Access Policy Association
Access Entry Policy Association for an EKS Cluster.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.eks.AccessPolicyAssociation("example", {
clusterName: exampleAwsEksCluster.name,
policyArn: "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
principalArn: exampleAwsIamUser.arn,
accessScope: {
type: "namespace",
namespaces: ["example-namespace"],
},
});
Content copied to clipboard
import pulumi
import pulumi_aws as aws
example = aws.eks.AccessPolicyAssociation("example",
cluster_name=example_aws_eks_cluster["name"],
policy_arn="arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
principal_arn=example_aws_iam_user["arn"],
access_scope={
"type": "namespace",
"namespaces": ["example-namespace"],
})
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.Eks.AccessPolicyAssociation("example", new()
{
ClusterName = exampleAwsEksCluster.Name,
PolicyArn = "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
PrincipalArn = exampleAwsIamUser.Arn,
AccessScope = new Aws.Eks.Inputs.AccessPolicyAssociationAccessScopeArgs
{
Type = "namespace",
Namespaces = new[]
{
"example-namespace",
},
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/eks"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := eks.NewAccessPolicyAssociation(ctx, "example", &eks.AccessPolicyAssociationArgs{
ClusterName: pulumi.Any(exampleAwsEksCluster.Name),
PolicyArn: pulumi.String("arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy"),
PrincipalArn: pulumi.Any(exampleAwsIamUser.Arn),
AccessScope: &eks.AccessPolicyAssociationAccessScopeArgs{
Type: pulumi.String("namespace"),
Namespaces: pulumi.StringArray{
pulumi.String("example-namespace"),
},
},
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.eks.AccessPolicyAssociation;
import com.pulumi.aws.eks.AccessPolicyAssociationArgs;
import com.pulumi.aws.eks.inputs.AccessPolicyAssociationAccessScopeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new AccessPolicyAssociation("example", AccessPolicyAssociationArgs.builder()
.clusterName(exampleAwsEksCluster.name())
.policyArn("arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy")
.principalArn(exampleAwsIamUser.arn())
.accessScope(AccessPolicyAssociationAccessScopeArgs.builder()
.type("namespace")
.namespaces("example-namespace")
.build())
.build());
}
}
Content copied to clipboard
resources:
example:
type: aws:eks:AccessPolicyAssociation
properties:
clusterName: ${exampleAwsEksCluster.name}
policyArn: arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy
principalArn: ${exampleAwsIamUser.arn}
accessScope:
type: namespace
namespaces:
- example-namespace
Content copied to clipboard
Import
Using pulumi import
, import EKS access entry using the cluster_name
principal_arn
and policy_arn
separated by an octothorp (#
). For example:
$ pulumi import aws:eks/accessPolicyAssociation:AccessPolicyAssociation my_eks_access_entry my_cluster_name#my_principal_arn#my_policy_arn
Content copied to clipboard
Properties
Link copied to clipboard
The configuration block to determine the scope of the access. See access_scope
Block below.
Link copied to clipboard
Date and time in RFC3339 format that the policy was associated.
Link copied to clipboard
Name of the EKS Cluster.
Link copied to clipboard
Date and time in RFC3339 format that the policy was updated.
Link copied to clipboard
The IAM Principal ARN which requires Authentication access to the EKS cluster.
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard