  
      java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()  
      java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()  
      java.util.Optional<com.pulumi.core.Output<java.lang.String>> targetRoleArn()  

      • Methods inherited from class com.pulumi.resources.ResourceArgs

        validateMember

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Method Detail

      • associationArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> associationArn()
        Returns:
        ARN of the association.

      • associationId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> associationId()
        Returns:
        The ID of the association.

      • clusterName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> clusterName()
        Returns:
        The name of the cluster to create the association in.

      • disableSessionTags

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> disableSessionTags()
        Returns:
        Disable the tags that are automatically added to role session by Amazon EKS. Must be set to `true` when `policy` is specified.

      • externalId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> externalId()
        Returns:
        The unique identifier for this association for a target IAM role. You put this value in the trust policy of the target role, in a Condition to match the sts.ExternalId.

      • namespace

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> namespace()
        Returns:
        The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.

      • policy

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> policy()
        Returns:
        An IAM policy in JSON format (as an escaped string) that applies additional restrictions to this Pod Identity association beyond the IAM policies attached to the IAM role. The effective permissions are the intersection of the role's policies and this policy, allowing you to enforce least privilege across multiple associations that share the same role. Requires `disableSessionTags = true`.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • roleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> roleArn()
        Returns:
        ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.

      • serviceAccount

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> serviceAccount()
        Returns:
        The name of the Kubernetes service account inside the cluster to associate the IAM credentials with. The following arguments are optional:

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

      • targetRoleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> targetRoleArn()
        Returns:
        ARN of the IAM role to be chained to the the IAM role specified as `roleArn`.