@intentius/chant-lexicon-aws 0.41.10 → 0.41.12

package/dist/composites/eks-cluster.d.ts

@@ -0,0 +1,59 @@
+import { EKSCluster, Nodegroup, Role } from "../generated/index.js";
+export interface EksClusterProps {
+    /** Cluster name. Required: everything downstream addresses the cluster by it. */
+    name: string;
+    /** Subnet ids for the control plane ENIs — EKS requires at least two AZs. */
+    subnetIds: string[];
+    /** Extra security groups for the control plane (EKS always adds its own). */
+    securityGroupIds?: string[];
+    /** Kubernetes version, e.g. "1.31". Omitted takes EKS's current default. */
+    version?: string;
+    /** Node group shape. Omitted provisions no node group (control plane only). */
+    nodegroup?: {
+        instanceTypes?: string[];
+        desiredSize?: number;
+        minSize?: number;
+        maxSize?: number;
+        /** Subnets the nodes land in. Default: the cluster's own `subnetIds`. */
+        subnetIds?: string[];
+    };
+    /**
+     * Managed add-ons to install, by name (e.g. "eks-pod-identity-agent" —
+     * without which an AWS::EKS::PodIdentityAssociation delivers no
+     * credentials and the workload it binds crashloops on startup, found on
+     * kubemicrovm-ops' first real deploy). Named by the caller, never guessed;
+     * versions omitted take EKS's default. Up to three (fixed member slots
+     * `addon1..addon3`, keyed by position — the statically-evaluable shape);
+     * an estate needing more declares the rest as bare Addon resources.
+     */
+    addons?: Array<{
+        name: string;
+        version?: string;
+    }>;
+    tags?: Array<{
+        Key: string;
+        Value: string;
+    }>;
+    defaults?: {
+        cluster?: Partial<ConstructorParameters<typeof EKSCluster>[0]>;
+        nodegroup?: Partial<ConstructorParameters<typeof Nodegroup>[0]>;
+        clusterRole?: Partial<ConstructorParameters<typeof Role>[0]>;
+        nodeRole?: Partial<ConstructorParameters<typeof Role>[0]>;
+    };
+}
+export declare const EksCluster: import("@intentius/chant").CompositeDefinition<EksClusterProps, {
+    addon3?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    addon2?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    addon1?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    clusterRole: import("@intentius/chant").Declarable & Record<string, string>;
+    cluster: import("@intentius/chant").Declarable & Record<string, string>;
+} | {
+    addon3?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    addon2?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    addon1?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    clusterRole: import("@intentius/chant").Declarable & Record<string, string>;
+    cluster: import("@intentius/chant").Declarable & Record<string, string>;
+    nodeRole: import("@intentius/chant").Declarable & Record<string, string>;
+    nodegroup: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=eks-cluster.d.ts.map

package/dist/composites/eks-cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eks-cluster.d.ts","sourceRoot":"","sources":["../../src/composites/eks-cluster.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAS,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAGlE,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,yEAAyE;QACzE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;CACH;AAID,eAAO,MAAM,UAAU;;;;;;;;;;;;;;EA8FP,CAAC"}

package/dist/composites/index.d.ts

@@ -32,6 +32,8 @@ export { Ec2InstanceRole } from "./ec2-instance-role.js";
 export type { Ec2InstanceRoleProps } from "./ec2-instance-role.js";
 export { MinimalVpc } from "./minimal-vpc.js";
 export type { MinimalVpcProps } from "./minimal-vpc.js";
+export { EksCluster } from "./eks-cluster.js";
+export type { EksClusterProps } from "./eks-cluster.js";
 export { MicrovmApp, MICROVM_LIMITS } from "./microvm-app.js";
 export type { MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB } from "./microvm-app.js";
 export { AgentCoreAgent } from "./agentcore-agent.js";

package/dist/composites/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACvG,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACvG,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.d.ts

