import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * An Anthos cluster running on AWS. * * For more information, see: * * [Multicloud overview](https://cloud.google.com/kubernetes-engine/multi-cloud/docs) * ## Example Usage * * ### Basic_aws_cluster * A basic example of a containeraws cluster * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const versions = gcp.container.getAwsVersions({ * project: "my-project-name", * location: "us-west1", * }); * const primary = new gcp.container.AwsCluster("primary", { * authorization: { * adminUsers: [{ * username: "my@service-account.com", * }], * adminGroups: [{ * group: "group@domain.com", * }], * }, * awsRegion: "my-aws-region", * controlPlane: { * awsServicesAuthentication: { * roleArn: "arn:aws:iam::012345678910:role/my--1p-dev-oneplatform", * roleSessionName: "my--1p-dev-session", * }, * configEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * databaseEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * iamInstanceProfile: "my--1p-dev-controlplane", * subnetIds: ["subnet-00000000000000000"], * version: versions.then(versions => versions.validVersions?.[0]), * instanceType: "t3.medium", * mainVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "GP3", * }, * proxyConfig: { * secretArn: "arn:aws:secretsmanager:us-west-2:126285863215:secret:proxy_config20210824150329476300000001-ABCDEF", * secretVersion: "12345678-ABCD-EFGH-IJKL-987654321098", * }, * rootVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "GP3", * }, * securityGroupIds: ["sg-00000000000000000"], * sshConfig: { * ec2KeyPair: "my--1p-dev-ssh", * }, * tags: { * owner: "my@service-account.com", * }, * }, * fleet: { * project: "my-project-number", * }, * location: "us-west1", * name: "name", * networking: { * podAddressCidrBlocks: ["10.2.0.0/16"], * serviceAddressCidrBlocks: ["10.1.0.0/16"], * vpcId: "vpc-00000000000000000", * }, * annotations: { * "label-one": "value-one", * }, * description: "A sample aws cluster", * project: "my-project-name", * }); * ``` * ### Basic_enum_aws_cluster * A basic example of a containeraws cluster with lowercase enums * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const versions = gcp.container.getAwsVersions({ * project: "my-project-name", * location: "us-west1", * }); * const primary = new gcp.container.AwsCluster("primary", { * authorization: { * adminUsers: [{ * username: "my@service-account.com", * }], * }, * awsRegion: "my-aws-region", * controlPlane: { * awsServicesAuthentication: { * roleArn: "arn:aws:iam::012345678910:role/my--1p-dev-oneplatform", * roleSessionName: "my--1p-dev-session", * }, * configEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * databaseEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * iamInstanceProfile: "my--1p-dev-controlplane", * subnetIds: ["subnet-00000000000000000"], * version: versions.then(versions => versions.validVersions?.[0]), * instanceType: "t3.medium", * mainVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "gp3", * }, * proxyConfig: { * secretArn: "arn:aws:secretsmanager:us-west-2:126285863215:secret:proxy_config20210824150329476300000001-ABCDEF", * secretVersion: "12345678-ABCD-EFGH-IJKL-987654321098", * }, * rootVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "gp3", * }, * securityGroupIds: ["sg-00000000000000000"], * sshConfig: { * ec2KeyPair: "my--1p-dev-ssh", * }, * tags: { * owner: "my@service-account.com", * }, * }, * fleet: { * project: "my-project-number", * }, * location: "us-west1", * name: "name", * networking: { * podAddressCidrBlocks: ["10.2.0.0/16"], * serviceAddressCidrBlocks: ["10.1.0.0/16"], * vpcId: "vpc-00000000000000000", * }, * annotations: { * "label-one": "value-one", * }, * description: "A sample aws cluster", * project: "my-project-name", * }); * ``` * ### Beta_basic_enum_aws_cluster * A basic example of a containeraws cluster with lowercase enums (beta) * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const versions = gcp.container.getAwsVersions({ * project: "my-project-name", * location: "us-west1", * }); * const primary = new gcp.container.AwsCluster("primary", { * authorization: { * adminUsers: [{ * username: "my@service-account.com", * }], * }, * awsRegion: "my-aws-region", * controlPlane: { * awsServicesAuthentication: { * roleArn: "arn:aws:iam::012345678910:role/my--1p-dev-oneplatform", * roleSessionName: "my--1p-dev-session", * }, * configEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * databaseEncryption: { * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * }, * iamInstanceProfile: "my--1p-dev-controlplane", * subnetIds: ["subnet-00000000000000000"], * version: versions.then(versions => versions.validVersions?.[0]), * instanceType: "t3.medium", * mainVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "gp3", * }, * proxyConfig: { * secretArn: "arn:aws:secretsmanager:us-west-2:126285863215:secret:proxy_config20210824150329476300000001-ABCDEF", * secretVersion: "12345678-ABCD-EFGH-IJKL-987654321098", * }, * rootVolume: { * iops: 3000, * kmsKeyArn: "arn:aws:kms:my-aws-region:012345678910:key/12345678-1234-1234-1234-123456789111", * sizeGib: 10, * volumeType: "gp3", * }, * securityGroupIds: ["sg-00000000000000000"], * sshConfig: { * ec2KeyPair: "my--1p-dev-ssh", * }, * tags: { * owner: "my@service-account.com", * }, * instancePlacement: { * tenancy: "dedicated", * }, * }, * fleet: { * project: "my-project-number", * }, * location: "us-west1", * name: "name", * networking: { * podAddressCidrBlocks: ["10.2.0.0/16"], * serviceAddressCidrBlocks: ["10.1.0.0/16"], * vpcId: "vpc-00000000000000000", * }, * annotations: { * "label-one": "value-one", * }, * description: "A sample aws cluster", * project: "my-project-name", * loggingConfig: { * componentConfig: { * enableComponents: [ * "system_components", * "workloads", * ], * }, * }, * }); * ``` * * ## Import * * Cluster can be imported using any of these accepted formats: * * * `projects/{{project}}/locations/{{location}}/awsClusters/{{name}}` * * * `{{project}}/{{location}}/{{name}}` * * * `{{location}}/{{name}}` * * When using the `pulumi import` command, Cluster can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:container/awsCluster:AwsCluster default projects/{{project}}/locations/{{location}}/awsClusters/{{name}} * ``` * * ```sh * $ pulumi import gcp:container/awsCluster:AwsCluster default {{project}}/{{location}}/{{name}} * ``` * * ```sh * $ pulumi import gcp:container/awsCluster:AwsCluster default {{location}}/{{name}} * ``` */ export declare class AwsCluster extends pulumi.CustomResource { /** * Get an existing AwsCluster resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: AwsClusterState, opts?: pulumi.CustomResourceOptions): AwsCluster; /** * Returns true if the given object is an instance of AwsCluster. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is AwsCluster; /** * Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of * all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), * separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with * alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. **Note**: This field is * non-authoritative, and will only manage the annotations present in your configuration. Please refer to the field * `effectiveAnnotations` for all of the annotations present on the resource. */ readonly annotations: pulumi.Output<{ [key: string]: string; } | undefined>; /** * Configuration related to the cluster RBAC settings. */ readonly authorization: pulumi.Output; /** * The AWS region where the cluster runs. Each Google Cloud region supports a subset of nearby AWS regions. You can call to list all supported AWS regions within a given Google Cloud region. */ readonly awsRegion: pulumi.Output; /** * Configuration options for the Binary Authorization feature. */ readonly binaryAuthorization: pulumi.Output; /** * Configuration related to the cluster control plane. */ readonly controlPlane: pulumi.Output; /** * Output only. The time at which this cluster was created. */ readonly createTime: pulumi.Output; /** * Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes. */ readonly description: pulumi.Output; readonly effectiveAnnotations: pulumi.Output<{ [key: string]: string; }>; /** * Output only. The endpoint of the cluster's API server. */ readonly endpoint: pulumi.Output; /** * Allows clients to perform consistent read-modify-writes through optimistic concurrency control. May be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. */ readonly etag: pulumi.Output; /** * Fleet configuration. */ readonly fleet: pulumi.Output; /** * The location for the resource */ readonly location: pulumi.Output; /** * Logging configuration. */ readonly loggingConfig: pulumi.Output; /** * The name of this resource. */ readonly name: pulumi.Output; /** * Cluster-wide networking configuration. */ readonly networking: pulumi.Output; /** * The project for the resource */ readonly project: pulumi.Output; /** * Output only. If set, there are currently changes in flight to the cluster. */ readonly reconciling: pulumi.Output; /** * Output only. The current state of the cluster. Possible values: STATE_UNSPECIFIED, PROVISIONING, RUNNING, RECONCILING, STOPPING, ERROR, DEGRADED */ readonly state: pulumi.Output; /** * Output