aws-sdk-eks 1.172.0 → 1.174.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -474,6 +474,93 @@ module Aws::EKS
474
474
 
475
475
  # @!group API Operations
476
476
 
477
+ # Activates a successor certificate authority (CA) as the signing
478
+ # certificate authority for your cluster, completing a CA rotation.
479
+ #
480
+ # When you activate a successor CA, Amazon EKS promotes it to be the
481
+ # cluster's signer (its `signingStatus` becomes `IN_USE`) and the
482
+ # outgoing CA is retired (`NOT_USED`). The outgoing CA remains in the
483
+ # cluster's trust bundle but no longer signs certificates. The
484
+ # successor CA you activate must already be present on the cluster and
485
+ # fully distributed (its `distributionStatus` must be `COMPLETE`). This
486
+ # is an asynchronous operation that returns an `update` object you can
487
+ # track with [ `DescribeUpdate` ][1].
488
+ #
489
+ # Before you activate the successor CA, make sure the worker nodes you
490
+ # manage and your external clients have been updated to trust it, so
491
+ # they maintain connectivity to the API server after activation. For a
492
+ # limited period after activation, CA rollback is available to revert to
493
+ # the outgoing CA if needed. If you don't activate the successor CA
494
+ # yourself, Amazon EKS activates it automatically as the expiration
495
+ # deadline approaches. For more information, see [Rotate the Amazon EKS
496
+ # cluster certificate authority][2] in the *Amazon EKS User Guide*.
497
+ #
498
+ #
499
+ #
500
+ # [1]: https://docs.aws.amazon.com/eks/latest/APIReference/API_DescribeUpdate.html
501
+ # [2]: https://docs.aws.amazon.com/eks/latest/userguide/certificate-authority-rotation.html
502
+ #
503
+ # @option params [required, String] :cluster_name
504
+ # The name of your cluster.
505
+ #
506
+ # @option params [required, String] :certificate_authority_id
507
+ # The ID of the certificate authority to activate as the cluster's
508
+ # signing certificate authority. This certificate authority must already
509
+ # exist on the cluster and have a `distributionStatus` of `COMPLETE`.
510
+ #
511
+ # @option params [String] :client_request_token
512
+ # A unique, case-sensitive identifier that you provide to ensure the
513
+ # idempotency of the request.
514
+ #
515
+ # **A suitable default value is auto-generated.** You should normally
516
+ # not need to pass this option.**
517
+ #
518
+ # @return [Types::ActivateCertificateAuthorityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
519
+ #
520
+ # * {Types::ActivateCertificateAuthorityResponse#update #update} => Types::Update
521
+ # * {Types::ActivateCertificateAuthorityResponse#certificate_authority #certificate_authority} => Types::CertificateAuthoritySummary
522
+ #
523
+ # @example Request syntax with placeholder values
524
+ #
525
+ # resp = client.activate_certificate_authority({
526
+ # cluster_name: "String", # required
527
+ # certificate_authority_id: "String", # required
528
+ # client_request_token: "String",
529
+ # })
530
+ #
531
+ # @example Response structure
532
+ #
533
+ # resp.update.id #=> String
534
+ # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
535
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
536
+ # resp.update.params #=> Array
537
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
538
+ # resp.update.params[0].value #=> String
539
+ # resp.update.created_at #=> Time
540
+ # resp.update.errors #=> Array
541
+ # resp.update.errors[0].error_code #=> String, one of "SubnetNotFound", "SecurityGroupNotFound", "EniLimitReached", "IpNotAvailable", "AccessDenied", "OperationNotPermitted", "VpcIdNotFound", "Unknown", "NodeCreationFailure", "PodEvictionFailure", "InsufficientFreeAddresses", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
542
+ # resp.update.errors[0].error_message #=> String
543
+ # resp.update.errors[0].resource_ids #=> Array
544
+ # resp.update.errors[0].resource_ids[0] #=> String
545
+ # resp.update.cancellation.status #=> String, one of "InProgress", "Failed", "Successful"
546
+ # resp.update.cancellation.reason #=> String
547
+ # resp.certificate_authority.id #=> String
548
+ # resp.certificate_authority.created_at #=> Time
549
+ # resp.certificate_authority.created_by #=> String, one of "EKS", "CUSTOMER"
550
+ # resp.certificate_authority.activated_at #=> Time
551
+ # resp.certificate_authority.activated_by #=> String, one of "EKS", "CUSTOMER"
552
+ # resp.certificate_authority.signing_status #=> String, one of "NOT_USED", "ACTIVATING", "IN_USE"
553
+ # resp.certificate_authority.distribution_status #=> String, one of "IN_PROGRESS", "COMPLETE", "FAILED", "DELETING"
554
+ #
555
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ActivateCertificateAuthority AWS API Documentation
556
+ #
557
+ # @overload activate_certificate_authority(params = {})
558
+ # @param [Hash] params ({})
559
+ def activate_certificate_authority(params = {}, options = {})
560
+ req = build_request(:activate_certificate_authority, params)
561
+ req.send_request(options)
562
+ end
563
+
477
564
  # Associates an access policy and its scope to an access entry. For more
478
565
  # information about associating access policies, see [Associating and
479
566
  # disassociating access policies to and from access entries][1] in the
@@ -579,9 +666,9 @@ module Aws::EKS
579
666
  #
580
667
  # resp.update.id #=> String
581
668
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
582
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
669
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
583
670
  # resp.update.params #=> Array
584
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
671
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
585
672
  # resp.update.params[0].value #=> String
586
673
  # resp.update.created_at #=> Time
587
674
  # resp.update.errors #=> Array
@@ -665,9 +752,9 @@ module Aws::EKS
665
752
  #
666
753
  # resp.update.id #=> String
667
754
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
668
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
755
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
669
756
  # resp.update.params #=> Array
670
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
757
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
671
758
  # resp.update.params[0].value #=> String
672
759
  # resp.update.created_at #=> Time
673
760
  # resp.update.errors #=> Array
@@ -728,9 +815,9 @@ module Aws::EKS
728
815
  #
729
816
  # resp.update.id #=> String
730
817
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
731
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
818
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
732
819
  # resp.update.params #=> Array
733
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
820
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
734
821
  # resp.update.params[0].value #=> String
735
822
  # resp.update.created_at #=> Time
736
823
  # resp.update.errors #=> Array
@@ -1266,6 +1353,94 @@ module Aws::EKS
1266
1353
  req.send_request(options)
1267
1354
  end
1268
1355
 
1356
+ # Appends a successor certificate authority (CA) to your cluster,
1357
+ # beginning the CA rotation process.
