Class: AWSCDK::EKS::CfnAddon::PodIdentityAssociationProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::EKS::CfnAddon::PodIdentityAssociationProperty

Defined in:

eks/cfn_addon.rb

Overview

Amazon EKS Pod Identity associations provide the ability to manage credentials for your applications, similar to the way that Amazon EC2 instance profiles provide credentials to Amazon EC2 instances.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-addon-podidentityassociation.html

Instance Attribute Summary

• #role_arn ⇒ String readonly

  The Amazon Resource Name (ARN) of the IAM role to associate with the service account.

• #service_account ⇒ String readonly

  The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(role_arn:, service_account:) ⇒ PodIdentityAssociationProperty constructor

  A new instance of PodIdentityAssociationProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(role_arn:, service_account:) ⇒ PodIdentityAssociationProperty

Returns a new instance of PodIdentityAssociationProperty.

Parameters:

• role_arn (String) —

  The Amazon Resource Name (ARN) of the IAM role to associate with the service account.

• service_account (String) —

  The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.

# File 'eks/cfn_addon.rb', line 671

def initialize(role_arn:, service_account:)
  @role_arn = role_arn
  Jsii::Type.check_type(@role_arn, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "roleArn")
  @service_account = service_account
  Jsii::Type.check_type(@service_account, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "serviceAccount")
end

Instance Attribute Details

#role_arn ⇒ String (readonly)

The Amazon Resource Name (ARN) of the IAM role to associate with the service account.

The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the Pods that use this service account.

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-addon-podidentityassociation.html#cfn-eks-addon-podidentityassociation-rolearn

# File 'eks/cfn_addon.rb', line 684

def role_arn
  @role_arn
end

#service_account ⇒ String (readonly)

The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-addon-podidentityassociation.html#cfn-eks-addon-podidentityassociation-serviceaccount

# File 'eks/cfn_addon.rb', line 689

def service_account
  @service_account
end

Class Method Details

.jsii_properties ⇒ Object

# File 'eks/cfn_addon.rb', line 691

def self.jsii_properties
  {
    :role_arn => "roleArn",
    :service_account => "serviceAccount",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'eks/cfn_addon.rb', line 698

def to_jsii
  result = {}
  result.merge!({
    "roleArn" => @role_arn,
    "serviceAccount" => @service_account,
  })
  result.compact
end