@pulumi/eks 1.0.0 → 1.0.2

package/nodegroup.js

@@ -73,8 +73,9 @@ class NodeGroupInternal extends pulumi.ComponentResource {
             return;
         }
         super(type, name, args, opts);
-        const core = pulumi.output(args.cluster)
-            .apply(c => c instanceof cluster_1.ClusterInternal ? c.core : c);
+        const core = pulumi
+            .output(args.cluster)
+            .apply((c) => (c instanceof cluster_1.ClusterInternal ? c.core : c));
         const group = createNodeGroupInternal(name, args, core, this, opts === null || opts === void 0 ? void 0 : opts.provider);
         this.autoScalingGroupName = group.autoScalingGroupName;
         this.cfnStack = pulumi.output(group.cfnStack);
@@ -128,8 +129,9 @@ class NodeGroupV2Internal extends pulumi.ComponentResource {
             return;
         }
         super(type, name, args, opts);
-        const core = pulumi.output(args.cluster)
-            .apply(c => c instanceof cluster_1.ClusterInternal ? c.core : c);
+        const core = pulumi
+            .output(args.cluster)
+            .apply((c) => (c instanceof cluster_1.ClusterInternal ? c.core : c));
         const group = createNodeGroupV2Internal(name, args, core, this, opts === null || opts === void 0 ? void 0 : opts.provider);
         this.autoScalingGroup = pulumi.output(group.autoScalingGroup);
         this.extraNodeSecurityGroups = pulumi.output((_a = group.extraNodeSecurityGroups) !== null && _a !== void 0 ? _a : []);
@@ -155,14 +157,14 @@ function createNodeGroup(name, args, parent, provider) {
 exports.createNodeGroup = createNodeGroup;
 function createNodeGroupInternal(name, args, core, parent, provider) {
     var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-    const instanceProfile = core.apply(c => {
+    const instanceProfile = core.apply((c) => {
         var _a;
         if (!args.instanceProfile && !c.nodeGroupOptions.instanceProfile) {
             throw new Error(`an instanceProfile is required`);
         }
         return (_a = args.instanceProfile) !== null && _a !== void 0 ? _a : c.nodeGroupOptions.instanceProfile;
     });
-    core.apply(c => {
+    core.apply((c) => {
         if (c.nodeGroupOptions.nodeSecurityGroup && args.nodeSecurityGroup) {
             if (c.nodeSecurityGroupTags &&
                 c.nodeGroupOptions.nodeSecurityGroup.id !== args.nodeSecurityGroup.id) {
@@ -176,12 +178,17 @@ function createNodeGroupInternal(name, args, core, parent, provider) {
     if (args.amiId && args.gpu) {
         throw new Error("amiId and gpu are mutually exclusive.");
     }
-    if (args.nodeUserDataOverride && (args.nodeUserData || args.labels || args.taints || args.kubeletExtraArgs || args.bootstrapExtraArgs)) {
+    if (args.nodeUserDataOverride &&
+        (args.nodeUserData ||
+            args.labels ||
+            args.taints ||
+            args.kubeletExtraArgs ||
+            args.bootstrapExtraArgs)) {
         throw new Error("nodeUserDataOverride and any combination of {nodeUserData, labels, taints, kubeletExtraArgs, or bootstrapExtraArgs} is mutually exclusive.");
     }
     let nodeSecurityGroup;
     const eksCluster = core.cluster;
-    const cfnStackDeps = core.apply(c => {
+    const cfnStackDeps = core.apply((c) => {
         const result = [];
         if (c.vpcCni !== undefined) {
             result.push(c.vpcCni);
@@ -203,20 +210,20 @@ function createNodeGroupInternal(name, args, core, parent, provider) {
             vpcId: core.vpcId,
             clusterSecurityGroup: core.clusterSecurityGroup,
             eksCluster: eksCluster,
-            tags: pulumi.all([
-                core.tags,
-                core.nodeSecurityGroupTags,
-            ]).apply(([tags, nodeSecurityGroupTags]) => (Object.assign(Object.assign({}, nodeSecurityGroupTags), tags))),
+            tags: pulumi.all([core.tags, core.nodeSecurityGroupTags]).apply(([tags, nodeSecurityGroupTags]) => (Object.assign(Object.assign({}, nodeSecurityGroupTags), tags))),
         }, parent);
     }
     // This apply is necessary in s.t. the launchConfiguration picks up a
     // dependency on the eksClusterIngressRule. The nodes may fail to
     // connect to the cluster if we attempt to create them before the
     // ingress rule is applied.
