@pulumi/eks 2.8.1 → 2.9.0-alpha.1727304793

package/cni.d.ts

@@ -1,177 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-/**
- * VpcCniOptions describes the configuration options available for the Amazon VPC CNI plugin for Kubernetes.
- */
-export interface VpcCniOptions {
-    /**
-     * Specifies whether NodePort services are enabled on a worker node's primary network interface. This requires
-     * additional iptables rules and that the kernel's reverse path filter on the primary interface is set to loose.
-     *
-     * Defaults to true.
-     */
-    nodePortSupport?: pulumi.Input<boolean>;
-    /**
-     * Specifies that your pods may use subnets and security groups (within the same VPC as your control plane
-     * resources) that are independent of your cluster's `resourcesVpcConfig`.
-     *
-     * Defaults to false.
-     */
-    customNetworkConfig?: pulumi.Input<boolean>;
-    /**
-     * Specifies whether an external NAT gateway should be used to provide SNAT of secondary ENI IP addresses. If set
-     * to true, the SNAT iptables rule and off-VPC IP rule are not applied, and these rules are removed if they have
-     * already been applied.
-     *
-     * Defaults to false.
-     */
-    externalSnat?: pulumi.Input<boolean>;
-    /**
-     * Specifies the number of free elastic network interfaces (and all of their available IP addresses) that the ipamD
-     * daemon should attempt to keep available for pod assignment on the node.
-     *
-     * Defaults to 1.
-     */
-    warmEniTarget?: pulumi.Input<number>;
-    /**
-     * Specifies the number of free IP addresses that the ipamD daemon should attempt to keep available for pod
-     * assignment on the node.
-     */
-    warmIpTarget?: pulumi.Input<number>;
-    /**
-     * WARM_PREFIX_TARGET will allocate one full (/28) prefix even if a single IP is consumed with the existing prefix.
-     * Ref: https://github.com/aws/amazon-vpc-cni-k8s/blob/master/docs/prefix-and-ip-target.md
-     */
-    warmPrefixTarget?: pulumi.Input<number>;
-    /**
-     * IPAMD will start allocating (/28) prefixes to the ENIs with ENABLE_PREFIX_DELEGATION set to true.
-     * Ref: https://github.com/aws/amazon-vpc-cni-k8s/blob/master/docs/prefix-and-ip-target.md
-     */
-    enablePrefixDelegation?: pulumi.Input<boolean>;
-    /**
-     * VPC CNI can operate in either IPv4 or IPv6 mode. Setting ENABLE_IPv6 to true. will configure it in IPv6 mode.
-     * Note that IPv6 is only supported in Prefix Delegation mode so enablePrefixDelegation must also be set.
-     *
-     * Ref: https://github.com/aws/amazon-vpc-cni-k8s/blob/master/README.md#enable_ipv6-v1100
-     */
-    enableIpv6?: pulumi.Input<boolean>;
-    /**
-     * Specifies the log level used for logs.
-     *
-     * Defaults to "DEBUG".
-     * See more options: https://git.io/fj92K
-     */
-    logLevel?: pulumi.Input<string>;
-    /**
-     * Specifies the file path used for logs.
-     *
-     * Defaults to "stdout" to emit Pod logs for `kubectl logs`.
-     */
-    logFile?: pulumi.Input<string>;
-    /**
-     * Specifies the aws-node container image to use in the AWS CNI cluster DaemonSet.
-     *
-     * Defaults to the official AWS CNI image in ECR.
-     */
-    image?: pulumi.Input<string>;
-    /**
-     * Specifies the aws-eks-nodeagent container image to use in the AWS CNI cluster DaemonSet.
-     *
-     * Defaults to the official AWS CNI image in ECR.
-     */
-    nodeAgentImage?: pulumi.Input<string>;
-    /**
-     * Specifies the init container image to use in the AWS CNI cluster DaemonSet.
-     *
-     * Defaults to the official AWS CNI init container image in ECR.
-     */
-    initImage?: pulumi.Input<string>;
-    /**
-     * Specifies the veth prefix used to generate the host-side veth device
-     * name for the CNI.
-     *
-     * The prefix can be at most 4 characters long.
-     *
-     * Defaults to "eni".
