@aws-cdk/cfn-property-mixins 2.267.0 → 2.268.0

package/lib/services/aws-eks/cfn-props-mixins.generated.d.ts

@@ -554,40 +554,146 @@ export declare namespace CfnClusterPropsMixin {
         readonly bootstrapClusterCreatorAdminPermissions?: boolean | cdk.IResolvable;
     }
     /**
-     * The control plane scaling tier configuration.
+     * The support policy to use for the cluster.
      *
-     * For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide.
+     * Extended support allows you to remain on specific Kubernetes versions for longer. Clusters in extended support have higher costs. The default value is `EXTENDED` . Use `STANDARD` to disable extended support.
+     *
+     * [Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-controlplanescalingconfig.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-upgradepolicy.html
      */
-    interface ControlPlaneScalingConfigProperty {
+    interface UpgradePolicyProperty {
         /**
-         * The control plane scaling tier configuration.
+         * If the cluster is set to `EXTENDED` , it will enter extended support at the end of standard support.
          *
-         * Available options are `standard` , `tier-xl` , `tier-2xl` , or `tier-4xl` . For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide.
+         * If the cluster is set to `STANDARD` , it will be automatically upgraded at the end of standard support.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-controlplanescalingconfig.html#cfn-eks-cluster-controlplanescalingconfig-tier
+         * [Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-upgradepolicy.html#cfn-eks-cluster-upgradepolicy-supporttype
          */
-        readonly tier?: string;
+        readonly supportType?: string;
     }
     /**
-     * The rollback configuration to use for the cluster version rollback.
+     * The configuration in the cluster for EKS Hybrid Nodes.
+     *
+     * You can add, change, or remove this configuration after the cluster is created.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-rollbackconfig.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html
      */
-    interface RollbackConfigProperty {
+    interface RemoteNetworkConfigProperty {
         /**
-         * The timeout in minutes for the version rollback operation.
+         * The list of network CIDRs that can contain hybrid nodes.
          *
-         * If not specified, defaults to 720 minutes (12 hours).
+         * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-rollbackconfig.html#cfn-eks-cluster-rollbackconfig-timeoutminutes
+         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         *
+         * It must satisfy the following requirements:
+         *
+         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
+         * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
+         * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
+         * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html#cfn-eks-cluster-remotenetworkconfig-remotenodenetworks
          */
-        readonly timeoutMinutes?: number;
+        readonly remoteNodeNetworks?: Array<cdk.IResolvable | CfnClusterPropsMixin.RemoteNodeNetworkProperty> | cdk.IResolvable;
+        /**
+         * The list of network CIDRs that can contain pods that run Kubernetes webhooks on hybrid nodes.
+         *
+         * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
+         *
+         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         *
+         * It must satisfy the following requirements:
+         *
+         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html#cfn-eks-cluster-remotenetworkconfig-remotepodnetworks
+         */
+        readonly remotePodNetworks?: Array<cdk.IResolvable | CfnClusterPropsMixin.RemotePodNetworkProperty> | cdk.IResolvable;
+    }
+    /**
+     * A network CIDR that can contain hybrid nodes.
+     *
+     * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
+     *
+     * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+     *
+     * It must satisfy the following requirements:
+     *
+     * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+     * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+     * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
+     * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
+     * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
+     * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenodenetwork.html
+     */
+    interface RemoteNodeNetworkProperty {
+        /**
+         * A network CIDR that can contain hybrid nodes.
+         *
+         * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
+         *
+         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         *
+         * It must satisfy the following requirements:
+         *
+         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
+         * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
+         * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
+         * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenodenetwork.html#cfn-eks-cluster-remotenodenetwork-cidrs
+         */
+        readonly cidrs?: Array<string>;
+    }
+    /**
+     * A network CIDR that can contain pods that run Kubernetes webhooks on hybrid nodes.
+     *
+     * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
+     *
+     * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+     *
+     * It must satisfy the following requirements:
+     *
+     * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+     * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotepodnetwork.html
+     */
+    interface RemotePodNetworkProperty {
+        /**
+         * A network CIDR that can contain pods that run Kubernetes webhooks on hybrid nodes.
+         *
+         * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
+         *
+         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         *
+         * It must satisfy the following requirements:
+         *
+         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
+         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotepodnetwork.html#cfn-eks-cluster-remotepodnetwork-cidrs
+         */
+        readonly cidrs?: Array<string>;
     }
     /**
      * Indicates the current configuration of the compute capability on your EKS Auto Mode cluster.
