search

pulumi / pulumi-eks

A Pulumi component for easily creating and managing an Amazon EKS Cluster
https://www.pulumi.com/registry/packages/eks/
Apache License 2.0
171 stars 80 forks source link

Add support for cluster authentication mode and access entries #1171

Closed flostadler closed 3 months ago

flostadler commented 4 months ago

Proposed changes

AWS recently introduced a new method for granting IAM principals access to Kubernetes resources called Access Entries. These resources are now the recommended approach for controlling access to EKS clusters.

Previously, the aws-auth ConfigMap was the sole method for mapping IAM principals to Kubernetes RBAC. Now, users can choose between using the ConfigMap (access mode CONFIG_MAP), Access Entries (access mode API), or both (access mode API_AND_CONFIG_MAP).

This PR adds support for the new access modes as described in this internal doc: https://docs.google.com/document/d/1QS7h2E6lVTf8F6eVoHJOX3KowufvbhLqgRFFzTSb-SU/edit#heading=h.3b4er6mf60f5

How to review?

Start by reviewing the schema changes (provider/cmd/pulumi-gen-eks/main.go) and then have a look at the changes to the cluster (nodejs/eks/cluster.ts).

After that have a look at the user facing documentation for migrating between access modes (docs/authentication-mode-migration.md) and the accompanying test for it (examples/tests/authentication-mode-migration/README.md).

Related issues (optional)

Closes #1027

t0yv0 commented 4 months ago

Looks good at first glance! Consider enums 🙏

I was surprised to see there is no sdk/nodejs this provider is very interesting and unusual.

github-actions[bot] commented 4 months ago

Does the PR have any schema changes?

Found 54 breaking changes: Resource "eks:index:NodeGroupV2" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroupV2" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" input "launchTemplateTagSpecifications" items type changed from "/aws/v6.5.0/schema.json#/types/aws:ec2%2FLaunchTemplateTagSpecification:LaunchTemplateTagSpecification" to "/aws/v6.18.2/schema.json#/types/aws:ec2%2FLaunchTemplateTagSpecification:LaunchTemplateTagSpecification" Resource "eks:index:NodeGroupV2" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Resource "eks:index:NodeGroupV2" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" output "autoScalingGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:autoscaling%2Fgroup:Group" to "/aws/v6.18.2/schema.json#/resources/aws:autoscaling%2Fgroup:Group" Resource "eks:index:NodeGroupV2" output "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:Cluster" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:Cluster" input "serviceRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" input "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" input "instanceRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" output "awsProvider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Resource "eks:index:Cluster" output "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:Cluster" output "eksCluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Resource "eks:index:Cluster" output "eksClusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:Cluster" output "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:ClusterCreationRoleProvider" output "role" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:ManagedNodeGroup" input "launchTemplate" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupLaunchTemplate:NodeGroupLaunchTemplate" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupLaunchTemplate:NodeGroupLaunchTemplate" Resource "eks:index:ManagedNodeGroup" input "remoteAccess" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupRemoteAccess:NodeGroupRemoteAccess" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupRemoteAccess:NodeGroupRemoteAccess" Resource "eks:index:ManagedNodeGroup" input "scalingConfig" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupScalingConfig:NodeGroupScalingConfig" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupScalingConfig:NodeGroupScalingConfig" Resource "eks:index:ManagedNodeGroup" input "nodeRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:ManagedNodeGroup" input "taints" items type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupTaint:NodeGroupTaint" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupTaint:NodeGroupTaint" Resource "eks:index:ManagedNodeGroup" output "nodeGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2FnodeGroup:NodeGroup" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2FnodeGroup:NodeGroup" Resource "eks:index:NodeGroup" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Resource "eks:index:NodeGroup" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroup" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" output "cfnStack" type changed from "/aws/v6.5.0/schema.json#/resources/aws:cloudformation%2Fstack:Stack" to "/aws/v6.18.2/schema.json#/resources/aws:cloudformation%2Fstack:Stack" Resource "eks:index:NodeGroup" output "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupSecurityGroup" input "eksCluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Resource "eks:index:NodeGroupSecurityGroup" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupSecurityGroup" output "securityGroupRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroupSecurityGroup" output "securityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:NodeGroupData" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:NodeGroupData" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:NodeGroupData" input "cfnStack" type changed from "/aws/v6.5.0/schema.json#/resources/aws:cloudformation%2Fstack:Stack" to "/aws/v6.18.2/schema.json#/resources/aws:cloudformation%2Fstack:Stack" Type "eks:index:ClusterNodeGroupOptions" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Type "eks:index:ClusterNodeGroupOptions" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:ClusterNodeGroupOptions" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:ClusterNodeGroupOptions" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Type "eks:index:CreationRoleProvider" input "provider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Type "eks:index:CreationRoleProvider" input "role" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:CoreData" input "cluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Type "eks:index:CoreData" input "oidcProvider" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FopenIdConnectProvider:OpenIdConnectProvider" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FopenIdConnectProvider:OpenIdConnectProvider" Type "eks:index:CoreData" input "fargateProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2FfargateProfile:FargateProfile" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2FfargateProfile:FargateProfile" Type "eks:index:CoreData" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:CoreData" input "awsProvider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Type "eks:index:CoreData" input "clusterIamRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:CoreData" input "encryptionConfig" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FClusterEncryptionConfig:ClusterEncryptionConfig" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FClusterEncryptionConfig:ClusterEncryptionConfig" Type "eks:index:CoreData" input "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:FargateProfile" input "selectors" items type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FFargateProfileSelector:FargateProfileSelector" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FFargateProfileSelector:FargateProfileSelector" No new resources/functions.

flostadler commented 4 months ago

The upgrade test failures are expected right now. They complain about a change in the aws provider, which does not skip the metadata API check by default now: https://github.com/pulumi/pulumi-aws/releases/tag/v6.37.1

Once this eks change is released we need to bump the baseline version and then they're green again

github-actions[bot] commented 3 months ago

Does the PR have any schema changes?