-     */
-    vethPrefix?: pulumi.Input<string>;
-    /**
-     * Used to configure the MTU size for attached ENIs. The valid range is
-     * from 576 to 9001.
-     *
-     * Defaults to 9001.
-     */
-    eniMtu?: pulumi.Input<number>;
-    eniConfigLabelDef?: pulumi.Input<string>;
-    /**
-     * Specifies the log level used for plugin logs.
-     *
-     * Defaults to "DEBUG".
-     */
-    pluginLogLevel?: pulumi.Input<string>;
-    /**
-     * Specifies the file path used for plugin logs.
-     *
-     * Defaults to "stdout" to emit Plugin logs.
-     */
-    pluginLogFile?: pulumi.Input<string>;
-    /**
-     * Specifies whether to allow IPAMD to add the `vpc.amazonaws.com/has-trunk-attached` label to the node if the
-     * instance has capacity to attach an additional ENI.
-     *
-     * If using liveness and readiness probes, you will also need to disable TCP early demux.
-     *
-     * Defaults to "false".
-     */
-    enablePodEni?: pulumi.Input<boolean>;
-    /**
-     * Allows the kubelet's liveness and readiness probes to connect via TCP when pod ENI is enabled.
-     * This will slightly increase local TCP connection latency.
-     *
-     * Defaults to "false".
-     */
-    disableTcpEarlyDemux?: pulumi.Input<boolean>;
-    /**
-     * Specifies whether ipamd should configure rp filter for primary interface.
-     *
-     * Defaults to "false".
-     */
-    cniConfigureRpfilter?: pulumi.Input<boolean>;
-    /**
-     * Specifies that your pods may use subnets and security groups that are independent of your worker node's
-     * VPC configuration. By default, pods share the same subnet and security groups as the worker node's primary
-     * interface. Setting this variable to true causes ipamd to use the security groups and VPC subnet in a worker
-     * node's ENIConfig for elastic network interface allocation. You must create an ENIConfig custom resource for
-     * each subnet that your pods will reside in, and then annotate or label each worker node to use a specific
-     * ENIConfig (multiple worker nodes can be annotated or labelled with the same ENIConfig). Worker nodes can only
-     * be annotated with a single ENIConfig at a time, and the subnet in the ENIConfig must belong to the same
-     * Availability Zone that the worker node resides in. For more information, see CNI Custom Networking in the
-     * Amazon EKS User Guide.
-     *
-     * Defaults to "false".
-     */
-    cniCustomNetworkCfg?: pulumi.Input<boolean>;
-    /**
-     * Specifies whether an external NAT gateway should be used to provide SNAT of secondary ENI IP addresses. If set
-     * to true, the SNAT iptables rule and off-VPC IP rule are not applied, and these rules are removed if they have
-     * already been applied. Disable SNAT if you need to allow inbound communication to your pods from external VPNs,
-     * direct connections, and external VPCs, and your pods do not need to access the Internet directly via an Internet
-     * Gateway. However, your nodes must be running in a private subnet and connected to the internet through an AWS NAT
-     * Gateway or another external NAT device.
-     *
-     * Defaults to "false".
-     */
-    cniExternalSnat?: pulumi.Input<boolean>;
-    /**
-     * Pass privilege to containers securityContext
-     * this is required when SELinux is enabled
-     * This value will not be passed to the CNI config by default
-     */
-    securityContextPrivileged?: pulumi.Input<boolean>;
-}
-/**
- * VpcCni manages the configuration of the Amazon VPC CNI plugin for Kubernetes by applying its YAML chart. Once Pulumi is
- * able to programatically manage existing infrastructure, we can replace this with a real k8s resource.
- */
-export declare class VpcCni extends pulumi.CustomResource {
-    constructor(name: string, kubeconfig: pulumi.Input<any>, args?: VpcCniOptions, opts?: pulumi.CustomResourceOptions);
-}