1358
+ #
1359
+ # A cluster certificate authority is the root of trust for your
1360
+ # cluster's control plane. It signs the certificates that secure
1361
+ # communication between the Kubernetes API server and its clients, and
1362
+ # its public certificate is distributed to your cluster's trust bundle
1363
+ # so that worker nodes and clients can verify the API server's
1364
+ # identity. Each cluster can have at most two certificate authorities at
1365
+ # a time: the outgoing CA that's currently signing (its `signingStatus`
1366
+ # is `IN_USE`) and one successor CA (`signingStatus` of `NOT_USED`) that
1367
+ # you can later activate to complete the rotation.
1368
+ #
1369
+ # Appending a successor CA adds its public certificate to the cluster's
1370
+ # trust bundle so that the cluster trusts both CAs simultaneously (the
1371
+ # dual trust period), but it doesn't begin signing certificates. Amazon
1372
+ # EKS then distributes the successor CA to the Amazon Web Services
1373
+ # managed components in your cluster; you can track this through the
1374
+ # CA's `distributionStatus`. The successor CA can't be activated until
1375
+ # its `distributionStatus` is `COMPLETE`. To activate it as the
1376
+ # cluster's signer, use [ `ActivateCertificateAuthority` ][1]. This is
1377
+ # an asynchronous operation that returns an `update` object. If you
1378
+ # don't append a successor CA yourself, Amazon EKS appends one
1379
+ # automatically before the outgoing CA approaches expiration.
1380
+ #
1381
+ # For more information, see [Rotate the Amazon EKS cluster certificate
1382
+ # authority][2] in the *Amazon EKS User Guide*.
1383
+ #
1384
+ #
1385
+ #
1386
+ # [1]: https://docs.aws.amazon.com/eks/latest/APIReference/API_ActivateCertificateAuthority.html
1387
+ # [2]: https://docs.aws.amazon.com/eks/latest/userguide/certificate-authority-rotation.html
1388
+ #
1389
+ # @option params [required, String] :cluster_name
1390
+ # The name of your cluster.
1391
+ #
1392
+ # @option params [String] :client_request_token
1393
+ # A unique, case-sensitive identifier that you provide to ensure the
1394
+ # idempotency of the request.
1395
+ #
1396
+ # **A suitable default value is auto-generated.** You should normally
1397
+ # not need to pass this option.**
1398
+ #
1399
+ # @return [Types::CreateCertificateAuthorityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1400
+ #
1401
+ # * {Types::CreateCertificateAuthorityResponse#update #update} => Types::Update
1402
+ # * {Types::CreateCertificateAuthorityResponse#certificate_authority #certificate_authority} => Types::CertificateAuthoritySummary
1403
+ #
1404
+ # @example Request syntax with placeholder values
1405
+ #
1406
+ # resp = client.create_certificate_authority({
1407
+ # cluster_name: "String", # required
1408
+ # client_request_token: "String",
1409
+ # })
1410
+ #
1411
+ # @example Response structure
1412
+ #
1413
+ # resp.update.id #=> String
1414
+ # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
1415
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
1416
+ # resp.update.params #=> Array
1417
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
1418
+ # resp.update.params[0].value #=> String
1419
+ # resp.update.created_at #=> Time
1420
+ # resp.update.errors #=> Array
1421
+ # resp.update.errors[0].error_code #=> String, one of "SubnetNotFound", "SecurityGroupNotFound", "EniLimitReached", "IpNotAvailable", "AccessDenied", "OperationNotPermitted", "VpcIdNotFound", "Unknown", "NodeCreationFailure", "PodEvictionFailure", "InsufficientFreeAddresses", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
1422
+ # resp.update.errors[0].error_message #=> String
1423
+ # resp.update.errors[0].resource_ids #=> Array
1424
+ # resp.update.errors[0].resource_ids[0] #=> String
1425
+ # resp.update.cancellation.status #=> String, one of "InProgress", "Failed", "Successful"
1426
+ # resp.update.cancellation.reason #=> String
1427
+ # resp.certificate_authority.id #=> String
1428
+ # resp.certificate_authority.created_at #=> Time
1429
+ # resp.certificate_authority.created_by #=> String, one of "EKS", "CUSTOMER"
1430
+ # resp.certificate_authority.activated_at #=> Time
1431
+ # resp.certificate_authority.activated_by #=> String, one of "EKS", "CUSTOMER"
1432
+ # resp.certificate_authority.signing_status #=> String, one of "NOT_USED", "ACTIVATING", "IN_USE"
1433
+ # resp.certificate_authority.distribution_status #=> String, one of "IN_PROGRESS", "COMPLETE", "FAILED", "DELETING"
1434
+ #
1435
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreateCertificateAuthority AWS API Documentation
1436
+ #
1437
+ # @overload create_certificate_authority(params = {})
1438
+ # @param [Hash] params ({})
1439
+ def create_certificate_authority(params = {}, options = {})
1440
+ req = build_request(:create_certificate_authority, params)
1441
+ req.send_request(options)
1442
+ end
1443
+
1269
1444
  # Creates an Amazon EKS control plane.
1270
1445
  #
1271
1446
  # The Amazon EKS control plane consists of control plane instances that
@@ -1480,6 +1655,15 @@ module Aws::EKS
1480
1655
  # The control plane scaling tier configuration. For more information,
1481
1656
  # see EKS Provisioned Control Plane in the Amazon EKS User Guide.
1482
1657
  #
1658
+ # @option params [Types::KubeApiServerConfigRequest] :kube_api_server_config
1659
+ # The Kubernetes API server configuration for the new cluster.