-    const nodeSecurityGroupId = pulumi.all([nodeSecurityGroup.id, eksClusterIngressRule.id])
+    const nodeSecurityGroupId = pulumi
+        .all([nodeSecurityGroup.id, eksClusterIngressRule.id])
         .apply(([id]) => id);
     // Collect the IDs of any extra, user-specific security groups.
-    const extraNodeSecurityGroupIds = args.extraNodeSecurityGroups ? args.extraNodeSecurityGroups.map(sg => sg.id) : [];
+    const extraNodeSecurityGroupIds = args.extraNodeSecurityGroups
+        ? args.extraNodeSecurityGroups.map((sg) => sg.id)
+        : [];
     // If requested, add a new EC2 KeyPair for SSH access to the instances.
     let keyName = args.keyName;
     if (args.nodePublicKey) {
@@ -248,7 +255,7 @@ function createNodeGroupInternal(name, args, core, parent, provider) {
             kubeletExtraArgs.push("--register-with-taints=" + parts.join(","));
         }
     }
-    let bootstrapExtraArgs = args.bootstrapExtraArgs ? (" " + args.bootstrapExtraArgs) : "";
+    let bootstrapExtraArgs = args.bootstrapExtraArgs ? " " + args.bootstrapExtraArgs : "";
     if (kubeletExtraArgs.length === 1) {
         // For backward compatibility with previous versions of this package, don't wrap a single argument with `''`.
         bootstrapExtraArgs += ` --kubelet-extra-args ${kubeletExtraArgs[0]}`;
@@ -256,7 +263,15 @@ function createNodeGroupInternal(name, args, core, parent, provider) {
     else if (kubeletExtraArgs.length > 1) {
         bootstrapExtraArgs += ` --kubelet-extra-args '${kubeletExtraArgs.join(" ")}'`;
     }
-    const userdata = pulumi.all([awsRegion, eksCluster.name, eksCluster.endpoint, eksCluster.certificateAuthority, cfnStackName, userDataArg])
+    const userdata = pulumi
+        .all([
+        awsRegion,
+        eksCluster.name,
+        eksCluster.endpoint,
+        eksCluster.certificateAuthority,
+        cfnStackName,
+        userDataArg,
+    ])
         .apply(([region, clusterName, clusterEndpoint, clusterCa, stackName, customUserData]) => {
         if (customUserData !== "") {
             customUserData = `cat >/opt/user-data <<${stackName}-user-data
@@ -278,7 +293,7 @@ ${customUserData}
     let amiId = args.amiId;
     if (!amiId) {
         const amiType = ((_a = args.amiType) !== null && _a !== void 0 ? _a : args.gpu) ? "amazon-linux-2-gpu" : "amazon-linux-2";
-        amiId = version.apply(v => {
+        amiId = version.apply((v) => {
             const parameterName = `/aws/service/eks/optimized-ami/${v}/${amiType}/recommended/image_id`;
             return pulumi.output(aws.ssm.getParameter({ name: parameterName }, { parent, async: true })).value;
         });
@@ -290,7 +305,7 @@ ${customUserData}
     if (args.nodeAssociatePublicIpAddress !== undefined) {
         nodeAssociatePublicIpAddress = args.nodeAssociatePublicIpAddress;
     }
-    const numeric = new RegExp("^\d+$");
+    const numeric = new RegExp("^d+$");
     if (args.nodeRootVolumeIops && args.nodeRootVolumeType !== "io1") {
         throw new Error("Cannot create a cluster node root volume of non-io1 type with provisioned IOPS (nodeRootVolumeIops).");
     }
@@ -316,7 +331,7 @@ ${customUserData}
         securityGroups: [nodeSecurityGroupId, ...extraNodeSecurityGroupIds],
         spotPrice: args.spotPrice,
         rootBlockDevice: {