package/cni.js

@@ -1,64 +0,0 @@
-"use strict";
-// Copyright 2016-2019, Pulumi Corporation.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VpcCni = void 0;
-const pulumi = require("@pulumi/pulumi");
-const utilities = require("./utilities");
-// Dynamic providers don't currently work well with multi-language components [1]. To workaround this, the
-// dynamic providers in this library have been ported to be custom resources implemented by the new provider
-// plugin. An alias is used and care has been taken in the implementation inside the provider to avoid any
-// diffs for any existing stacks that were created using the old dynamic provider.
-// [1] https://github.com/pulumi/pulumi/issues/5455
-/**
- * VpcCni manages the configuration of the Amazon VPC CNI plugin for Kubernetes by applying its YAML chart. Once Pulumi is
- * able to programatically manage existing infrastructure, we can replace this with a real k8s resource.
- */
-class VpcCni extends pulumi.CustomResource {
-    constructor(name, kubeconfig, args, opts) {
-        const defaultOpts = {
-            version: utilities.getVersion(),
-            // This was previously implemented as a dynamic provider, so alias the old type.
-            aliases: [{ type: "pulumi-nodejs:dynamic:Resource" }],
-        };
-        opts = pulumi.mergeOptions(opts, defaultOpts);
-        super("eks:index:VpcCni", name, {
-            kubeconfig: kubeconfig,
-            nodePortSupport: args === null || args === void 0 ? void 0 : args.nodePortSupport,
-            customNetworkConfig: args === null || args === void 0 ? void 0 : args.customNetworkConfig,
-            externalSnat: args === null || args === void 0 ? void 0 : args.externalSnat,
-            warmEniTarget: args === null || args === void 0 ? void 0 : args.warmEniTarget,
-            warmIpTarget: args === null || args === void 0 ? void 0 : args.warmIpTarget,
-            enablePrefixDelegation: args === null || args === void 0 ? void 0 : args.enablePrefixDelegation,
-            enableIpv6: args === null || args === void 0 ? void 0 : args.enableIpv6,
-            warmPrefixTarget: args === null || args === void 0 ? void 0 : args.warmPrefixTarget,
-            logLevel: args === null || args === void 0 ? void 0 : args.logLevel,
-            logFile: args === null || args === void 0 ? void 0 : args.logFile,
-            image: args === null || args === void 0 ? void 0 : args.image,
-            nodeAgentImage: args === null || args === void 0 ? void 0 : args.nodeAgentImage,
-            initImage: args === null || args === void 0 ? void 0 : args.initImage,
-            eniConfigLabelDef: args === null || args === void 0 ? void 0 : args.eniConfigLabelDef,
-            pluginLogLevel: args === null || args === void 0 ? void 0 : args.pluginLogLevel,
-            pluginLogFile: args === null || args === void 0 ? void 0 : args.pluginLogFile,
-            enablePodEni: args === null || args === void 0 ? void 0 : args.enablePodEni,
-            disableTcpEarlyDemux: args === null || args === void 0 ? void 0 : args.disableTcpEarlyDemux,
-            cniConfigureRpfilter: args === null || args === void 0 ? void 0 : args.cniConfigureRpfilter,
-            cniCustomNetworkCfg: args === null || args === void 0 ? void 0 : args.cniCustomNetworkCfg,
-            cniExternalSnat: args === null || args === void 0 ? void 0 : args.cniExternalSnat,
-            securityContextPrivileged: args === null || args === void 0 ? void 0 : args.securityContextPrivileged,
-        }, opts);
-    }
-}
-exports.VpcCni = VpcCni;
-//# sourceMappingURL=cni.js.map