1660
+ #
1661
+ # @option params [Types::KubeSchedulerConfigRequest] :kube_scheduler_config
1662
+ # The Kubernetes scheduler configuration for the new cluster.
1663
+ #
1664
+ # @option params [Types::KubeControllerManagerConfigRequest] :kube_controller_manager_config
1665
+ # The Kubernetes controller manager configuration for the new cluster.
1666
+ #
1483
1667
  # @return [Types::CreateClusterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1484
1668
  #
1485
1669
  # * {Types::CreateClusterResponse#cluster #cluster} => Types::Cluster
@@ -1599,6 +1783,31 @@ module Aws::EKS
1599
1783
  # control_plane_scaling_config: {
1600
1784
  # tier: "standard", # accepts standard, tier-xl, tier-2xl, tier-4xl, tier-8xl
1601
1785
  # },
1786
+ # kube_api_server_config: {
1787
+ # event_ttl: "String",
1788
+ # service_node_port_range: {
1789
+ # min_port: 1,
1790
+ # max_port: 1,
1791
+ # },
1792
+ # },
1793
+ # kube_scheduler_config: {
1794
+ # node_resources_fit: {
1795
+ # scoring_strategy: {
1796
+ # type: "LeastAllocated", # accepts LeastAllocated, MostAllocated
1797
+ # resources: [
1798
+ # {
1799
+ # name: "ResourceWeightName",
1800
+ # weight: 1,
1801
+ # },
1802
+ # ],
1803
+ # },
1804
+ # },
1805
+ # },
1806
+ # kube_controller_manager_config: {
1807
+ # horizontal_pod_autoscaler_controller_config: {
1808
+ # horizontal_pod_autoscaler_sync_period: "String",
1809
+ # },
1810
+ # },
1602
1811
  # })
1603
1812
  #
1604
1813
  # @example Response structure
@@ -1631,6 +1840,8 @@ module Aws::EKS
1631
1840
  # resp.cluster.identity.oidc.issuer #=> String
1632
1841
  # resp.cluster.status #=> String, one of "CREATING", "ACTIVE", "DELETING", "FAILED", "UPDATING", "PENDING"
1633
1842
  # resp.cluster.certificate_authority.data #=> String
1843
+ # resp.cluster.certificate_authority.active.id #=> String
1844
+ # resp.cluster.certificate_authority.active.activated_by #=> String, one of "EKS", "CUSTOMER"
1634
1845
  # resp.cluster.client_request_token #=> String
1635
1846
  # resp.cluster.platform_version #=> String
1636
1847
  # resp.cluster.tags #=> Hash
@@ -1674,6 +1885,14 @@ module Aws::EKS
1674
1885
  # resp.cluster.storage_config.block_storage.enabled #=> Boolean
1675
1886
  # resp.cluster.deletion_protection #=> Boolean
1676
1887
  # resp.cluster.control_plane_scaling_config.tier #=> String, one of "standard", "tier-xl", "tier-2xl", "tier-4xl", "tier-8xl"
1888
+ # resp.cluster.kube_api_server_config.event_ttl #=> String
1889
+ # resp.cluster.kube_api_server_config.service_node_port_range.min_port #=> Integer
1890
+ # resp.cluster.kube_api_server_config.service_node_port_range.max_port #=> Integer
1891
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.type #=> String, one of "LeastAllocated", "MostAllocated"
1892
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources #=> Array
1893
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].name #=> String
1894
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].weight #=> Integer
1895
+ # resp.cluster.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period #=> String
1677
1896
  #
1678
1897
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreateCluster AWS API Documentation
1679
1898
  #
@@ -2656,6 +2875,84 @@ module Aws::EKS
2656
2875
  req.send_request(options)
2657
2876
  end
2658
2877
 
2878
+ # Deletes a certificate authority (CA) from your cluster.
2879
+ #
2880
+ # Deleting a certificate authority removes its public certificate from
2881
+ # the cluster's trust bundle. You can't delete the certificate
2882
+ # authority that's currently signing certificates for the cluster (its
2883
+ # `signingStatus` is `IN_USE`) — to remove the outgoing CA, first
2884
+ # activate the successor CA with [ `ActivateCertificateAuthority` ][1].
2885
+ # Amazon EKS also protects a successor CA from deletion in certain cases
2886
+ # to keep a valid rotation path — for example, a successor that Amazon
2887
+ # EKS appended can't be deleted while it's the only successor on the
2888
+ # cluster. This is an asynchronous operation that returns an `update`
2889
+ # object.
2890
+ #
2891
+ #
2892
+ #
2893
+ # [1]: https://docs.aws.amazon.com/eks/latest/APIReference/API_ActivateCertificateAuthority.html
2894
+ #
2895
+ # @option params [required, String] :cluster_name
2896
+ # The name of your cluster.
2897
+ #
2898
+ # @option params [required, String] :certificate_authority_id
2899
+ # The ID of the certificate authority to delete. You can't delete the
2900
+ # certificate authority that's currently signing certificates for the
2901
+ # cluster.
2902
+ #
2903
+ # @option params [String] :client_request_token
2904
+ # A unique, case-sensitive identifier that you provide to ensure the
2905
+ # idempotency of the request.