@@ -660,6 +766,65 @@ export declare namespace CfnClusterPropsMixin {
          */
         readonly enabled?: boolean | cdk.IResolvable;
     }
+    /**
+     * The rollback configuration to use for the cluster version rollback.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-rollbackconfig.html
+     */
+    interface RollbackConfigProperty {
+        /**
+         * The timeout in minutes for the version rollback operation.
+         *
+         * If not specified, defaults to 720 minutes (12 hours).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-rollbackconfig.html#cfn-eks-cluster-rollbackconfig-timeoutminutes
+         */
+        readonly timeoutMinutes?: number;
+    }
+    /**
+     * The certificate authority information for the cluster, including the trust bundle and the currently active signing certificate authority.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-certificateauthority.html
+     */
+    interface CertificateAuthorityProperty {
+        /**
+         * Identifies the certificate authority currently signing certificates for the cluster.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-certificateauthority.html#cfn-eks-cluster-certificateauthority-active
+         */
+        readonly active?: CfnClusterPropsMixin.ActiveCertificateAuthorityProperty | cdk.IResolvable;
+        /**
+         * The base64-encoded certificate-authority trust bundle for the cluster (all trusted CAs).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-certificateauthority.html#cfn-eks-cluster-certificateauthority-data
+         */
+        readonly data?: string;
+    }
+    /**
+     * Identifies the certificate authority currently signing certificates for the cluster.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-activecertificateauthority.html
+     */
+    interface ActiveCertificateAuthorityProperty {
+        /**
+         * Indicates whether the active certificate authority was activated by EKS or by the customer.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-activecertificateauthority.html#cfn-eks-cluster-activecertificateauthority-activatedby
+         */
+        readonly activatedBy?: string;
+        /**
+         * The ID of the active (signing) certificate authority.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-activecertificateauthority.html#cfn-eks-cluster-activecertificateauthority-id
+         */
+        readonly id?: string;
+    }
     /**
      * The configuration for zonal shift for the cluster.
      *
@@ -676,146 +841,190 @@ export declare namespace CfnClusterPropsMixin {
         readonly enabled?: boolean | cdk.IResolvable;
     }
     /**
-     * The support policy to use for the cluster.
-     *
-     * Extended support allows you to remain on specific Kubernetes versions for longer. Clusters in extended support have higher costs. The default value is `EXTENDED` . Use `STANDARD` to disable extended support.
+     * The control plane scaling tier configuration.
      *
-     * [Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)
+     * For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-upgradepolicy.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-controlplanescalingconfig.html
      */
-    interface UpgradePolicyProperty {
+    interface ControlPlaneScalingConfigProperty {
         /**
-         * If the cluster is set to `EXTENDED` , it will enter extended support at the end of standard support.
-         *
-         * If the cluster is set to `STANDARD` , it will be automatically upgraded at the end of standard support.
+         * The control plane scaling tier configuration.
          *
-         * [Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)
+         * Available options are `standard` , `tier-xl` , `tier-2xl` , or `tier-4xl` . For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-upgradepolicy.html#cfn-eks-cluster-upgradepolicy-supporttype
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-controlplanescalingconfig.html#cfn-eks-cluster-controlplanescalingconfig-tier
          */
-        readonly supportType?: string;
+        readonly tier?: string;
     }
     /**
-     * The configuration in the cluster for EKS Hybrid Nodes.
-     *
-     * You can add, change, or remove this configuration after the cluster is created.
+     * The configuration for the Kubernetes API server on an Amazon EKS cluster.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubeapiserverconfig.html
      */
-    interface RemoteNetworkConfigProperty {
+    interface KubeApiServerConfigProperty {
         /**
-         * The list of network CIDRs that can contain hybrid nodes.
-         *
-         * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
-         *
-         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
-         *
-         * It must satisfy the following requirements:
+         * The duration that Kubernetes events are retained (e.g., 30m, 1h).
          *
-         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
-         * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
-         * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
-         * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
-         * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
-         *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html#cfn-eks-cluster-remotenetworkconfig-remotenodenetworks
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubeapiserverconfig.html#cfn-eks-cluster-kubeapiserverconfig-eventttl
          */
-        readonly remoteNodeNetworks?: Array<cdk.IResolvable | CfnClusterPropsMixin.RemoteNodeNetworkProperty> | cdk.IResolvable;
+        readonly eventTtl?: string;
         /**
-         * The list of network CIDRs that can contain pods that run Kubernetes webhooks on hybrid nodes.
+         * The port range for Kubernetes NodePort services.