package/cni.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cni.js","sourceRoot":"","sources":["../cni.ts"],"names":[],"mappings":";AAAA,2CAA2C;AAC3C,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;;;AAEjC,yCAAyC;AACzC,yCAAyC;AAyMzC,0GAA0G;AAC1G,4GAA4G;AAC5G,0GAA0G;AAC1G,kFAAkF;AAClF,mDAAmD;AAEnD;;;GAGG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C,YACI,IAAY,EACZ,UAA6B,EAC7B,IAAoB,EACpB,IAAmC;QAEnC,MAAM,WAAW,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;YAC/B,gFAAgF;YAChF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;SACxD,CAAC;QACF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,KAAK,CACD,kBAAkB,EAClB,IAAI,EACJ;YACI,UAAU,EAAE,UAAU;YACtB,eAAe,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe;YACtC,mBAAmB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,mBAAmB;YAC9C,YAAY,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY;YAChC,aAAa,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa;YAClC,YAAY,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY;YAChC,sBAAsB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,sBAAsB;YACpD,UAAU,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU;YAC5B,gBAAgB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,gBAAgB;YACxC,QAAQ,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ;YACxB,OAAO,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO;YACtB,KAAK,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK;YAClB,cAAc,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc;YACpC,SAAS,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS;YAC1B,iBAAiB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB;YAC1C,cAAc,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc;YACpC,aAAa,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa;YAClC,YAAY,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY;YAChC,oBAAoB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB;YAChD,oBAAoB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB;YAChD,mBAAmB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,mBAAmB;YAC9C,eAAe,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe;YACtC,yBAAyB,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,yBAAyB;SAC7D,EACD,IAAI,CACP,CAAC;IACN,CAAC;CACJ;AA5CD,wBA4CC"}

package/dashboard/heapster-rbac.yaml

@@ -1,12 +0,0 @@
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1beta1
-metadata:
-    name: heapster
-roleRef:
-    apiGroup: rbac.authorization.k8s.io
-    kind: ClusterRole
-    name: system:heapster
-subjects:
-    - kind: ServiceAccount
-      name: heapster
-      namespace: kube-system

package/dashboard/heapster.yaml

@@ -1,46 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-    name: heapster
-    namespace: kube-system
----
-apiVersion: extensions/v1beta1
-kind: Deployment
-metadata:
-    name: heapster
-    namespace: kube-system
-spec:
-    replicas: 1
-    template:
-        metadata:
-            labels:
-                task: monitoring
-                k8s-app: heapster
-        spec:
-            serviceAccountName: heapster
-            containers:
-                - name: heapster
-                  image: k8s.gcr.io/heapster-amd64:v1.5.4
-                  imagePullPolicy: IfNotPresent
-                  command:
-                      - /heapster
-                      - --source=kubernetes:https://kubernetes.default
-                      - --sink=influxdb:http://monitoring-influxdb.kube-system.svc:8086
----
-apiVersion: v1
-kind: Service
-metadata:
-    labels:
-        task: monitoring
-        # For use as a Cluster add-on (https://github.com/kubernetes/kubernetes/tree/master/cluster/addons)
-        # If you are NOT using this as an addon, you should comment out this line.
-        kubernetes.io/cluster-service: "true"
-        kubernetes.io/name: Heapster
-    name: heapster
-    namespace: kube-system
-spec:
-    ports:
-        - port: 80
-          targetPort: 8082
-    selector:
-        k8s-app: heapster

package/dashboard/influxdb.yaml

@@ -1,40 +0,0 @@
-apiVersion: extensions/v1beta1
-kind: Deployment
-metadata:
-    name: monitoring-influxdb
-    namespace: kube-system
-spec:
-    replicas: 1
-    template:
-        metadata:
-            labels:
-                task: monitoring
-                k8s-app: influxdb
-        spec:
-            containers:
-                - name: influxdb
-                  image: k8s.gcr.io/heapster-influxdb-amd64:v1.5.2
-                  volumeMounts:
-                      - mountPath: /data
-                        name: influxdb-storage
-            volumes:
-                - name: influxdb-storage
-                  emptyDir: {}
----
-apiVersion: v1
-kind: Service
-metadata:
-    labels:
-        task: monitoring
-        # For use as a Cluster add-on (https://github.com/kubernetes/kubernetes/tree/master/cluster/addons)
-        # If you are NOT using this as an addon, you should comment out this line.
-        kubernetes.io/cluster-service: "true"
-        kubernetes.io/name: monitoring-influxdb
-    name: monitoring-influxdb
-    namespace: kube-system
-spec:
-    ports:
-        - port: 8086
-          targetPort: 8086
-    selector:
-        k8s-app: influxdb