-            encrypted: (_f = ((_e = ((_d = args.encryptRootBlockDevice) !== null && _d !== void 0 ? _d : args.encryptRootBockDevice)) !== null && _e !== void 0 ? _e : args.nodeRootVolumeEncrypted)) !== null && _f !== void 0 ? _f : false,
+            encrypted: (_f = (_e = (_d = args.encryptRootBlockDevice) !== null && _d !== void 0 ? _d : args.encryptRootBockDevice) !== null && _e !== void 0 ? _e : args.nodeRootVolumeEncrypted) !== null && _f !== void 0 ? _f : false,
             volumeSize: (_g = args.nodeRootVolumeSize) !== null && _g !== void 0 ? _g : 20,
             volumeType: (_h = args.nodeRootVolumeType) !== null && _h !== void 0 ? _h : "gp2",
             iops: args.nodeRootVolumeIops,
@@ -327,15 +342,18 @@ ${customUserData}
     }, { parent, provider });
     // Compute the worker node group subnets to use from the various approaches.
     let workerSubnetIds;
-    if (args.nodeSubnetIds !== undefined) { // Use the specified override subnetIds.
+    if (args.nodeSubnetIds !== undefined) {
+        // Use the specified override subnetIds.
         workerSubnetIds = pulumi.output(args.nodeSubnetIds);
     }
     else {
-        workerSubnetIds = core.apply(c => {
-            if (c.privateSubnetIds !== undefined) { // Use the specified private subnetIds.
+        workerSubnetIds = core.apply((c) => {
+            if (c.privateSubnetIds !== undefined) {
+                // Use the specified private subnetIds.
                 return Promise.resolve(c.privateSubnetIds);
             }
-            else if (c.publicSubnetIds !== undefined) { // Use the specified public subnetIds.
+            else if (c.publicSubnetIds !== undefined) {
+                // Use the specified public subnetIds.
                 return Promise.resolve(c.publicSubnetIds);
             }
             else {
@@ -358,18 +376,19 @@ ${customUserData}
     if (args.spotPrice) {
         minInstancesInService = 0;
     }
-    const autoScalingGroupTags = pulumi.all([
-        eksCluster.name,
-        args.autoScalingGroupTags,
-    ]).apply(([clusterName, asgTags]) => (Object.assign({ "Name": `${clusterName}-worker`, [`kubernetes.io/cluster/${clusterName}`]: "owned" }, asgTags)));
-    const cfnTemplateBody = pulumi.all([
+    const autoScalingGroupTags = pulumi
+        .all([eksCluster.name, args.autoScalingGroupTags])
+        .apply(([clusterName, asgTags]) => (Object.assign({ Name: `${clusterName}-worker`, [`kubernetes.io/cluster/${clusterName}`]: "owned" }, asgTags)));
+    const cfnTemplateBody = pulumi
+        .all([
         nodeLaunchConfiguration.id,
         args.desiredCapacity,
         args.minSize,
         args.maxSize,
         tagsToAsgTags(autoScalingGroupTags),
         workerSubnetIds.apply(JSON.stringify),
-    ]).apply(([launchConfig, desiredCapacity, minSize, maxSize, asgTags, vpcSubnetIds]) => `
+    ])
+        .apply(([launchConfig, desiredCapacity, minSize, maxSize, asgTags, vpcSubnetIds]) => `
                 AWSTemplateFormatVersion: '2010-09-09'
                 Outputs:
                     NodeGroup:
@@ -393,12 +412,9 @@ ${customUserData}
     const cfnStack = new aws.cloudformation.Stack(`${name}-nodes`, {
         name: cfnStackName,
         templateBody: cfnTemplateBody,
-        tags: pulumi.all([
-            core.tags,
-            args.cloudFormationTags,