only. A globally unique identifier for the cluster. */ readonly uid: pulumi.Output; /** * Output only. The time at which this cluster was last updated. */ readonly updateTime: pulumi.Output; /** * Output only. Workload Identity settings. */ readonly workloadIdentityConfigs: pulumi.Output; /** * Create a AwsCluster resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: AwsClusterArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering AwsCluster resources. */ export interface AwsClusterState { /** * Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of * all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), * separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with * alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. **Note**: This field is * non-authoritative, and will only manage the annotations present in your configuration. Please refer to the field * `effectiveAnnotations` for all of the annotations present on the resource. */ annotations?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Configuration related to the cluster RBAC settings. */ authorization?: pulumi.Input; /** * The AWS region where the cluster runs. Each Google Cloud region supports a subset of nearby AWS regions. You can call to list all supported AWS regions within a given Google Cloud region. */ awsRegion?: pulumi.Input; /** * Configuration options for the Binary Authorization feature. */ binaryAuthorization?: pulumi.Input; /** * Configuration related to the cluster control plane. */ controlPlane?: pulumi.Input; /** * Output only. The time at which this cluster was created. */ createTime?: pulumi.Input; /** * Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes. */ description?: pulumi.Input; effectiveAnnotations?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Output only. The endpoint of the cluster's API server. */ endpoint?: pulumi.Input; /** * Allows clients to perform consistent read-modify-writes through optimistic concurrency control. May be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. */ etag?: pulumi.Input; /** * Fleet configuration. */ fleet?: pulumi.Input; /** * The location for the resource */ location?: pulumi.Input; /** * Logging configuration. */ loggingConfig?: pulumi.Input; /** * The name of this resource. */ name?: pulumi.Input; /** * Cluster-wide networking configuration. */ networking?: pulumi.Input; /** * The project for the resource */ project?: pulumi.Input; /** * Output only. If set, there are currently changes in flight to the cluster. */ reconciling?: pulumi.Input; /** * Output only. The current state of the cluster. Possible values: STATE_UNSPECIFIED, PROVISIONING, RUNNING, RECONCILING, STOPPING, ERROR, DEGRADED */ state?: pulumi.Input; /** * Output only. A globally unique identifier for the cluster. */ uid?: pulumi.Input; /** * Output only. The time at which this cluster was last updated. */ updateTime?: pulumi.Input; /** * Output only. Workload Identity settings. */ workloadIdentityConfigs?: pulumi.Input[]>; } /** * The set of arguments for constructing a AwsCluster resource. */ export interface AwsClusterArgs { /** * Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of * all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), * separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with * alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. **Note**: This field is * non-authoritative, and will only manage the annotations present in your configuration. Please refer to the field * `effectiveAnnotations` for all of the annotations present on the resource. */ annotations?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Configuration related to the cluster RBAC settings. */ authorization: pulumi.Input; /** * The AWS region where the cluster runs. Each Google Cloud region supports a subset of nearby AWS regions. You can call to list all supported AWS regions within a given Google Cloud region. */ awsRegion: pulumi.Input; /** * Configuration options for the Binary Authorization feature. */ binaryAuthorization?: pulumi.Input; /** * Configuration related to the cluster control plane. */ controlPlane: pulumi.Input; /** * Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes. */ description?: pulumi.Input; /** * Fleet configuration. */ fleet: pulumi.Input; /** * The location for the resource */ location: pulumi.Input; /** * Logging configuration. */ loggingConfig?: pulumi.Input; /** * The name of this resource. */ name?: pulumi.Input; /** * Cluster-wide networking configuration. */ networking: pulumi.Input; /** * The project for the resource */ project?: pulumi.Input; }