2906
+ #
2907
+ # **A suitable default value is auto-generated.** You should normally
2908
+ # not need to pass this option.**
2909
+ #
2910
+ # @return [Types::DeleteCertificateAuthorityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2911
+ #
2912
+ # * {Types::DeleteCertificateAuthorityResponse#update #update} => Types::Update
2913
+ # * {Types::DeleteCertificateAuthorityResponse#certificate_authority #certificate_authority} => Types::CertificateAuthoritySummary
2914
+ #
2915
+ # @example Request syntax with placeholder values
2916
+ #
2917
+ # resp = client.delete_certificate_authority({
2918
+ # cluster_name: "String", # required
2919
+ # certificate_authority_id: "String", # required
2920
+ # client_request_token: "String",
2921
+ # })
2922
+ #
2923
+ # @example Response structure
2924
+ #
2925
+ # resp.update.id #=> String
2926
+ # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
2927
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
2928
+ # resp.update.params #=> Array
2929
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
2930
+ # resp.update.params[0].value #=> String
2931
+ # resp.update.created_at #=> Time
2932
+ # resp.update.errors #=> Array
2933
+ # resp.update.errors[0].error_code #=> String, one of "SubnetNotFound", "SecurityGroupNotFound", "EniLimitReached", "IpNotAvailable", "AccessDenied", "OperationNotPermitted", "VpcIdNotFound", "Unknown", "NodeCreationFailure", "PodEvictionFailure", "InsufficientFreeAddresses", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
2934
+ # resp.update.errors[0].error_message #=> String
2935
+ # resp.update.errors[0].resource_ids #=> Array
2936
+ # resp.update.errors[0].resource_ids[0] #=> String
2937
+ # resp.update.cancellation.status #=> String, one of "InProgress", "Failed", "Successful"
2938
+ # resp.update.cancellation.reason #=> String
2939
+ # resp.certificate_authority.id #=> String
2940
+ # resp.certificate_authority.created_at #=> Time
2941
+ # resp.certificate_authority.created_by #=> String, one of "EKS", "CUSTOMER"
2942
+ # resp.certificate_authority.activated_at #=> Time
2943
+ # resp.certificate_authority.activated_by #=> String, one of "EKS", "CUSTOMER"
2944
+ # resp.certificate_authority.signing_status #=> String, one of "NOT_USED", "ACTIVATING", "IN_USE"
2945
+ # resp.certificate_authority.distribution_status #=> String, one of "IN_PROGRESS", "COMPLETE", "FAILED", "DELETING"
2946
+ #
2947
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeleteCertificateAuthority AWS API Documentation
2948
+ #
2949
+ # @overload delete_certificate_authority(params = {})
2950
+ # @param [Hash] params ({})
2951
+ def delete_certificate_authority(params = {}, options = {})
2952
+ req = build_request(:delete_certificate_authority, params)
2953
+ req.send_request(options)
2954
+ end
2955
+
2659
2956
  # Deletes an Amazon EKS cluster control plane.
2660
2957
  #
2661
2958
  # If you have active services and ingress resources in your cluster that
@@ -2729,6 +3026,8 @@ module Aws::EKS
2729
3026
  # resp.cluster.identity.oidc.issuer #=> String
2730
3027
  # resp.cluster.status #=> String, one of "CREATING", "ACTIVE", "DELETING", "FAILED", "UPDATING", "PENDING"
2731
3028
  # resp.cluster.certificate_authority.data #=> String
3029
+ # resp.cluster.certificate_authority.active.id #=> String
3030
+ # resp.cluster.certificate_authority.active.activated_by #=> String, one of "EKS", "CUSTOMER"
2732
3031
  # resp.cluster.client_request_token #=> String
2733
3032
  # resp.cluster.platform_version #=> String
2734
3033
  # resp.cluster.tags #=> Hash
@@ -2772,6 +3071,14 @@ module Aws::EKS
2772
3071
  # resp.cluster.storage_config.block_storage.enabled #=> Boolean
2773
3072
  # resp.cluster.deletion_protection #=> Boolean
2774
3073
  # resp.cluster.control_plane_scaling_config.tier #=> String, one of "standard", "tier-xl", "tier-2xl", "tier-4xl", "tier-8xl"
3074
+ # resp.cluster.kube_api_server_config.event_ttl #=> String
3075
+ # resp.cluster.kube_api_server_config.service_node_port_range.min_port #=> Integer
3076
+ # resp.cluster.kube_api_server_config.service_node_port_range.max_port #=> Integer
3077
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.type #=> String, one of "LeastAllocated", "MostAllocated"
3078
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources #=> Array
3079
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].name #=> String
3080
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].weight #=> Integer
3081
+ # resp.cluster.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period #=> String
2775
3082
  #
2776
3083
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeleteCluster AWS API Documentation
2777
3084
  #
@@ -3085,6 +3392,8 @@ module Aws::EKS
3085
3392
  # resp.cluster.identity.oidc.issuer #=> String
3086
3393
  # resp.cluster.status #=> String, one of "CREATING", "ACTIVE", "DELETING", "FAILED", "UPDATING", "PENDING"
3087
3394
  # resp.cluster.certificate_authority.data #=> String
3395
+ # resp.cluster.certificate_authority.active.id #=> String
3396
+ # resp.cluster.certificate_authority.active.activated_by #=> String, one of "EKS", "CUSTOMER"
3088
3397
  # resp.cluster.client_request_token #=> String
3089
3398
  # resp.cluster.platform_version #=> String
3090
3399
  # resp.cluster.tags #=> Hash
@@ -3128,6 +3437,14 @@ module Aws::EKS
3128
3437
  # resp.cluster.storage_config.block_storage.enabled #=> Boolean
3129
3438
  # resp.cluster.deletion_protection #=> Boolean
3130
3439
  # resp.cluster.control_plane_scaling_config.tier #=> String, one of "standard", "tier-xl", "tier-2xl", "tier-4xl", "tier-8xl"
3440
+ # resp.cluster.kube_api_server_config.event_ttl #=> String
3441
+ # resp.cluster.kube_api_server_config.service_node_port_range.min_port #=> Integer
3442
+ # resp.cluster.kube_api_server_config.service_node_port_range.max_port #=> Integer
3443
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.type #=> String, one of "LeastAllocated", "MostAllocated"
3444
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources #=> Array
3445
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].name #=> String
3446
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].weight #=> Integer
3447
+ # resp.cluster.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period #=> String
3131
3448
  #
3132
3449
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeregisterCluster AWS API Documentation
3133
3450
  #
@@ -3458,6 +3775,53 @@ module Aws::EKS
3458
3775
  req.send_request(options)
3459
3776
  end
3460
3777
 
3778
+ # Returns detailed information about a certificate authority (CA) in
3779
+ # your cluster, including its validity period, signing and distribution
3780
+ # status, provenance, scheduled auto-activation events, and public
3781
+ # certificate data.