@@ -23,8 +23,8 @@ export type { CFNSchema, SchemaProperty, SchemaDefinition } from "./spec/fetch.j
 export { parseCFNSchema, cfnShortName, cfnServiceName } from "./spec/parse.js";
 export type { SchemaParseResult, ParsedResource, ParsedProperty, ParsedAttribute, ParsedPropertyType, ParsedEnum, PropertyConstraints } from "./spec/parse.js";
 export { S3Actions, LambdaActions, DynamoDBActions, SQSActions, SNSActions, IAMActions, ECRActions, LogsActions, ECSActions } from "./actions/index.js";
-export { LambdaFunction, LambdaNode, LambdaPython, NodeLambda, PythonLambda, LambdaApi, LambdaScheduled, ScheduledLambda, LambdaSqs, LambdaEventBridge, LambdaDynamoDB, LambdaS3, LambdaSns, VpcDefault, FargateAlb, AlbShared, FargateService, RdsInstance, RdsPostgres, EfsWithAccessPoint, Ec2InstanceRole, MinimalVpc, SolrFargateService, MicrovmApp, MICROVM_LIMITS, AgentCoreAgent, } from "./composites/index.js";
-export type { LambdaFunctionProps, LambdaApiProps, ScheduledLambdaProps, LambdaSqsProps, LambdaEventBridgeProps, LambdaDynamoDBProps, LambdaS3Props, LambdaSnsProps, VpcDefaultProps, FargateAlbProps, AlbSharedProps, FargateServiceProps, RdsInstanceProps, RdsPostgresProps, EfsWithAccessPointProps, Ec2InstanceRoleProps, MinimalVpcProps, SolrFargateServiceProps, MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB, AgentCoreAgentProps, AgentCoreAgentResult, } from "./composites/index.js";
+export { LambdaFunction, LambdaNode, LambdaPython, NodeLambda, PythonLambda, LambdaApi, LambdaScheduled, ScheduledLambda, LambdaSqs, LambdaEventBridge, LambdaDynamoDB, LambdaS3, LambdaSns, VpcDefault, FargateAlb, AlbShared, FargateService, RdsInstance, RdsPostgres, EfsWithAccessPoint, Ec2InstanceRole, MinimalVpc, EksCluster, SolrFargateService, MicrovmApp, MICROVM_LIMITS, AgentCoreAgent, } from "./composites/index.js";
+export type { LambdaFunctionProps, LambdaApiProps, ScheduledLambdaProps, LambdaSqsProps, LambdaEventBridgeProps, LambdaDynamoDBProps, LambdaS3Props, LambdaSnsProps, VpcDefaultProps, FargateAlbProps, AlbSharedProps, FargateServiceProps, RdsInstanceProps, RdsPostgresProps, EfsWithAccessPointProps, Ec2InstanceRoleProps, MinimalVpcProps, EksClusterProps, SolrFargateServiceProps, MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB, AgentCoreAgentProps, AgentCoreAgentResult, } from "./composites/index.js";
 export { generate, writeGeneratedFiles } from "./codegen/generate.js";
 export { packageLexicon } from "./codegen/package.js";
 export type { PackageOptions, PackageResult } from "./codegen/package.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACzG,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,EAC3B,kBAAkB,EAClB,UAAU,EAAE,cAAc,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,EACrC,uBAAuB,EACvB,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAClF,mBAAmB,EAAE,oBAAoB,GAC1C,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACzG,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,EAAE,UAAU,EACvC,kBAAkB,EAClB,UAAU,EAAE,cAAc,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,EAAE,eAAe,EACtD,uBAAuB,EACvB,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAClF,mBAAmB,EAAE,oBAAoB,GAC1C,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "d8fd11986f54df6ec1f6a2f0c651af900f4c2d24a0e23bb0053529006f99f9c8",
+    "manifest.json": "c30f447783709ca1501f1c4dbc4648568b08f07fc63fb322cbfeb75cd713740b",
     "meta.json": "2e4cae67cbc2eb2962c3dd0aa57008ae96fb725dd0118af7b04b2b44eab7722a",
     "types/index.d.ts": "6d6b37bd14a9b40fb3ff5c66e1cb49be1ae1032de47a4e167cf5f411c943b7f5",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
@@ -59,5 +59,5 @@
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe",
     "skills/chant-aws-carve-terraform.md": "f4c6fe1c702250665f90d82b3bdaba5ea50ae75e380a8ae321dad6eb1c39683e"
   },
-  "composite": "09a4c396ddfe35af023757fbc4ee3483d6026aab46e7111a65f50a0498a82f77"
+  "composite": "d028551030c4fcd1fce01daf33202ddd5bc1e33fe417025dd6df378e7f2a6cbb"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.41.10",
+  "version": "0.41.12",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.41.10",
+  "version": "0.41.12",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,7 +80,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.41.10",
+    "@intentius/chant": "^0.41.12",
     "typescript": "^5.9.3"
   }
 }

