aws eks private link support

[stijndehaes]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Private link support to eks got added very recently see following issue.

I would like to configure this from terraform.

New or Affected Resource(s)

• resource_aws_eks_cluster

Potential Terraform Configuration

I would add this to the vpc config of the aws_eks_resource something like:

resource "aws_eks_cluster" "this" {
  name     = "${var.cluster_name}"
  role_arn = "${aws_iam_role.cluster.arn}"
  version  = "${var.cluster_version}"

  vpc_config {
    security_group_ids = ["${local.cluster_security_group_id}"]
    subnet_ids         = ["${var.subnets}"]
    private_access = true
    public_access = true
  }

  timeouts {
    create = "${var.cluster_create_timeout}"
    delete = "${var.cluster_delete_timeout}"
  }

}

References

• EKS Private Endpoint Support aws/containers-roadmap#22

[bflad]

Work in progress pull request can be found here: #8024

[ewbankkit]

AWS announcement:

• https://aws.amazon.com/about-aws/whats-new/2019/03/amazon-eks-introduces-kubernetes-api-server-endpoint-access-cont/

[bflad]

Support for managing the EKS Cluster endpoint access has been merged and will release with version 2.3.0 of the Terraform AWS Provider, likely in the next day or two.

[paulkendobnc]

Wonderful! Just what i need right now.

[stephenmuss]

That was fast. Looking forward to this. Thanks!

[bflad]

This has been released in version 2.3.0 of the Terraform AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!