Found 54 breaking changes: Resource "eks:index:Cluster" input "instanceRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" input "serviceRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:Cluster" input "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" output "eksClusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:Cluster" output "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:Cluster" output "awsProvider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Resource "eks:index:Cluster" output "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:Cluster" output "eksCluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Resource "eks:index:Cluster" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:ClusterCreationRoleProvider" output "role" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:ManagedNodeGroup" input "nodeRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Resource "eks:index:ManagedNodeGroup" input "taints" items type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupTaint:NodeGroupTaint" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupTaint:NodeGroupTaint" Resource "eks:index:ManagedNodeGroup" input "remoteAccess" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupRemoteAccess:NodeGroupRemoteAccess" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupRemoteAccess:NodeGroupRemoteAccess" Resource "eks:index:ManagedNodeGroup" input "scalingConfig" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupScalingConfig:NodeGroupScalingConfig" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupScalingConfig:NodeGroupScalingConfig" Resource "eks:index:ManagedNodeGroup" input "launchTemplate" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FNodeGroupLaunchTemplate:NodeGroupLaunchTemplate" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FNodeGroupLaunchTemplate:NodeGroupLaunchTemplate" Resource "eks:index:ManagedNodeGroup" output "nodeGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2FnodeGroup:NodeGroup" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2FnodeGroup:NodeGroup" Resource "eks:index:NodeGroup" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Resource "eks:index:NodeGroup" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroup" output "cfnStack" type changed from "/aws/v6.5.0/schema.json#/resources/aws:cloudformation%2Fstack:Stack" to "/aws/v6.18.2/schema.json#/resources/aws:cloudformation%2Fstack:Stack" Resource "eks:index:NodeGroup" output "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroup" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupSecurityGroup" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupSecurityGroup" input "eksCluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Resource "eks:index:NodeGroupSecurityGroup" output "securityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupSecurityGroup" output "securityGroupRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroupV2" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Resource "eks:index:NodeGroupV2" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Resource "eks:index:NodeGroupV2" input "launchTemplateTagSpecifications" items type changed from "/aws/v6.5.0/schema.json#/types/aws:ec2%2FLaunchTemplateTagSpecification:LaunchTemplateTagSpecification" to "/aws/v6.18.2/schema.json#/types/aws:ec2%2FLaunchTemplateTagSpecification:LaunchTemplateTagSpecification" Resource "eks:index:NodeGroupV2" output "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Resource "eks:index:NodeGroupV2" output "autoScalingGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:autoscaling%2Fgroup:Group" to "/aws/v6.18.2/schema.json#/resources/aws:autoscaling%2Fgroup:Group" Resource "eks:index:NodeGroupV2" output "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:CreationRoleProvider" input "provider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Type "eks:index:CreationRoleProvider" input "role" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:FargateProfile" input "selectors" items type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FFargateProfileSelector:FargateProfileSelector" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FFargateProfileSelector:FargateProfileSelector" Type "eks:index:NodeGroupData" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:NodeGroupData" input "cfnStack" type changed from "/aws/v6.5.0/schema.json#/resources/aws:cloudformation%2Fstack:Stack" to "/aws/v6.18.2/schema.json#/resources/aws:cloudformation%2Fstack:Stack" Type "eks:index:NodeGroupData" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:ClusterNodeGroupOptions" input "instanceProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FinstanceProfile:InstanceProfile" Type "eks:index:ClusterNodeGroupOptions" input "clusterIngressRule" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroupRule:SecurityGroupRule" Type "eks:index:ClusterNodeGroupOptions" input "extraNodeSecurityGroups" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:ClusterNodeGroupOptions" input "nodeSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:CoreData" input "instanceRoles" items type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:CoreData" input "cluster" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2Fcluster:Cluster" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2Fcluster:Cluster" Type "eks:index:CoreData" input "fargateProfile" type changed from "/aws/v6.5.0/schema.json#/resources/aws:eks%2FfargateProfile:FargateProfile" to "/aws/v6.18.2/schema.json#/resources/aws:eks%2FfargateProfile:FargateProfile" Type "eks:index:CoreData" input "awsProvider" type changed from "/aws/v6.5.0/schema.json#/provider" to "/aws/v6.18.2/schema.json#/provider" Type "eks:index:CoreData" input "oidcProvider" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2FopenIdConnectProvider:OpenIdConnectProvider" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2FopenIdConnectProvider:OpenIdConnectProvider" Type "eks:index:CoreData" input "clusterIamRole" type changed from "/aws/v6.5.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v6.18.2/schema.json#/resources/aws:iam%2Frole:Role" Type "eks:index:CoreData" input "clusterSecurityGroup" type changed from "/aws/v6.5.0/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" to "/aws/v6.18.2/schema.json#/resources/aws:ec2%2FsecurityGroup:SecurityGroup" Type "eks:index:CoreData" input "encryptionConfig" type changed from "/aws/v6.5.0/schema.json#/types/aws:eks%2FClusterEncryptionConfig:ClusterEncryptionConfig" to "/aws/v6.18.2/schema.json#/types/aws:eks%2FClusterEncryptionConfig:ClusterEncryptionConfig" No new resources/functions.