package/src/composites/eks-cluster.test.ts

@@ -0,0 +1,73 @@
+import { describe, test, expect } from "vitest";
+import { AttrRef } from "@intentius/chant/attrref";
+import { EksCluster } from "./eks-cluster";
+
+const subnets = ["subnet-aaa", "subnet-bbb"];
+
+describe("EksCluster", () => {
+  test("control-plane-only: cluster + its role, wired by AttrRef", () => {
+    const c = EksCluster({ name: "kmv-dev", subnetIds: subnets });
+    expect(c.cluster).toBeDefined();
+    expect(c.clusterRole).toBeDefined();
+    expect((c as unknown as Record<string, unknown>).nodegroup).toBeUndefined();
+    const clusterProps = (c.cluster as any).props;
+    expect(clusterProps.RoleArn).toBeInstanceOf(AttrRef);
+    expect(clusterProps.ResourcesVpcConfig.SubnetIds).toEqual(subnets);
+  });
+
+  // The composite's return is a union (nodegroup-less vs full), and the
+  // repo-wide typecheck rightly refuses to narrow it structurally — tests go
+  // through a member map, the same access the expander itself uses.
+  type Members = Record<string, { props?: Record<string, any> } | undefined>;
+
+  test("with a nodegroup: node role carries the three worker policies, nodes default into the cluster subnets", () => {
+    const c = EksCluster({
+      name: "kmv-prod",
+      subnetIds: subnets,
+      version: "1.31",
+      nodegroup: { desiredSize: 2 },
+    }) as unknown as Members;
+    expect(c.nodegroup).toBeDefined();
+    expect(c.nodeRole).toBeDefined();
+    const ngProps = c.nodegroup!.props!;
+    expect(ngProps.ClusterName).toBe("kmv-prod");
+    expect(ngProps.Subnets).toEqual(subnets);
+    expect(ngProps.ScalingConfig.MinSize).toBe(2);
+    expect(ngProps.ScalingConfig.MaxSize).toBe(2);
+    expect(c.nodeRole!.props!.ManagedPolicyArns).toHaveLength(3);
+  });
+
+  test("nodegroup subnets override; scaling bounds honor explicit min/max", () => {
+    const c = EksCluster({
+      name: "kmv-ha",
+      subnetIds: subnets,
+      nodegroup: { subnetIds: ["subnet-nodes"], desiredSize: 2, minSize: 1, maxSize: 4 },
+    }) as unknown as Members;
+    const ng2 = c.nodegroup!.props!;
+    expect(ng2.Subnets).toEqual(["subnet-nodes"]);
+    expect(ng2.ScalingConfig.MinSize).toBe(1);
+    expect(ng2.ScalingConfig.MaxSize).toBe(4);
+  });
+
+  test("defaults escape hatch reaches the cluster (e.g. deletion protection)", () => {
+    const c = EksCluster({
+      name: "kmv-guarded",
+      subnetIds: subnets,
+      defaults: { cluster: { DeletionProtection: true } },
+    });
+    expect((c.cluster as any).props.DeletionProtection).toBe(true);
+  });
+
+  test("addons become keyed members, DependsOn the cluster (the pod-identity agent case)", () => {
+    const c = EksCluster({
+      name: "kmv-real",
+      subnetIds: subnets,
+      nodegroup: {},
+      addons: [{ name: "eks-pod-identity-agent" }],
+    }) as unknown as Members;
+    const addon = c.addon1;
+    expect(addon).toBeDefined();
+    expect(addon!.props?.AddonName).toBe("eks-pod-identity-agent");
+    expect(addon!.props?.ClusterName).toBe("kmv-real");
+  });
+});