-        ]).apply(([tags, cloudFormationTags]) => (Object.assign(Object.assign({ "Name": `${name}-nodes` }, cloudFormationTags), tags))),
+        tags: pulumi.all([core.tags, args.cloudFormationTags]).apply(([tags, cloudFormationTags]) => (Object.assign(Object.assign({ Name: `${name}-nodes` }, cloudFormationTags), tags))),
     }, { parent, dependsOn: cfnStackDeps, provider });
-    const autoScalingGroupName = cfnStack.outputs.apply(outputs => {
+    const autoScalingGroupName = cfnStack.outputs.apply((outputs) => {
         if (!("NodeGroup" in outputs)) {
             throw new Error("CloudFormation stack is not ready. Stack output key 'NodeGroup' does not exist.");
         }
@@ -424,14 +440,14 @@ function createNodeGroupV2(name, args, parent, provider) {
 exports.createNodeGroupV2 = createNodeGroupV2;
 function createNodeGroupV2Internal(name, args, core, parent, provider) {
     var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
-    const instanceProfileArn = core.apply(c => {
+    const instanceProfileArn = core.apply((c) => {
         var _a, _b;
         if (!args.instanceProfile && !c.nodeGroupOptions.instanceProfile) {
             throw new Error(`an instanceProfile is required`);
         }
         return (_b = (_a = args.instanceProfile) === null || _a === void 0 ? void 0 : _a.arn) !== null && _b !== void 0 ? _b : c.nodeGroupOptions.instanceProfile.arn;
     });
-    core.apply(c => {
+    core.apply((c) => {
         if (c.nodeGroupOptions.nodeSecurityGroup && args.nodeSecurityGroup) {
             if (c.nodeSecurityGroupTags &&
                 c.nodeGroupOptions.nodeSecurityGroup.id !== args.nodeSecurityGroup.id) {
@@ -445,12 +461,17 @@ function createNodeGroupV2Internal(name, args, core, parent, provider) {
     if (args.amiId && args.gpu) {
         throw new Error("amiId and gpu are mutually exclusive.");
     }
-    if (args.nodeUserDataOverride && (args.nodeUserData || args.labels || args.taints || args.kubeletExtraArgs || args.bootstrapExtraArgs)) {
+    if (args.nodeUserDataOverride &&
+        (args.nodeUserData ||
+            args.labels ||
+            args.taints ||
+            args.kubeletExtraArgs ||
+            args.bootstrapExtraArgs)) {
         throw new Error("nodeUserDataOverride and any combination of {nodeUserData, labels, taints, kubeletExtraArgs, or bootstrapExtraArgs} is mutually exclusive.");
     }
     let nodeSecurityGroup;
     const eksCluster = core.cluster;
-    const nodeGroupDeps = core.apply(c => {
+    const nodeGroupDeps = core.apply((c) => {
         const result = [];
         if (c.vpcCni !== undefined) {
             result.push(c.vpcCni);
@@ -472,18 +493,23 @@ function createNodeGroupV2Internal(name, args, core, parent, provider) {
             vpcId: core.vpcId,
             clusterSecurityGroup: core.clusterSecurityGroup,
             eksCluster: eksCluster,
-            tags: core.apply(c => (Object.assign(Object.assign({}, c.nodeSecurityGroupTags), c.tags))),
+            tags: core.apply((c) => (Object.assign(Object.assign({}, c.nodeSecurityGroupTags), c.tags))),
         }, parent);
     }
     // This apply is necessary in s.t. the launchConfiguration picks up a
     // dependency on the eksClusterIngressRule. The nodes may fail to
     // connect to the cluster if we attempt to create them before the
     // ingress rule is applied.
