Access Policy Association Args
data class AccessPolicyAssociationArgs(val accessScope: Output<AccessPolicyAssociationAccessScopeArgs>? = null, val clusterName: Output<String>? = null, val policyArn: Output<String>? = null, val principalArn: Output<String>? = null) : ConvertibleToJava<AccessPolicyAssociationArgs>
Access Entry Policy Association for an EKS Cluster.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.eks.AccessPolicyAssociation("example", {
clusterName: exampleAwsEksCluster.name,
policyArn: "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
principalArn: exampleAwsIamUser.arn,
accessScope: {
type: "namespace",
namespaces: ["example-namespace"],
},
});
Content copied to clipboard
import pulumi
import pulumi_aws as aws
example = aws.eks.AccessPolicyAssociation("example",
cluster_name=example_aws_eks_cluster["name"],
policy_arn="arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
principal_arn=example_aws_iam_user["arn"],
access_scope={
"type": "namespace",
"namespaces": ["example-namespace"],
})
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.Eks.AccessPolicyAssociation("example", new()
{
ClusterName = exampleAwsEksCluster.Name,
PolicyArn = "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
PrincipalArn = exampleAwsIamUser.Arn,
AccessScope = new Aws.Eks.Inputs.AccessPolicyAssociationAccessScopeArgs
{
Type = "namespace",
Namespaces = new[]
{
"example-namespace",
},
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/eks"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := eks.NewAccessPolicyAssociation(ctx, "example", &eks.AccessPolicyAssociationArgs{
ClusterName: pulumi.Any(exampleAwsEksCluster.Name),
PolicyArn: pulumi.String("arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy"),
PrincipalArn: pulumi.Any(exampleAwsIamUser.Arn),
AccessScope: &eks.AccessPolicyAssociationAccessScopeArgs{
Type: pulumi.String("namespace"),
Namespaces: pulumi.StringArray{
pulumi.String("example-namespace"),
},
},
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.eks.AccessPolicyAssociation;
import com.pulumi.aws.eks.AccessPolicyAssociationArgs;
import com.pulumi.aws.eks.inputs.AccessPolicyAssociationAccessScopeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new AccessPolicyAssociation("example", AccessPolicyAssociationArgs.builder()
.clusterName(exampleAwsEksCluster.name())
.policyArn("arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy")
.principalArn(exampleAwsIamUser.arn())
.accessScope(AccessPolicyAssociationAccessScopeArgs.builder()
.type("namespace")
.namespaces("example-namespace")
.build())
.build());
}
}
Content copied to clipboard
resources:
example:
type: aws:eks:AccessPolicyAssociation
properties:
clusterName: ${exampleAwsEksCluster.name}
policyArn: arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy
principalArn: ${exampleAwsIamUser.arn}
accessScope:
type: namespace
namespaces:
- example-namespace
Content copied to clipboard
Import
Using pulumi import
, import EKS access entry using the cluster_name
principal_arn
and policy_arn
separated by an octothorp (#
). For example:
$ pulumi import aws:eks/accessPolicyAssociation:AccessPolicyAssociation my_eks_access_entry my_cluster_name#my_principal_arn#my_policy_arn
Content copied to clipboard
Constructors
Link copied to clipboard
constructor(accessScope: Output<AccessPolicyAssociationAccessScopeArgs>? = null, clusterName: Output<String>? = null, policyArn: Output<String>? = null, principalArn: Output<String>? = null)