package/src/composites/eks-cluster.ts

@@ -0,0 +1,164 @@
+/**
+ * EksCluster — a managed EKS control plane, its node group, and the two IAM
+ * roles they cannot exist without, as the one unit they are.
+ *
+ * The first consumer is kubemicrovm-ops' cluster plane (its "all infra from
+ * the tiers and targets" directive: the cluster stops being a
+ * reference-existing input and becomes provisionable), but nothing here is
+ * kubemicrovm-shaped — a cluster+nodegroup+roles bundle is what every EKS
+ * estate starts with, and cc-aws-canonical's bare cluster is the degenerate
+ * form of it.
+ *
+ * What is deliberately NOT here:
+ *  - Networking. EKS requires subnets in at least two AZs, and `VpcDefault`
+ *    (this directory) already provisions exactly that shape — the two
+ *    composites compose rather than nest, so an adopter with their own VPC
+ *    passes their own subnet ids.
+ *  - Add-ons, OIDC/IRSA, access entries. Real per-estate decisions; a bundle
+ *    that guessed them would fight every adopter. `defaults.cluster` /
+ *    `defaults.nodegroup` are the escape hatch for the fields this surface
+ *    does not name.
+ *
+ * On floci the cluster is k3s-backed and real (`aws eks update-kubeconfig`
+ * works, pods run — the cc-aws-canonical estate proved the path); the node
+ * group is accepted and tracked but backs no separate machines, which is the
+ * emulator being honest about what a laptop can host.
+ */
+import { Composite, mergeDefaults } from "@intentius/chant";
+import { Addon, EKSCluster, Nodegroup, Role } from "../generated";
+import { Sub } from "../intrinsics";
+
+export interface EksClusterProps {
+  /** Cluster name. Required: everything downstream addresses the cluster by it. */
+  name: string;
+  /** Subnet ids for the control plane ENIs — EKS requires at least two AZs. */
+  subnetIds: string[];
+  /** Extra security groups for the control plane (EKS always adds its own). */
+  securityGroupIds?: string[];
+  /** Kubernetes version, e.g. "1.31". Omitted takes EKS's current default. */
+  version?: string;
+  /** Node group shape. Omitted provisions no node group (control plane only). */
+  nodegroup?: {
+    instanceTypes?: string[];
+    desiredSize?: number;
+    minSize?: number;
+    maxSize?: number;
+    /** Subnets the nodes land in. Default: the cluster's own `subnetIds`. */
+    subnetIds?: string[];
+  };
+  /**
+   * Managed add-ons to install, by name (e.g. "eks-pod-identity-agent" —
+   * without which an AWS::EKS::PodIdentityAssociation delivers no
+   * credentials and the workload it binds crashloops on startup, found on
+   * kubemicrovm-ops' first real deploy). Named by the caller, never guessed;
+   * versions omitted take EKS's default. Up to three (fixed member slots
+   * `addon1..addon3`, keyed by position — the statically-evaluable shape);
+   * an estate needing more declares the rest as bare Addon resources.
+   */
+  addons?: Array<{ name: string; version?: string }>;
+  tags?: Array<{ Key: string; Value: string }>;
+  defaults?: {
+    cluster?: Partial<ConstructorParameters<typeof EKSCluster>[0]>;
+    nodegroup?: Partial<ConstructorParameters<typeof Nodegroup>[0]>;
+    clusterRole?: Partial<ConstructorParameters<typeof Role>[0]>;
+    nodeRole?: Partial<ConstructorParameters<typeof Role>[0]>;
+  };
+}
+
+const managedPolicy = (name: string) => Sub`arn:\${AWS::Partition}:iam::aws:policy/${name}`;
+
+export const EksCluster = Composite((props: EksClusterProps) => {
+  const { defaults } = props;
+
+  const clusterRole = new Role(mergeDefaults({
+    AssumeRolePolicyDocument: {
+      Version: "2012-10-17",
+      Statement: [
+        { Effect: "Allow", Principal: { Service: "eks.amazonaws.com" }, Action: "sts:AssumeRole" },
+      ],
+    },
+    ManagedPolicyArns: [managedPolicy("AmazonEKSClusterPolicy")],
+    Tags: props.tags,
+  }, defaults?.clusterRole));
+
+  const cluster = new EKSCluster(mergeDefaults({
+    Name: props.name,
+    RoleArn: clusterRole.Arn,
+    Version: props.version,
+    ResourcesVpcConfig: {
+      SubnetIds: props.subnetIds,
+      ...(props.securityGroupIds ? { SecurityGroupIds: props.securityGroupIds } : {}),
+    },
+    Tags: props.tags,
+  }, defaults?.cluster));
+
+  // Three fixed add-on slots, the same statically-evaluable shape
+  // vpc-default uses for its optional third AZ: a ternary is an expression
+  // (EVL-clean); a loop-built member map is control flow the reference
+  // composites must not contain (EVL002/EVL003). Members are addon1..addon3
+  // in the caller's order — logical ids stay stable as long as the order
+  // does, which the caller controls.
+  const a1 = props.addons?.[0];
+  const a2 = props.addons?.[1];
+  const a3 = props.addons?.[2];
+  const addon1 = a1
+    ? new Addon({ ClusterName: props.name, AddonName: a1.name, AddonVersion: a1.version, Tags: props.tags }, { DependsOn: [cluster] })
+    : undefined;
+  const addon2 = a2
+    ? new Addon({ ClusterName: props.name, AddonName: a2.name, AddonVersion: a2.version, Tags: props.tags }, { DependsOn: [cluster] })
+    : undefined;
+  const addon3 = a3
+    ? new Addon({ ClusterName: props.name, AddonName: a3.name, AddonVersion: a3.version, Tags: props.tags }, { DependsOn: [cluster] })
+    : undefined;
+
+  if (!props.nodegroup) {
+    return {
+      clusterRole,
+      cluster,
+      ...(addon1 ? { addon1 } : {}),
+      ...(addon2 ? { addon2 } : {}),
+      ...(addon3 ? { addon3 } : {}),
+    };
+  }
+
+  const nodeRole = new Role(mergeDefaults({
+    AssumeRolePolicyDocument: {
+      Version: "2012-10-17",
+      Statement: [
+        { Effect: "Allow", Principal: { Service: "ec2.amazonaws.com" }, Action: "sts:AssumeRole" },
+      ],
+    },
+    ManagedPolicyArns: [
+      managedPolicy("AmazonEKSWorkerNodePolicy"),
+      managedPolicy("AmazonEKS_CNI_Policy"),
+      managedPolicy("AmazonEC2ContainerRegistryReadOnly"),
+    ],
+    Tags: props.tags,
+  }, defaults?.nodeRole));
+
+  const nodegroup = new Nodegroup(mergeDefaults({
+    // The literal, not an attribute reference: Name is an input the caller
+    // gave us, and the generated class exposes accessors only for GetAtt
+    // attributes. The creation-order edge is DependsOn below.
+    ClusterName: props.name,
+    NodeRole: nodeRole.Arn,
+    Subnets: props.nodegroup.subnetIds ?? props.subnetIds,
+    InstanceTypes: props.nodegroup.instanceTypes ?? ["t3.medium"],
+    ScalingConfig: {
+      DesiredSize: props.nodegroup.desiredSize ?? 2,
+      MinSize: props.nodegroup.minSize ?? props.nodegroup.desiredSize ?? 2,
+      MaxSize: props.nodegroup.maxSize ?? props.nodegroup.desiredSize ?? 2,
+    },
+    Tags: props.tags ? Object.fromEntries(props.tags.map((t) => [t.Key, t.Value])) : undefined,
+  }, defaults?.nodegroup), { DependsOn: [cluster] });
+
+  return {
+    clusterRole,
+    cluster,
+    nodeRole,
+    nodegroup,
+    ...(addon1 ? { addon1 } : {}),
+    ...(addon2 ? { addon2 } : {}),
+    ...(addon3 ? { addon3 } : {}),
+  };
+}, "EksCluster");