-    const nodeSecurityGroupId = pulumi.all([nodeSecurityGroup.id, eksClusterIngressRule.id])
+    const nodeSecurityGroupId = pulumi
+        .all([nodeSecurityGroup.id, eksClusterIngressRule.id])
         .apply(([id]) => id);
     // Collect the IDs of any extra, user-specific security groups.
-    const extraNodeSecurityGroupIds = args.extraNodeSecurityGroups ? args.extraNodeSecurityGroups.map(sg => sg.id) : [];
-    const extraNodeSecurityGroupNames = args.extraNodeSecurityGroups ? args.extraNodeSecurityGroups.map(sg => sg.name) : [];
+    const extraNodeSecurityGroupIds = args.extraNodeSecurityGroups
+        ? args.extraNodeSecurityGroups.map((sg) => sg.id)
+        : [];
+    const extraNodeSecurityGroupNames = args.extraNodeSecurityGroups
+        ? args.extraNodeSecurityGroups.map((sg) => sg.name)
+        : [];
     // If requested, add a new EC2 KeyPair for SSH access to the instances.
     let keyName = args.keyName;
     if (args.nodePublicKey) {
@@ -514,7 +540,7 @@ function createNodeGroupV2Internal(name, args, core, parent, provider) {
             kubeletExtraArgs.push("--register-with-taints=" + parts.join(","));
         }
     }
-    let bootstrapExtraArgs = args.bootstrapExtraArgs ? (" " + args.bootstrapExtraArgs) : "";
+    let bootstrapExtraArgs = args.bootstrapExtraArgs ? " " + args.bootstrapExtraArgs : "";
     if (kubeletExtraArgs.length === 1) {
         // For backward compatibility with previous versions of this package, don't wrap a single argument with `''`.
         bootstrapExtraArgs += ` --kubelet-extra-args ${kubeletExtraArgs[0]}`;
@@ -522,8 +548,17 @@ function createNodeGroupV2Internal(name, args, core, parent, provider) {
     else if (kubeletExtraArgs.length > 1) {
         bootstrapExtraArgs += ` --kubelet-extra-args '${kubeletExtraArgs.join(" ")}'`;
     }
-    const userdata = pulumi.all([awsRegion, eksCluster.name, eksCluster.endpoint, eksCluster.certificateAuthority, name, userDataArg, args.nodeUserDataOverride])
-        .apply(([region, clusterName, clusterEndpoint, clusterCa, stackName, customUserData, nodeUserDataOverride]) => {
+    const userdata = pulumi
+        .all([
+        awsRegion,
+        eksCluster.name,
+        eksCluster.endpoint,
+        eksCluster.certificateAuthority,
+        name,
+        userDataArg,
+        args.nodeUserDataOverride,
+    ])
+        .apply(([region, clusterName, clusterEndpoint, clusterCa, stackName, customUserData, nodeUserDataOverride,]) => {
         if (nodeUserDataOverride !== undefined && nodeUserDataOverride !== "") {
             return nodeUserDataOverride;
         }
@@ -540,13 +575,14 @@ chmod +x /opt/user-data
 /etc/eks/bootstrap.sh --apiserver-endpoint "${clusterEndpoint}" --b64-cluster-ca "${clusterCa.data}" "${clusterName}"${bootstrapExtraArgs}
 ${customUserData}
 `;
-    }).apply(x => Buffer.from(x, "utf-8").toString("base64")); // Launch Templates require user data to be passed as base64.