          *
-         * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
-         *
-         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
-         *
-         * It must satisfy the following requirements:
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubeapiserverconfig.html#cfn-eks-cluster-kubeapiserverconfig-servicenodeportrange
+         */
+        readonly serviceNodePortRange?: cdk.IResolvable | CfnClusterPropsMixin.ServiceNodePortRangeProperty;
+    }
+    /**
+     * The port range for Kubernetes NodePort services.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-servicenodeportrange.html
+     */
+    interface ServiceNodePortRangeProperty {
+        /**
+         * The maximum port number in the range.
          *
-         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-servicenodeportrange.html#cfn-eks-cluster-servicenodeportrange-maxport
+         */
+        readonly maxPort?: number;
+        /**
+         * The minimum port number in the range.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenetworkconfig.html#cfn-eks-cluster-remotenetworkconfig-remotepodnetworks
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-servicenodeportrange.html#cfn-eks-cluster-servicenodeportrange-minport
          */
-        readonly remotePodNetworks?: Array<cdk.IResolvable | CfnClusterPropsMixin.RemotePodNetworkProperty> | cdk.IResolvable;
+        readonly minPort?: number;
     }
     /**
-     * A network CIDR that can contain hybrid nodes.
-     *
-     * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
-     *
-     * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+     * The configuration for the Kubernetes scheduler on an Amazon EKS cluster.
      *
-     * It must satisfy the following requirements:
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubeschedulerconfig.html
+     */
+    interface KubeSchedulerConfigProperty {
+        /**
+         * The NodeResourcesFit plugin configuration for the Kubernetes scheduler.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubeschedulerconfig.html#cfn-eks-cluster-kubeschedulerconfig-noderesourcesfit
+         */
+        readonly nodeResourcesFit?: cdk.IResolvable | CfnClusterPropsMixin.NodeResourcesFitConfigProperty;
+    }
+    /**
+     * The NodeResourcesFit plugin configuration for the Kubernetes scheduler.
      *
-     * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-     * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
-     * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
-     * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
-     * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
-     * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-noderesourcesfitconfig.html
+     */
+    interface NodeResourcesFitConfigProperty {
+        /**
+         * The scoring strategy configuration for the NodeResourcesFit scheduler plugin.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-noderesourcesfitconfig.html#cfn-eks-cluster-noderesourcesfitconfig-scoringstrategy
+         */
+        readonly scoringStrategy?: cdk.IResolvable | CfnClusterPropsMixin.ScoringStrategyProperty;
+    }
+    /**
+     * The scoring strategy configuration for the NodeResourcesFit scheduler plugin.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenodenetwork.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-scoringstrategy.html
      */
-    interface RemoteNodeNetworkProperty {
+    interface ScoringStrategyProperty {
         /**
-         * A network CIDR that can contain hybrid nodes.
+         * The resource weights used for scoring nodes.
          *
-         * These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator.
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-scoringstrategy.html#cfn-eks-cluster-scoringstrategy-resources
+         */
+        readonly resources?: Array<cdk.IResolvable | CfnClusterPropsMixin.ResourceWeightProperty> | cdk.IResolvable;
+        /**
+         * The scoring strategy type (LeastAllocated or MostAllocated).
          *
-         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-scoringstrategy.html#cfn-eks-cluster-scoringstrategy-type
+         */
+        readonly type?: string;
+    }
+    /**
+     * A resource weight entry for the scheduler scoring strategy.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourceweight.html
+     */
+    interface ResourceWeightProperty {
+        /**
+         * The name of the resource (for example, cpu or memory).
          *
-         * It must satisfy the following requirements:
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourceweight.html#cfn-eks-cluster-resourceweight-name
+         */
+        readonly name?: string;
+        /**
+         * The weight assigned to the resource for scoring.
          *
-         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
-         * - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect .
-         * - Each host must allow outbound connection to the EKS cluster control plane on TCP ports `443` and `10250` .
-         * - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations.
-         * - Each host must allow TCP and UDP network connectivity to and from other hosts that are running `CoreDNS` on UDP port `53` for service and pod DNS names.
+         * Must be between 1 and 100.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotenodenetwork.html#cfn-eks-cluster-remotenodenetwork-cidrs
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourceweight.html#cfn-eks-cluster-resourceweight-weight
          */
-        readonly cidrs?: Array<string>;
+        readonly weight?: number;
     }
     /**
-     * A network CIDR that can contain pods that run Kubernetes webhooks on hybrid nodes.