package/src/composites/index.ts

@@ -32,6 +32,8 @@ export { Ec2InstanceRole } from "./ec2-instance-role";
 export type { Ec2InstanceRoleProps } from "./ec2-instance-role";
 export { MinimalVpc } from "./minimal-vpc";
 export type { MinimalVpcProps } from "./minimal-vpc";
+export { EksCluster } from "./eks-cluster";
+export type { EksClusterProps } from "./eks-cluster";
 export { MicrovmApp, MICROVM_LIMITS } from "./microvm-app";
 export type { MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB } from "./microvm-app";
 export { AgentCoreAgent } from "./agentcore-agent";

package/src/index.ts

@@ -110,7 +110,7 @@ export {
   LambdaSqs, LambdaEventBridge, LambdaDynamoDB, LambdaS3, LambdaSns,
   VpcDefault, FargateAlb, AlbShared, FargateService, RdsInstance, RdsPostgres,
   EfsWithAccessPoint,
-  Ec2InstanceRole, MinimalVpc,
+  Ec2InstanceRole, MinimalVpc, EksCluster,
   SolrFargateService,
   MicrovmApp, MICROVM_LIMITS,
   AgentCoreAgent,
@@ -120,7 +120,7 @@ export type {
   LambdaSqsProps, LambdaEventBridgeProps, LambdaDynamoDBProps, LambdaS3Props, LambdaSnsProps,
   VpcDefaultProps, FargateAlbProps, AlbSharedProps, FargateServiceProps, RdsInstanceProps, RdsPostgresProps,
   EfsWithAccessPointProps,
-  Ec2InstanceRoleProps, MinimalVpcProps,
+  Ec2InstanceRoleProps, MinimalVpcProps, EksClusterProps,
   SolrFargateServiceProps,
   MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB,
   AgentCoreAgentProps, AgentCoreAgentResult,