+    })
+        .apply((x) => Buffer.from(x, "utf-8").toString("base64")); // Launch Templates require user data to be passed as base64.
     const version = pulumi.output(args.version || core.cluster.version);
     // https://docs.aws.amazon.com/eks/latest/userguide/retrieve-ami-id.html
     let amiId = args.amiId;
     if (!amiId) {
         const amiType = ((_a = args.amiType) !== null && _a !== void 0 ? _a : args.gpu) ? "amazon-linux-2-gpu" : "amazon-linux-2";
-        amiId = version.apply(v => {
+        amiId = version.apply((v) => {
             const parameterName = `/aws/service/eks/optimized-ami/${v}/${amiType}/recommended/image_id`;
             return pulumi.output(aws.ssm.getParameter({ name: parameterName }, { parent, async: true })).value;
         });
@@ -558,7 +594,7 @@ ${customUserData}
     if (args.nodeAssociatePublicIpAddress !== undefined) {
         nodeAssociatePublicIpAddress = args.nodeAssociatePublicIpAddress;
     }
-    const numeric = new RegExp("^\d+$");
+    const numeric = new RegExp("^d+$");
     if (args.nodeRootVolumeIops && args.nodeRootVolumeType !== "io1") {
         throw new Error("Cannot create a cluster node root volume of non-io1 type with provisioned IOPS (nodeRootVolumeIops).");
     }
@@ -575,13 +611,15 @@ ${customUserData}
             throw new Error("Cannot create a cluster node root volume of gp3 type without provisioned throughput (nodeRootVolumeThroughput) as integer value.");
         }
     }
-    const marketOptions = args.spotPrice ? {
-        marketType: "spot",
-        spotOptions: {
-            maxPrice: args.spotPrice,
-        },
-    } : {};
-    const device = pulumi.output(amiId).apply(id => aws.ec2.getAmi({
+    const marketOptions = args.spotPrice
+        ? {
+            marketType: "spot",
+            spotOptions: {
+                maxPrice: args.spotPrice,
+            },
+        }
+        : {};
+    const device = pulumi.output(amiId).apply((id) => aws.ec2.getAmi({
         owners: ["self", "amazon"],
         filters: [
             {
@@ -589,14 +627,15 @@ ${customUserData}
                 values: [id],
             },
         ],
-    })).blockDeviceMappings[0].deviceName;
+    }, { parent })).blockDeviceMappings[0].deviceName;
     const nodeLaunchTemplate = new aws.ec2.LaunchTemplate(`${name}-launchTemplate`, {
         imageId: amiId,
         instanceType: args.instanceType || "t2.medium",
         iamInstanceProfile: { arn: instanceProfileArn },
         keyName: keyName,
         instanceMarketOptions: marketOptions,
-        blockDeviceMappings: [{
+        blockDeviceMappings: [
+            {
                 deviceName: device,
                 ebs: {
                     encrypted: ((_d = args.nodeRootVolumeEncrypted) !== null && _d !== void 0 ? _d : false) ? "true" : "false",
@@ -606,25 +645,32 @@ ${customUserData}
                     throughput: args.nodeRootVolumeThroughput,
                     deleteOnTermination: ((_g = args.nodeRootVolumeDeleteOnTermination) !== null && _g !== void 0 ? _g : true) ? "true" : "false",
                 },
-            }],
-        networkInterfaces: [{
+            },
+        ],
+        networkInterfaces: [
+            {
                 associatePublicIpAddress: String(nodeAssociatePublicIpAddress),
                 securityGroups: [nodeSecurityGroupId, ...extraNodeSecurityGroupIds],
-            }],
+            },
+        ],
+        metadataOptions: args.metadataOptions,
         userData: userdata,
         tagSpecifications: args.launchTemplateTagSpecifications,
     }, { parent, provider });
     // Compute the worker node group subnets to use from the various approaches.
     let workerSubnetIds;
-    if (args.nodeSubnetIds !== undefined) { // Use the specified override subnetIds.
+    if (args.nodeSubnetIds !== undefined) {
+        // Use the specified override subnetIds.
         workerSubnetIds = pulumi.output(args.nodeSubnetIds);
     }
     else {
-        workerSubnetIds = core.apply(c => {
-            if (c.privateSubnetIds !== undefined) { // Use the specified private subnetIds.