-     *
-     * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
-     *
-     * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
-     *
-     * It must satisfy the following requirements:
-     *
-     * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-     * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+     * The configuration for the Kubernetes controller manager on an Amazon EKS cluster.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotepodnetwork.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubecontrollermanagerconfig.html
      */
-    interface RemotePodNetworkProperty {
+    interface KubeControllerManagerConfigProperty {
         /**
-         * A network CIDR that can contain pods that run Kubernetes webhooks on hybrid nodes.
-         *
-         * These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations.
+         * The horizontal pod autoscaler controller configuration.
          *
-         * Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, `10.2.0.0/16` ).
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubecontrollermanagerconfig.html#cfn-eks-cluster-kubecontrollermanagerconfig-horizontalpodautoscalercontrollerconfig
+         */
+        readonly horizontalPodAutoscalerControllerConfig?: CfnClusterPropsMixin.HorizontalPodAutoscalerControllerConfigProperty | cdk.IResolvable;
+        /**
+         * The pod garbage collector controller configuration.
          *
-         * It must satisfy the following requirements:
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubecontrollermanagerconfig.html#cfn-eks-cluster-kubecontrollermanagerconfig-podgccontrollerconfig
+         */
+        readonly podGcControllerConfig?: cdk.IResolvable | CfnClusterPropsMixin.PodGcControllerConfigProperty;
+    }
+    /**
+     * The pod garbage collector controller configuration.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-podgccontrollerconfig.html
+     */
+    interface PodGcControllerConfigProperty {
+        /**
+         * The number of terminated pods that can exist before the terminated pod garbage collector starts deleting them.
          *
-         * - Each block must be within an `IPv4` RFC-1918 network range. Minimum allowed size is /32, maximum allowed size is /8. Publicly-routable addresses aren't supported.
-         * - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-podgccontrollerconfig.html#cfn-eks-cluster-podgccontrollerconfig-terminatedpodgcthreshold
+         */
+        readonly terminatedPodGcThreshold?: number;
+    }
+    /**
+     * The horizontal pod autoscaler controller configuration.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-horizontalpodautoscalercontrollerconfig.html
+     */
+    interface HorizontalPodAutoscalerControllerConfigProperty {
+        /**
+         * The interval between each sync of the horizontal pod autoscaler (e.g., 15s, 1m).
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-remotepodnetwork.html#cfn-eks-cluster-remotepodnetwork-cidrs
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-horizontalpodautoscalercontrollerconfig.html#cfn-eks-cluster-horizontalpodautoscalercontrollerconfig-horizontalpodautoscalersyncperiod
          */
-        readonly cidrs?: Array<string>;
+        readonly horizontalPodAutoscalerSyncPeriod?: string;
     }
 }
 /**
@@ -832,6 +1041,14 @@ export interface CfnClusterMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-accessconfig
      */
     readonly accessConfig?: CfnClusterPropsMixin.AccessConfigProperty | cdk.IResolvable;
+    /**
+     * The ID of the certificate authority to activate as the cluster's signing CA.
+     *
+     * Setting or changing this value activates the specified CA (the previously active CA becomes trusted).
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-activecertificateauthorityid
+     */
+    readonly activeCertificateAuthorityId?: string;
     /**
      * If you set this value to `False` when creating a cluster, the default networking add-ons will not be installed.
      *
@@ -842,6 +1059,12 @@ export interface CfnClusterMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-bootstrapselfmanagedaddons
      */
     readonly bootstrapSelfManagedAddons?: boolean | cdk.IResolvable;
+    /**
+     * The certificate authority information for the cluster, including the trust bundle and the currently active signing certificate authority.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-certificateauthority
+     */
+    readonly certificateAuthority?: CfnClusterPropsMixin.CertificateAuthorityProperty | cdk.IResolvable;
     /**
      * Indicates the current configuration of the compute capability on your EKS Auto Mode cluster.
      *
@@ -879,12 +1102,30 @@ export interface CfnClusterMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-force
      */
     readonly force?: boolean | cdk.IResolvable;
+    /**
+     * The configuration for the Kubernetes API server on an Amazon EKS cluster.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-kubeapiserverconfig
+     */
+    readonly kubeApiServerConfig?: cdk.IResolvable | CfnClusterPropsMixin.KubeApiServerConfigProperty;
+    /**
+     * The configuration for the Kubernetes controller manager on an Amazon EKS cluster.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-kubecontrollermanagerconfig
+     */
+    readonly kubeControllerManagerConfig?: cdk.IResolvable | CfnClusterPropsMixin.KubeControllerManagerConfigProperty;
     /**
      * The Kubernetes network configuration for the cluster.