3782
+ #
3783
+ # @option params [required, String] :cluster_name
3784
+ # The name of your cluster.
3785
+ #
3786
+ # @option params [required, String] :certificate_authority_id
3787
+ # The ID of the certificate authority to describe.
3788
+ #
3789
+ # @return [Types::DescribeCertificateAuthorityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
3790
+ #
3791
+ # * {Types::DescribeCertificateAuthorityResponse#certificate_authority #certificate_authority} => Types::CertificateAuthority
3792
+ #
3793
+ # @example Request syntax with placeholder values
3794
+ #
3795
+ # resp = client.describe_certificate_authority({
3796
+ # cluster_name: "String", # required
3797
+ # certificate_authority_id: "String", # required
3798
+ # })
3799
+ #
3800
+ # @example Response structure
3801
+ #
3802
+ # resp.certificate_authority.id #=> String
3803
+ # resp.certificate_authority.created_at #=> Time
3804
+ # resp.certificate_authority.created_by #=> String, one of "EKS", "CUSTOMER"
3805
+ # resp.certificate_authority.activated_at #=> Time
3806
+ # resp.certificate_authority.activated_by #=> String, one of "EKS", "CUSTOMER"
3807
+ # resp.certificate_authority.signing_status #=> String, one of "NOT_USED", "ACTIVATING", "IN_USE"
3808
+ # resp.certificate_authority.distribution_status #=> String, one of "IN_PROGRESS", "COMPLETE", "FAILED", "DELETING"
3809
+ # resp.certificate_authority.validity.not_before #=> Time
3810
+ # resp.certificate_authority.validity.not_after #=> Time
3811
+ # resp.certificate_authority.scheduled_events.first_auto_activation #=> Time
3812
+ # resp.certificate_authority.scheduled_events.final_auto_activation #=> Time
3813
+ # resp.certificate_authority.rollback_available #=> Boolean
3814
+ # resp.certificate_authority.data #=> String
3815
+ #
3816
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribeCertificateAuthority AWS API Documentation
3817
+ #
3818
+ # @overload describe_certificate_authority(params = {})
3819
+ # @param [Hash] params ({})
3820
+ def describe_certificate_authority(params = {}, options = {})
3821
+ req = build_request(:describe_certificate_authority, params)
3822
+ req.send_request(options)
3823
+ end
3824
+
3461
3825
  # Describes an Amazon EKS cluster.
3462
3826
  #
3463
3827
  # The API server endpoint and certificate authority data returned by
@@ -3552,6 +3916,8 @@ module Aws::EKS
3552
3916
  # resp.cluster.identity.oidc.issuer #=> String
3553
3917
  # resp.cluster.status #=> String, one of "CREATING", "ACTIVE", "DELETING", "FAILED", "UPDATING", "PENDING"
3554
3918
  # resp.cluster.certificate_authority.data #=> String
3919
+ # resp.cluster.certificate_authority.active.id #=> String
3920
+ # resp.cluster.certificate_authority.active.activated_by #=> String, one of "EKS", "CUSTOMER"
3555
3921
  # resp.cluster.client_request_token #=> String
3556
3922
  # resp.cluster.platform_version #=> String
3557
3923
  # resp.cluster.tags #=> Hash
@@ -3595,6 +3961,14 @@ module Aws::EKS
3595
3961
  # resp.cluster.storage_config.block_storage.enabled #=> Boolean
3596
3962
  # resp.cluster.deletion_protection #=> Boolean
3597
3963
  # resp.cluster.control_plane_scaling_config.tier #=> String, one of "standard", "tier-xl", "tier-2xl", "tier-4xl", "tier-8xl"
3964
+ # resp.cluster.kube_api_server_config.event_ttl #=> String
3965
+ # resp.cluster.kube_api_server_config.service_node_port_range.min_port #=> Integer
3966
+ # resp.cluster.kube_api_server_config.service_node_port_range.max_port #=> Integer
3967
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.type #=> String, one of "LeastAllocated", "MostAllocated"
3968
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources #=> Array
3969
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].name #=> String
3970
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].weight #=> Integer
3971
+ # resp.cluster.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period #=> String
3598
3972
  #
3599
3973
  #
3600
3974
  # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -3674,6 +4048,55 @@ module Aws::EKS
3674
4048
  # resp.cluster_versions[0].status #=> String, one of "unsupported", "standard-support", "extended-support"
3675
4049
  # resp.cluster_versions[0].version_status #=> String, one of "UNSUPPORTED", "STANDARD_SUPPORT", "EXTENDED_SUPPORT"
3676
4050
  # resp.cluster_versions[0].kubernetes_patch_version #=> String
4051
+ # resp.cluster_versions[0].control_plane_scaling_tiers #=> Array
4052
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].tier_name #=> String
4053
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].api_request_concurrency #=> Integer
4054
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].pod_scheduling_rate_per_second #=> Integer
4055
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].cluster_database_size_gb #=> Integer
4056
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.event_ttl.default_value #=> String
4057
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.event_ttl.constraints.min #=> String
4058
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.event_ttl.constraints.max #=> String
4059
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.default_value.min_port #=> Integer
4060
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.default_value.max_port #=> Integer
4061
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.constraints.min_port.min #=> Integer
4062
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.constraints.min_port.max #=> Integer
4063
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.constraints.max_port.min #=> Integer
4064
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_api_server_config.service_node_port_range.constraints.max_port.max #=> Integer
4065
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.type #=> String, one of "LeastAllocated", "MostAllocated"
4066
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources #=> Array
4067
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources[0].name #=> String
4068
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources[0].weight #=> Integer
4069
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.scoring_strategy.allowed_values #=> Array
4070
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.scoring_strategy.allowed_values[0] #=> String
4071
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.name.allowed_values #=> Array
4072
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.name.allowed_values[0] #=> String
4073
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.weight.min #=> Integer
4074
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.weight.max #=> Integer
4075
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.default_value #=> String
4076
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.constraints.min #=> String
4077
+ # resp.cluster_versions[0].control_plane_scaling_tiers[0].control_plane_component_config_overrides.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.constraints.max #=> String
4078
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.event_ttl.default_value #=> String
4079
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.event_ttl.constraints.min #=> String