+        workerSubnetIds = core.apply((c) => {
+            if (c.privateSubnetIds !== undefined) {
+                // Use the specified private subnetIds.
                 return Promise.resolve(c.privateSubnetIds);
             }
-            else if (c.publicSubnetIds !== undefined) { // Use the specified public subnetIds.
+            else if (c.publicSubnetIds !== undefined) {
+                // Use the specified public subnetIds.
                 return Promise.resolve(c.publicSubnetIds);
             }
             else {
@@ -633,8 +679,10 @@ ${customUserData}
             }
         });
     }
-    const asgTags = pulumi.all([eksCluster.name, args.autoScalingGroupTags]).apply(([clusterName, tags]) => inputTagsToASGTags(clusterName, tags));
-    const launchTemplateVersion = nodeLaunchTemplate.latestVersion.apply(v => v.toString());
+    const asgTags = pulumi
+        .all([eksCluster.name, args.autoScalingGroupTags])
+        .apply(([clusterName, tags]) => inputTagsToASGTags(clusterName, tags));
+    const launchTemplateVersion = nodeLaunchTemplate.latestVersion.apply((v) => v.toString());
     const asGroup = new aws.autoscaling.Group(name, {
         name: name,
         minSize: (_h = args === null || args === void 0 ? void 0 : args.minSize) !== null && _h !== void 0 ? _h : 1,
@@ -652,6 +700,7 @@ ${customUserData}
             },
         },
         tags: asgTags,
+        defaultInstanceWarmup: args.defaultInstanceWarmup,
     }, { parent, dependsOn: nodeGroupDeps, provider });
     return {
         nodeSecurityGroup: nodeSecurityGroup,
@@ -695,8 +744,8 @@ function computeWorkerSubnets(parent, subnetIds) {
             // Fetch the route table for this subnet.
             const routeTable = yield getRouteTableAsync(parent, subnetId);
             // Once we have the route table, check its list of routes for a route to an internet gateway.
-            const hasInternetGatewayRoute = routeTable.routes
-                .find(r => !!r.gatewayId && !isPrivateCIDRBlock(r.cidrBlock)) !== undefined;
+            const hasInternetGatewayRoute = routeTable.routes.find((r) => !!r.gatewayId && !isPrivateCIDRBlock(r.cidrBlock)) !==
+                undefined;
             if (hasInternetGatewayRoute) {
                 publicSubnets.push(subnetId);
             }
@@ -723,10 +772,12 @@ function getRouteTableAsync(parent, subnetId) {
             const subnet = yield aws.ec2.getSubnet({ id: subnetId }, invokeOpts);
             const mainRouteTableInfo = yield aws.ec2.getRouteTables({
                 vpcId: subnet.vpcId,
-                filters: [{
+                filters: [
+                    {
                         name: "association.main",
                         values: ["true"],
-                    }],
+                    },
+                ],
             }, invokeOpts);
             return yield aws.ec2.getRouteTable({ routeTableId: mainRouteTableInfo.ids[0] }, invokeOpts);
         }
@@ -740,13 +791,13 @@ function isPrivateCIDRBlock(cidrBlock) {
     const privateA = new netmask.Netmask("10.0.0.0/8");
     const privateB = new netmask.Netmask("172.16.0.0/12");
     const privateC = new netmask.Netmask("192.168.0.0/16");
-    return privateA.contains(cidrBlock) || privateB.contains(cidrBlock) || privateC.contains(cidrBlock);
+    return (privateA.contains(cidrBlock) || privateB.contains(cidrBlock) || privateC.contains(cidrBlock));
 }
 /**
  * Iterates through the tags map creating AWS ASG-style tags
  */
 function tagsToAsgTags(tagsInput) {
-    return pulumi.output(tagsInput).apply(tags => {
+    return pulumi.output(tagsInput).apply((tags) => {
         let output = "";
         for (const tag of Object.keys(tags)) {
             output += `
@@ -796,8 +847,9 @@ class ManagedNodeGroupInternal extends pulumi.ComponentResource {
             return;
         }
         super(type, name, args, opts);
-        const core = pulumi.output(args.cluster)
-            .apply(c => c instanceof cluster_1.ClusterInternal ? c.core : c);
+        const core = pulumi
+            .output(args.cluster)
+            .apply((c) => (c instanceof cluster_1.ClusterInternal ? c.core : c));
         const group = createManagedNodeGroupInternal(name, args, core, this, opts === null || opts === void 0 ? void 0 : opts.provider);
         this.nodeGroup = pulumi.output(group);
         this.registerOutputs({
@@ -830,30 +882,24 @@ function createManagedNodeGroupInternal(name, args, core, parent, provider) {
         roleArn = args.nodeRoleArn;
     }
     else if (args.nodeRole) {
-        roleArn = pulumi.output(args.nodeRole).apply(r => r.arn);
+        roleArn = pulumi.output(args.nodeRole).apply((r) => r.arn);
     }
     else {
         throw new Error("The managed node group role provided is undefined");
     }
     // Check that the nodegroup role has been set on the cluster to
     // ensure that the aws-auth configmap was properly formed.