package/dashboard/kubernetes-dashboard.yaml

@@ -1,167 +0,0 @@
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Configuration to deploy release version of the Dashboard UI compatible with
-# Kubernetes 1.8.
-#
-# Example usage: kubectl create -f <this_file>
-
-# ------------------- Dashboard Secret ------------------- #
-
-apiVersion: v1
-kind: Secret
-metadata:
-    labels:
-        k8s-app: kubernetes-dashboard
-    name: kubernetes-dashboard-certs
-    namespace: kube-system
-type: Opaque
-
----
-# ------------------- Dashboard Service Account ------------------- #
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-    labels:
-        k8s-app: kubernetes-dashboard
-    name: kubernetes-dashboard
-    namespace: kube-system
-
----
-# ------------------- Dashboard Role & Role Binding ------------------- #
-
-kind: Role
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-    name: kubernetes-dashboard-minimal
-    namespace: kube-system
-rules:
-    # Allow Dashboard to create 'kubernetes-dashboard-key-holder' secret.
-    - apiGroups: [""]
-      resources: ["secrets"]
-      verbs: ["create"]
-      # Allow Dashboard to create 'kubernetes-dashboard-settings' config map.
-    - apiGroups: [""]
-      resources: ["configmaps"]
-      verbs: ["create"]
-      # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
-    - apiGroups: [""]
-      resources: ["secrets"]
-      resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
-      verbs: ["get", "update", "delete"]
-      # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
-    - apiGroups: [""]
-      resources: ["configmaps"]
-      resourceNames: ["kubernetes-dashboard-settings"]
-      verbs: ["get", "update"]
-      # Allow Dashboard to get metrics from heapster.
-    - apiGroups: [""]
-      resources: ["services"]
-      resourceNames: ["heapster"]
-      verbs: ["proxy"]
-    - apiGroups: [""]
-      resources: ["services/proxy"]
-      resourceNames: ["heapster", "http:heapster:", "https:heapster:"]
-      verbs: ["get"]
-
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-    name: kubernetes-dashboard-minimal
-    namespace: kube-system
-roleRef:
-    apiGroup: rbac.authorization.k8s.io
-    kind: Role
-    name: kubernetes-dashboard-minimal
-subjects:
-    - kind: ServiceAccount
-      name: kubernetes-dashboard
-      namespace: kube-system
-
----
-# ------------------- Dashboard Deployment ------------------- #
-
-kind: Deployment
-apiVersion: apps/v1beta2
-metadata:
-    labels:
-        k8s-app: kubernetes-dashboard
-    name: kubernetes-dashboard
-    namespace: kube-system
-spec:
-    replicas: 1
-    revisionHistoryLimit: 10
-    selector:
-        matchLabels:
-            k8s-app: kubernetes-dashboard
-    template:
-        metadata:
-            labels:
-                k8s-app: kubernetes-dashboard
-        spec:
-            containers:
-                - name: kubernetes-dashboard
-                  image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.8.3
-                  ports:
-                      - containerPort: 8443
-                        protocol: TCP
-                  args:
-                      - --auto-generate-certificates
-                      # Uncomment the following line to manually specify Kubernetes API server Host
-                      # If not specified, Dashboard will attempt to auto discover the API server and connect
-                      # to it. Uncomment only if the default does not work.
-                      # - --apiserver-host=http://my-address:port
-                  volumeMounts:
-                      - name: kubernetes-dashboard-certs
-                        mountPath: /certs
-                        # Create on-disk volume to store exec logs
-                      - mountPath: /tmp
-                        name: tmp-volume
-                  livenessProbe:
-                      httpGet:
-                          scheme: HTTPS
-                          path: /
-                          port: 8443
-                      initialDelaySeconds: 30
-                      timeoutSeconds: 30
-            volumes:
-                - name: kubernetes-dashboard-certs
-                  secret:
-                      secretName: kubernetes-dashboard-certs
-                - name: tmp-volume
-                  emptyDir: {}
-            serviceAccountName: kubernetes-dashboard
-            # Comment the following tolerations if Dashboard must not be deployed on master
-            tolerations:
-                - key: node-role.kubernetes.io/master
-                  effect: NoSchedule
-
----
-# ------------------- Dashboard Service ------------------- #
-
-kind: Service
-apiVersion: v1
-metadata:
-    labels:
-        k8s-app: kubernetes-dashboard
-    name: kubernetes-dashboard
-    namespace: kube-system
-spec:
-    ports:
-        - port: 443
-          targetPort: 8443
-    selector:
-        k8s-app: kubernetes-dashboard

