apiVersion: crd.k8s.amazonaws.com/v1alpha1 kind: ENIConfig metadata: name: "{{availabilityZone}}" spec: securityGroups: - "{{clusterSecurityGroupId}}" subnet: "{{subnetId}}"