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-kubernetesnetworkconfig
      */
     readonly kubernetesNetworkConfig?: cdk.IResolvable | CfnClusterPropsMixin.KubernetesNetworkConfigProperty;
+    /**
+     * The configuration for the Kubernetes scheduler on an Amazon EKS cluster.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-kubeschedulerconfig
+     */
+    readonly kubeSchedulerConfig?: cdk.IResolvable | CfnClusterPropsMixin.KubeSchedulerConfigProperty;
     /**
      * The logging configuration for your cluster.
      *
@@ -1962,6 +2203,10 @@ export declare namespace CfnCapabilityPropsMixin {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-capabilityconfiguration.html
      */
     interface CapabilityConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-capabilityconfiguration.html#cfn-eks-capability-capabilityconfiguration-ack
+         */
+        readonly ack?: any | cdk.IResolvable;
         /**
          * Configuration settings for an Argo CD capability.
          *
@@ -2022,6 +2267,25 @@ export declare namespace CfnCapabilityPropsMixin {
          */
         readonly serverUrl?: string;
     }
+    /**
+     * Configuration for network access to the Argo CD capability's managed API server endpoint.
+     *
+     * By default, the Argo CD server is accessible via a public endpoint. You can optionally specify one or more VPC endpoint IDs to enable private connectivity from your VPCs.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-networkaccess.html
+     */
+    interface NetworkAccessProperty {
+        /**
+         * A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint.
+         *
+         * Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-networkaccess.html#cfn-eks-capability-networkaccess-vpceids
+         */
+        readonly vpceIds?: Array<string>;
+    }
     /**
      * Configuration for integrating Argo CD with IAM Identity Center.
      *
@@ -2109,25 +2373,6 @@ export declare namespace CfnCapabilityPropsMixin {
          */
         readonly type?: string;
     }
-    /**
-     * Configuration for network access to the Argo CD capability's managed API server endpoint.
-     *
-     * By default, the Argo CD server is accessible via a public endpoint. You can optionally specify one or more VPC endpoint IDs to enable private connectivity from your VPCs.
-     *
-     * @struct
-     * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-networkaccess.html
-     */
-    interface NetworkAccessProperty {
-        /**
-         * A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint.
-         *
-         * Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
-         *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-capability-networkaccess.html#cfn-eks-capability-networkaccess-vpceids
-         */
-        readonly vpceIds?: Array<string>;
-    }
 }
 /**
  * Properties for CfnCapabilityPropsMixin
@@ -2186,6 +2431,93 @@ export interface CfnCapabilityMixinProps {
      */
     readonly type?: string;
 }
+/**
+ * Resource Type definition for EKS CertificateAuthority.
+ *
+ * @cloudformationResource AWS::EKS::CertificateAuthority
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-certificateauthority.html
+ */
+export declare class CfnCertificateAuthorityPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnCertificateAuthorityMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::EKS::CertificateAuthority`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnCertificateAuthorityMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnCertificateAuthority;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnCertificateAuthorityPropsMixin {
+    /**
+     * The validity period of the certificate authority.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-validity.html
+     */
+    interface ValidityProperty {
+        /**
+         * The end of the validity period for the certificate authority.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-validity.html#cfn-eks-certificateauthority-validity-notafter
+         */
+        readonly notAfter?: string;
+        /**
+         * The start of the validity period for the certificate authority.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-validity.html#cfn-eks-certificateauthority-validity-notbefore
+         */
+        readonly notBefore?: string;
+    }
+    /**
+     * The scheduled auto-activation events for the certificate authority, computed from its validity window.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-scheduledevents.html
+     */
+    interface ScheduledEventsProperty {
+        /**
+         * The deadline by which EKS will auto-activate this certificate authority (notAfter minus 45 days).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-scheduledevents.html#cfn-eks-certificateauthority-scheduledevents-finalautoactivation
+         */
+        readonly finalAutoActivation?: string;
+        /**
+         * The earliest date EKS may auto-activate this certificate authority (notAfter minus 6 months).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-certificateauthority-scheduledevents.html#cfn-eks-certificateauthority-scheduledevents-firstautoactivation
+         */
+        readonly firstAutoActivation?: string;
+    }
+}
+/**
+ * Properties for CfnCertificateAuthorityPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-certificateauthority.html
+ */
+export interface CfnCertificateAuthorityMixinProps {
+    /**
+     * The name of the EKS cluster that the certificate authority belongs to.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-certificateauthority.html#cfn-eks-certificateauthority-clustername
+     */
+    readonly clusterName?: string;
+}
 /**
  * Amazon EKS Pod Identity associations provide the ability to manage credentials for your applications, similar to the way that Amazon EC2 instance profiles provide credentials to Amazon EC2 instances.
  *