package/dashboard.d.ts

@@ -1,5 +0,0 @@
-import * as k8s from "@pulumi/kubernetes";
-import * as pulumi from "@pulumi/pulumi";
-export interface DashboardOptions {
-}
-export declare function createDashboard(name: string, args: DashboardOptions, parent: pulumi.ComponentResource, k8sProvider: k8s.Provider): void;

package/dashboard.js

@@ -1,58 +0,0 @@
-"use strict";
-// Copyright 2016-2019, Pulumi Corporation.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createDashboard = void 0;
-const k8s = require("@pulumi/kubernetes");
-const fs = require("fs");
-const path = require("path");
-function createDashboard(name, args, parent, k8sProvider) {
-    // Deploy the latest version of the k8s dashboard.
-    const dashboardYaml = [
-        path.join(__dirname, "dashboard/kubernetes-dashboard.yaml"),
-        path.join(__dirname, "dashboard/heapster.yaml"),
-        path.join(__dirname, "dashboard/influxdb.yaml"),
-        path.join(__dirname, "dashboard/heapster-rbac.yaml"),
-    ].map((filePath) => fs.readFileSync(filePath).toString());
-    const dashboard = new k8s.yaml.ConfigGroup(`${name}-dashboard`, {
-        yaml: dashboardYaml,
-    }, { parent: parent, providers: { kubernetes: k8sProvider } });
-    // Create a service account for admin access.
-    const adminAccount = new k8s.core.v1.ServiceAccount(`${name}-eks-admin`, {
-        metadata: {
-            name: "eks-admin",
-            namespace: "kube-system",
-        },
-    }, { parent: parent, provider: k8sProvider });
-    // Create a role binding for the admin account.
-    const adminRoleBinding = new k8s.rbac.v1.ClusterRoleBinding(`${name}-eks-admin`, {
-        metadata: {
-            name: "eks-admin",
-        },
-        roleRef: {
-            apiGroup: "rbac.authorization.k8s.io",
-            kind: "ClusterRole",
-            name: "cluster-admin",
-        },
-        subjects: [
-            {
-                kind: "ServiceAccount",
-                name: "eks-admin",
-                namespace: "kube-system",
-            },
-        ],
-    }, { parent: parent, provider: k8sProvider });
-}
-exports.createDashboard = createDashboard;
-//# sourceMappingURL=dashboard.js.map