-    const nodegroupRole = pulumi.all([
-        core.instanceRoles,
-        roleArn,
-    ]).apply(([roles, rArn]) => {
+    const nodegroupRole = pulumi.all([core.instanceRoles, roleArn]).apply(([roles, rArn]) => {
         // Map out the ARNs of all of the instanceRoles.
-        const roleArns = roles.map(role => {
+        const roleArns = roles.map((role) => {
             return role.arn;
         });
         // Try finding the nodeRole in the ARNs array.
-        return pulumi.all([
-            roleArns,
-            rArn,
-        ]).apply(([arns, arn]) => {
-            return arns.find(a => a === arn);
+        return pulumi.all([roleArns, rArn]).apply(([arns, arn]) => {
+            return arns.find((a) => a === arn);
         });
     });
-    nodegroupRole.apply(role => {
+    nodegroupRole.apply((role) => {
         if (!role) {
             throw new Error(`A managed node group cannot be created without first setting its role in the cluster's instanceRoles`);
         }
@@ -864,7 +910,7 @@ function createManagedNodeGroupInternal(name, args, core, parent, provider) {
         subnetIds = pulumi.output(args.subnetIds);
     }
     else {
-        subnetIds = core.apply(c => {
+        subnetIds = core.apply((c) => {
             if (c.subnetIds !== undefined) {
                 return c.subnetIds;
             }
@@ -885,11 +931,9 @@ function createManagedNodeGroupInternal(name, args, core, parent, provider) {
         delete nodeGroupArgs.cluster;
     }
     // Make the aws-auth configmap a dependency of the node group.
-    const ngDeps = core.apply(c => c.eksNodeAccess !== undefined ? [c.eksNodeAccess] : []);
+    const ngDeps = core.apply((c) => (c.eksNodeAccess !== undefined ? [c.eksNodeAccess] : []));
     // Create the managed node group.
-    const nodeGroup = new aws.eks.NodeGroup(name, Object.assign(Object.assign({}, nodeGroupArgs), { clusterName: args.clusterName || core.cluster.name, nodeRoleArn: roleArn, scalingConfig: pulumi.all([
-            args.scalingConfig,
-        ]).apply(([config]) => {
+    const nodeGroup = new aws.eks.NodeGroup(name, Object.assign(Object.assign({}, nodeGroupArgs), { clusterName: args.clusterName || core.cluster.name, nodeRoleArn: roleArn, scalingConfig: pulumi.all([args.scalingConfig]).apply(([config]) => {
             var _a, _b, _c;
             const desiredSize = (_a = config === null || config === void 0 ? void 0 : config.desiredSize) !== null && _a !== void 0 ? _a : 2;
             const minSize = (_b = config === null || config === void 0 ? void 0 : config.minSize) !== null && _b !== void 0 ? _b : 1;