4080
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.event_ttl.constraints.max #=> String
4081
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.default_value.min_port #=> Integer
4082
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.default_value.max_port #=> Integer
4083
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.constraints.min_port.min #=> Integer
4084
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.constraints.min_port.max #=> Integer
4085
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.constraints.max_port.min #=> Integer
4086
+ # resp.cluster_versions[0].control_plane_component_config.kube_api_server_config.service_node_port_range.constraints.max_port.max #=> Integer
4087
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.type #=> String, one of "LeastAllocated", "MostAllocated"
4088
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources #=> Array
4089
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources[0].name #=> String
4090
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.default_value.resources[0].weight #=> Integer
4091
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.scoring_strategy.allowed_values #=> Array
4092
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.scoring_strategy.allowed_values[0] #=> String
4093
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.name.allowed_values #=> Array
4094
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.name.allowed_values[0] #=> String
4095
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.weight.min #=> Integer
4096
+ # resp.cluster_versions[0].control_plane_component_config.kube_scheduler_config.node_resources_fit.scoring_strategy.constraints.resources.weight.max #=> Integer
4097
+ # resp.cluster_versions[0].control_plane_component_config.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.default_value #=> String
4098
+ # resp.cluster_versions[0].control_plane_component_config.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.constraints.min #=> String
4099
+ # resp.cluster_versions[0].control_plane_component_config.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period.constraints.max #=> String
3677
4100
  #
3678
4101
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribeClusterVersions AWS API Documentation
3679
4102
  #
@@ -4124,9 +4547,9 @@ module Aws::EKS
4124
4547
  #
4125
4548
  # resp.update.id #=> String
4126
4549
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
4127
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
4550
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
4128
4551
  # resp.update.params #=> Array
4129
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
4552
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
4130
4553
  # resp.update.params[0].value #=> String
4131
4554
  # resp.update.created_at #=> Time
4132
4555
  # resp.update.errors #=> Array
@@ -4137,6 +4560,11 @@ module Aws::EKS
4137
4560
  # resp.update.cancellation.status #=> String, one of "InProgress", "Failed", "Successful"
4138
4561
  # resp.update.cancellation.reason #=> String
4139
4562
  #
4563
+ #
4564
+ # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
4565
+ #
4566
+ # * certificate_authority_update_complete
4567
+ #
4140
4568
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribeUpdate AWS API Documentation
4141
4569
  #
4142
4570
  # @overload describe_update(params = {})
@@ -4215,9 +4643,9 @@ module Aws::EKS
4215
4643
  #
4216
4644
  # resp.update.id #=> String
4217
4645
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
4218
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
4646
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
4219
4647
  # resp.update.params #=> Array
4220
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
4648
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
4221
4649
  # resp.update.params[0].value #=> String
4222
4650
  # resp.update.created_at #=> Time
4223
4651
  # resp.update.errors #=> Array
@@ -4537,6 +4965,67 @@ module Aws::EKS
4537
4965
  req.send_request(options)
4538
4966
  end
4539
4967
 
4968
+ # Lists the certificate authorities (CAs) for your cluster. A cluster
4969
+ # has at most two certificate authorities: the outgoing CA that's
4970
+ # currently signing and, during a rotation, one successor CA.
4971
+ #
4972
+ # @option params [required, String] :cluster_name
4973
+ # The name of your cluster.
4974
+ #
4975
+ # @option params [Integer] :max_results
4976
+ # The maximum number of results to return in a single call. To retrieve
4977
+ # the remaining results, make another call with the returned `nextToken`
4978
+ # value. If you don't specify a value, the default is 100 results.
4979
+ #
4980
+ # @option params [String] :next_token
4981
+ # The `nextToken` value returned from a previous paginated request,
4982
+ # where `maxResults` was used and the results exceeded the value of that
4983
+ # parameter. Pagination continues from the end of the previous results
4984
+ # that returned the `nextToken` value. This value is null when there are
4985
+ # no more results to return.
4986
+ #
4987
+ # <note markdown="1"> This token should be treated as an opaque identifier that is used only
4988
+ # to retrieve the next items in a list and not for other programmatic
4989
+ # purposes.
4990
+ #
4991
+ # </note>
4992
+ #
4993
+ # @return [Types::ListCertificateAuthoritiesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4994
+ #
4995
+ # * {Types::ListCertificateAuthoritiesResponse#certificate_authorities #certificate_authorities} => Array&lt;Types::CertificateAuthoritySummary&gt;
4996
+ # * {Types::ListCertificateAuthoritiesResponse#next_token #next_token} => String
4997
+ #
4998
+ # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
4999
+ #
5000
+ # @example Request syntax with placeholder values
5001
+ #
5002
+ # resp = client.list_certificate_authorities({
5003
+ # cluster_name: "String", # required
5004
+ # max_results: 1,
5005
+ # next_token: "String",
5006
+ # })
5007
+ #
5008
+ # @example Response structure
5009
+ #
5010
+ # resp.certificate_authorities #=> Array
5011
+ # resp.certificate_authorities[0].id #=> String
5012
+ # resp.certificate_authorities[0].created_at #=> Time
5013
+ # resp.certificate_authorities[0].created_by #=> String, one of "EKS", "CUSTOMER"
5014
+ # resp.certificate_authorities[0].activated_at #=> Time
5015
+ # resp.certificate_authorities[0].activated_by #=> String, one of "EKS", "CUSTOMER"
5016
+ # resp.certificate_authorities[0].signing_status #=> String, one of "NOT_USED", "ACTIVATING", "IN_USE"
5017
+ # resp.certificate_authorities[0].distribution_status #=> String, one of "IN_PROGRESS", "COMPLETE", "FAILED", "DELETING"
5018
+ # resp.next_token #=> String
5019
+ #
5020
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ListCertificateAuthorities AWS API Documentation
5021
+ #
5022
+ # @overload list_certificate_authorities(params = {})
5023
+ # @param [Hash] params ({})
5024
+ def list_certificate_authorities(params = {}, options = {})
5025
+ req = build_request(:list_certificate_authorities, params)
5026
+ req.send_request(options)