package/dashboard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../dashboard.ts"],"names":[],"mappings":";AAAA,2CAA2C;AAC3C,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;;;AAEjC,0CAA0C;AAE1C,yBAAyB;AACzB,6BAA6B;AAI7B,SAAgB,eAAe,CAC3B,IAAY,EACZ,IAAsB,EACtB,MAAgC,EAChC,WAAyB;IAEzB,kDAAkD;IAClD,MAAM,aAAa,GAAG;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC;KACvD,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CACtC,GAAG,IAAI,YAAY,EACnB;QACI,IAAI,EAAE,aAAa;KACtB,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,CAC7D,CAAC;IAEF,6CAA6C;IAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAC/C,GAAG,IAAI,YAAY,EACnB;QACI,QAAQ,EAAE;YACN,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,aAAa;SAC3B;KACJ,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC5C,CAAC;IAEF,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CACvD,GAAG,IAAI,YAAY,EACnB;QACI,QAAQ,EAAE;YACN,IAAI,EAAE,WAAW;SACpB;QACD,OAAO,EAAE;YACL,QAAQ,EAAE,2BAA2B;YACrC,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,eAAe;SACxB;QACD,QAAQ,EAAE;YACN;gBACI,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,aAAa;aAC3B;SACJ;KACJ,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC5C,CAAC;AACN,CAAC;AAvDD,0CAuDC"}

package/dependencies.d.ts

@@ -1,2 +0,0 @@
-export declare function assertCompatibleKubectlVersionExists(): void;
-export declare function assertCompatibleAWSCLIExists(): void;

package/dependencies.js

@@ -1,81 +0,0 @@
-"use strict";
-// Copyright 2016-2022, Pulumi Corporation.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertCompatibleAWSCLIExists = exports.assertCompatibleKubectlVersionExists = void 0;
-const childProcess = require("child_process");
-const semver = require("semver");
-const which = require("which");
-const minKubectlVersion = "1.24.0";
-const minAWSCLIV1Version = "1.24.0";
-const minAWSCLIV2Version = "2.7.0";
-function assertCompatibleKubectlVersionExists() {
-    try {
-        which.sync("kubectl");
-    }
-    catch (err) {
-        throw new Error("kubectl is missing. See https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl for installation instructions.");
-    }
-    const kubectlVersionJson = childProcess.execSync(`kubectl version --client=true --output=json`, {
-        stdio: ["pipe", "pipe", "ignore"],
-        encoding: "utf8",
-    });
-    let kctlVersion;
-    try {
-        kctlVersion = JSON.parse(kubectlVersionJson);
-    }
-    catch (err) {
-        throw new Error(`Failed to parse kubectl version JSON output. Received: ${kubectlVersionJson}`);
-    }
-    const kcVersion = semver.clean(kctlVersion.clientVersion.gitVersion, {
-        loose: true,
-    });
-    if (semver.lt(kcVersion, minKubectlVersion)) {
-        throw new Error(`At least v${minKubectlVersion} of kubectl is required.` +
-            ` Current version is: ${kcVersion}. See https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl for instructions on installing the latest.`);
-    }
-}
-exports.assertCompatibleKubectlVersionExists = assertCompatibleKubectlVersionExists;
-function assertCompatibleAWSCLIExists() {
-    try {
-        which.sync("aws");
-    }
-    catch (err) {
-        throw new Error("Could not find aws CLI for EKS. See https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html for installation instructions.");
-    }
-    const awscli = childProcess.execSync(`aws --version`, {
-        stdio: ["pipe", "pipe", "ignore"],
-        encoding: "utf8",
-    });
-    const version = awscli.split(" ")[0].replace("aws-cli/", "");
-    const semverCleaned = semver.clean(version, {
-        loose: true,
-    });
-    switch (semver.major(semverCleaned)) {
-        case 1:
-            if (semver.lt(semverCleaned, minAWSCLIV1Version)) {
-                throw new Error(`At least v${minAWSCLIV1Version} of aws-cli is required.` +
-                    ` Current version is: ${semverCleaned}. See https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html for installation instructions.`);
-            }
-            break;
-        default:
-            if (semver.lt(semverCleaned, minAWSCLIV2Version)) {
-                throw new Error(`At least v${minAWSCLIV2Version} of aws-cli is required.` +
-                    ` Current version is: ${semverCleaned}. See https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html for installation instructions.`);
-            }
-            break;
-    }
-}
-exports.assertCompatibleAWSCLIExists = assertCompatibleAWSCLIExists;
-//# sourceMappingURL=dependencies.js.map