5027
+ end
5028
+
4540
5029
  # Lists the Amazon EKS clusters in your Amazon Web Services account in
4541
5030
  # the specified Amazon Web Services Region.
4542
5031
  #
@@ -5229,6 +5718,8 @@ module Aws::EKS
5229
5718
  # resp.cluster.identity.oidc.issuer #=> String
5230
5719
  # resp.cluster.status #=> String, one of "CREATING", "ACTIVE", "DELETING", "FAILED", "UPDATING", "PENDING"
5231
5720
  # resp.cluster.certificate_authority.data #=> String
5721
+ # resp.cluster.certificate_authority.active.id #=> String
5722
+ # resp.cluster.certificate_authority.active.activated_by #=> String, one of "EKS", "CUSTOMER"
5232
5723
  # resp.cluster.client_request_token #=> String
5233
5724
  # resp.cluster.platform_version #=> String
5234
5725
  # resp.cluster.tags #=> Hash
@@ -5272,6 +5763,14 @@ module Aws::EKS
5272
5763
  # resp.cluster.storage_config.block_storage.enabled #=> Boolean
5273
5764
  # resp.cluster.deletion_protection #=> Boolean
5274
5765
  # resp.cluster.control_plane_scaling_config.tier #=> String, one of "standard", "tier-xl", "tier-2xl", "tier-4xl", "tier-8xl"
5766
+ # resp.cluster.kube_api_server_config.event_ttl #=> String
5767
+ # resp.cluster.kube_api_server_config.service_node_port_range.min_port #=> Integer
5768
+ # resp.cluster.kube_api_server_config.service_node_port_range.max_port #=> Integer
5769
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.type #=> String, one of "LeastAllocated", "MostAllocated"
5770
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources #=> Array
5771
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].name #=> String
5772
+ # resp.cluster.kube_scheduler_config.node_resources_fit.scoring_strategy.resources[0].weight #=> Integer
5773
+ # resp.cluster.kube_controller_manager_config.horizontal_pod_autoscaler_controller_config.horizontal_pod_autoscaler_sync_period #=> String
5275
5774
  #
5276
5775
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/RegisterCluster AWS API Documentation
5277
5776
  #
@@ -5573,9 +6072,9 @@ module Aws::EKS
5573
6072
  #
5574
6073
  # resp.update.id #=> String
5575
6074
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
5576
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6075
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
5577
6076
  # resp.update.params #=> Array
5578
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6077
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
5579
6078
  # resp.update.params[0].value #=> String
5580
6079
  # resp.update.created_at #=> Time
5581
6080
  # resp.update.errors #=> Array
@@ -5684,9 +6183,9 @@ module Aws::EKS
5684
6183
  #
5685
6184
  # resp.update.id #=> String
5686
6185
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
5687
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6186
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
5688
6187
  # resp.update.params #=> Array
5689
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6188
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
5690
6189
  # resp.update.params[0].value #=> String
5691
6190
  # resp.update.created_at #=> Time
5692
6191
  # resp.update.errors #=> Array
@@ -5858,6 +6357,16 @@ module Aws::EKS
5858
6357
  # The control plane scaling tier configuration. For more information,
5859
6358
  # see EKS Provisioned Control Plane in the Amazon EKS User Guide.
5860
6359
  #
6360
+ # @option params [Types::KubeApiServerConfigRequest] :kube_api_server_config
6361
+ # The Kubernetes API server configuration for the updated cluster.
6362
+ #
6363
+ # @option params [Types::KubeSchedulerConfigRequest] :kube_scheduler_config
6364
+ # The Kubernetes scheduler configuration for the updated cluster.
6365
+ #
6366
+ # @option params [Types::KubeControllerManagerConfigRequest] :kube_controller_manager_config
6367
+ # The Kubernetes controller manager configuration for the updated
6368
+ # cluster.
6369
+ #
5861
6370
  # @return [Types::UpdateClusterConfigResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5862
6371
  #
5863
6372
  # * {Types::UpdateClusterConfigResponse#update #update} => Types::Update
@@ -5925,15 +6434,40 @@ module Aws::EKS
5925
6434
  # control_plane_scaling_config: {
5926
6435
  # tier: "standard", # accepts standard, tier-xl, tier-2xl, tier-4xl, tier-8xl
5927
6436
  # },
6437
+ # kube_api_server_config: {
6438
+ # event_ttl: "String",
6439
+ # service_node_port_range: {
6440
+ # min_port: 1,
6441
+ # max_port: 1,
6442
+ # },
6443
+ # },
6444
+ # kube_scheduler_config: {
6445
+ # node_resources_fit: {
6446
+ # scoring_strategy: {
6447
+ # type: "LeastAllocated", # accepts LeastAllocated, MostAllocated
6448
+ # resources: [
6449
+ # {
6450
+ # name: "ResourceWeightName",
6451
+ # weight: 1,
6452
+ # },
6453
+ # ],
6454
+ # },
6455
+ # },
6456
+ # },
6457
+ # kube_controller_manager_config: {
6458
+ # horizontal_pod_autoscaler_controller_config: {
6459
+ # horizontal_pod_autoscaler_sync_period: "String",
6460
+ # },
6461
+ # },
5928
6462
  # })
5929
6463
  #
5930
6464
  # @example Response structure
5931
6465
  #
5932
6466
  # resp.update.id #=> String
5933
6467
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
5934
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6468
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
5935
6469
  # resp.update.params #=> Array
5936
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6470
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
5937
6471
  # resp.update.params[0].value #=> String
5938
6472
  # resp.update.created_at #=> Time
5939
6473
  # resp.update.errors #=> Array
@@ -6012,9 +6546,9 @@ module Aws::EKS
6012
6546
  #
6013
6547
  # resp.update.id #=> String
6014
6548
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
6015
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6549
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
6016
6550
  # resp.update.params #=> Array
6017
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6551
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
6018
6552
  # resp.update.params[0].value #=> String
6019
6553
  # resp.update.created_at #=> Time
6020
6554
  # resp.update.errors #=> Array
@@ -6215,9 +6749,9 @@ module Aws::EKS
6215
6749
  #
6216
6750
  # resp.update.id #=> String
6217
6751
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
6218
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6752
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
6219
6753
  # resp.update.params #=> Array
6220
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6754
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
6221
6755
  # resp.update.params[0].value #=> String
6222
6756
  # resp.update.created_at #=> Time
6223
6757
  # resp.update.errors #=> Array
@@ -6364,9 +6898,9 @@ module Aws::EKS
6364
6898
  #
6365
6899
  # resp.update.id #=> String
6366
6900
  # resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
6367
- # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback"
6901
+ # resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate", "UpgradePolicyUpdate", "ZonalShiftConfigUpdate", "AutoModeUpdate", "RemoteNetworkConfigUpdate", "DeletionProtectionUpdate", "CapabilityUpdate", "ControlPlaneScalingConfigUpdate", "VendedLogsUpdate", "ControlPlaneEgressUpdate", "VersionRollback", "ControlPlaneComponentConfigUpdate", "CertificateAuthorityUpdate"
6368
6902
  # resp.update.params #=> Array
6369
- # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode"
6903
+ # resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "NodeRepairEnabled", "UpdateStrategy", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations", "UpgradePolicy", "ZonalShiftConfig", "ComputeConfig", "StorageConfig", "KubernetesNetworkConfig", "RemoteNetworkConfig", "DeletionProtection", "NodeRepairConfig", "RoleArn", "RoleMappingsToAddOrUpdate", "RoleMappingsToRemove", "NetworkAccess", "VendedLogs", "UpdatedTier", "PreviousTier", "WarmPoolEnabled", "WarmPoolMaxGroupPreparedCapacity", "WarmPoolMinSize", "WarmPoolState", "WarmPoolReuseOnScaleIn", "ControlPlaneEgressMode", "KubeApiServerConfig", "KubeSchedulerConfig", "KubeControllerManagerConfig", "ActiveCertificateAuthority", "TrustedCertificateAuthorities", "CertificateAuthorityId", "SigningStatus"
6370
6904
  # resp.update.params[0].value #=> String
6371
6905
  # resp.update.created_at #=> Time
6372
6906
  # resp.update.errors #=> Array
@@ -6553,7 +7087,7 @@ module Aws::EKS
6553
7087
  tracer: tracer
6554
7088
  )
6555
7089
  context[:gem_name] = 'aws-sdk-eks'
6556
- context[:gem_version] = '1.172.0'
7090
+ context[:gem_version] = '1.174.0'
6557
7091
  Seahorse::Client::Request.new(handlers, context)
6558
7092
  end
6559
7093
 
@@ -6619,16 +7153,17 @@ module Aws::EKS
6619
7153
  # The following table lists the valid waiter names, the operations they call,
6620
7154
  # and the default `:delay` and `:max_attempts` values.
6621
7155
  #
6622
- # | waiter_name | params | :delay | :max_attempts |
6623
- # | ----------------------- | --------------------------------- | -------- | ------------- |
6624
- # | addon_active | {Client#describe_addon} | 10 | 60 |
6625
- # | addon_deleted | {Client#describe_addon} | 10 | 60 |
6626
- # | cluster_active | {Client#describe_cluster} | 30 | 40 |
6627
- # | cluster_deleted | {Client#describe_cluster} | 30 | 40 |
6628
- # | fargate_profile_active | {Client#describe_fargate_profile} | 10 | 60 |
6629
- # | fargate_profile_deleted | {Client#describe_fargate_profile} | 30 | 60 |
6630
- # | nodegroup_active | {Client#describe_nodegroup} | 30 | 80 |
6631
- # | nodegroup_deleted | {Client#describe_nodegroup} | 30 | 40 |
7156
+ # | waiter_name | params | :delay | :max_attempts |
7157
+ # | ------------------------------------- | --------------------------------- | -------- | ------------- |
7158
+ # | addon_active | {Client#describe_addon} | 10 | 60 |
7159
+ # | addon_deleted | {Client#describe_addon} | 10 | 60 |
7160
+ # | certificate_authority_update_complete | {Client#describe_update} | 30 | 40 |
7161
+ # | cluster_active | {Client#describe_cluster} | 30 | 40 |
7162
+ # | cluster_deleted | {Client#describe_cluster} | 30 | 40 |
7163
+ # | fargate_profile_active | {Client#describe_fargate_profile} | 10 | 60 |
7164
+ # | fargate_profile_deleted | {Client#describe_fargate_profile} | 30 | 60 |
7165
+ # | nodegroup_active | {Client#describe_nodegroup} | 30 | 80 |
7166
+ # | nodegroup_deleted | {Client#describe_nodegroup} | 30 | 40 |
6632
7167
  #
6633
7168
  # @raise [Errors::FailureStateError] Raised when the waiter terminates
6634
7169
  # because the waiter has entered a state that it will not transition
@@ -6681,6 +7216,7 @@ module Aws::EKS
6681
7216
  {
6682
7217
  addon_active: Waiters::AddonActive,
6683
7218
  addon_deleted: Waiters::AddonDeleted,
7219
+ certificate_authority_update_complete: Waiters::CertificateAuthorityUpdateComplete,
6684
7220
  cluster_active: Waiters::ClusterActive,
6685
7221
  cluster_deleted: Waiters::ClusterDeleted,
6686
7222
  fargate_profile_active: Waiters::FargateProfileActive,