/** * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * SPDX-License-Identifier: Apache-2.0. */ #pragma once #include #include #include #include namespace Aws { namespace Utils { namespace Json { class JsonValue; class JsonView; } // namespace Json } // namespace Utils namespace EKS { namespace Model { /** *

An object representing the VPC configuration to use for an Amazon EKS * cluster.

Specify one or more security groups for the cross-account elastic network * interfaces that Amazon EKS creates to use that allow communication between your * nodes and the Kubernetes control plane. If you don't specify any security * groups, then familiarize yourself with the difference between Amazon EKS * defaults for clusters deployed with Kubernetes. For more information, see Amazon * EKS security group considerations in the Amazon EKS User Guide * .

*/ inline const Aws::Vector& GetSecurityGroupIds() const{ return m_securityGroupIds; } /** *

*/ inline bool SecurityGroupIdsHasBeenSet() const { return m_securityGroupIdsHasBeenSet; } /** *

*/ inline void SetSecurityGroupIds(const Aws::Vector& value) { m_securityGroupIdsHasBeenSet = true; m_securityGroupIds = value; } /** *

*/ inline void SetSecurityGroupIds(Aws::Vector&& value) { m_securityGroupIdsHasBeenSet = true; m_securityGroupIds = std::move(value); } /** *

*/ inline VpcConfigRequest& WithSecurityGroupIds(const Aws::Vector& value) { SetSecurityGroupIds(value); return *this;} /** *

*/ inline VpcConfigRequest& WithSecurityGroupIds(Aws::Vector&& value) { SetSecurityGroupIds(std::move(value)); return *this;} /** *

*/ inline VpcConfigRequest& AddSecurityGroupIds(const Aws::String& value) { m_securityGroupIdsHasBeenSet = true; m_securityGroupIds.push_back(value); return *this; } /** *

*/ inline VpcConfigRequest& AddSecurityGroupIds(Aws::String&& value) { m_securityGroupIdsHasBeenSet = true; m_securityGroupIds.push_back(std::move(value)); return *this; } /** *

*/ inline VpcConfigRequest& AddSecurityGroupIds(const char* value) { m_securityGroupIdsHasBeenSet = true; m_securityGroupIds.push_back(value); return *this; } /** *

Set this value to false to disable public access to your * cluster's Kubernetes API server endpoint. If you disable public access, your * cluster's Kubernetes API server can only receive requests from within the * cluster VPC. The default value for this parameter is true, which * enables public access for your Kubernetes API server. For more information, see * Amazon * EKS cluster endpoint access control in the Amazon EKS User Guide * .

*/ inline bool GetEndpointPublicAccess() const{ return m_endpointPublicAccess; } /** *

*/ inline bool EndpointPublicAccessHasBeenSet() const { return m_endpointPublicAccessHasBeenSet; } /** *

*/ inline void SetEndpointPublicAccess(bool value) { m_endpointPublicAccessHasBeenSet = true; m_endpointPublicAccess = value; } /** *

*/ inline VpcConfigRequest& WithEndpointPublicAccess(bool value) { SetEndpointPublicAccess(value); return *this;} /** *

Set this value to true to enable private access for your * cluster's Kubernetes API server endpoint. If you enable private access, * Kubernetes API requests from within your cluster's VPC use the private VPC * endpoint. The default value for this parameter is false, which * disables private access for your Kubernetes API server. If you disable private * access and you have nodes or Fargate pods in the cluster, then ensure that * publicAccessCidrs includes the necessary CIDR blocks for * communication with the nodes or Fargate pods. For more information, see Amazon * EKS cluster endpoint access control in the Amazon EKS User Guide * .

*/ inline bool GetEndpointPrivateAccess() const{ return m_endpointPrivateAccess; } /** *

*/ inline bool EndpointPrivateAccessHasBeenSet() const { return m_endpointPrivateAccessHasBeenSet; } /** *

*/ inline void SetEndpointPrivateAccess(bool value) { m_endpointPrivateAccessHasBeenSet = true; m_endpointPrivateAccess = value; } /** *

*/ inline VpcConfigRequest& WithEndpointPrivateAccess(bool value) { SetEndpointPrivateAccess(value); return *this;} /** *

The CIDR blocks that are allowed access to your cluster's public Kubernetes * API server endpoint. Communication to the endpoint from addresses outside of the * CIDR blocks that you specify is denied. The default value is * 0.0.0.0/0. If you've disabled private endpoint access and you have * nodes or Fargate pods in the cluster, then ensure that you specify the necessary * CIDR blocks. For more information, see Amazon * EKS cluster endpoint access control in the Amazon EKS User Guide * .

*/ inline const Aws::Vector& GetPublicAccessCidrs() const{ return m_publicAccessCidrs; } /** *

*/ inline bool PublicAccessCidrsHasBeenSet() const { return m_publicAccessCidrsHasBeenSet; } /** *

*/ inline void SetPublicAccessCidrs(const Aws::Vector& value) { m_publicAccessCidrsHasBeenSet = true; m_publicAccessCidrs = value; } /** *

*/ inline void SetPublicAccessCidrs(Aws::Vector&& value) { m_publicAccessCidrsHasBeenSet = true; m_publicAccessCidrs = std::move(value); } /** *

*/ inline VpcConfigRequest& WithPublicAccessCidrs(const Aws::Vector& value) { SetPublicAccessCidrs(value); return *this;} /** *

*/ inline VpcConfigRequest& WithPublicAccessCidrs(Aws::Vector&& value) { SetPublicAccessCidrs(std::move(value)); return *this;} /** *

*/ inline VpcConfigRequest& AddPublicAccessCidrs(const Aws::String& value) { m_publicAccessCidrsHasBeenSet = true; m_publicAccessCidrs.push_back(value); return *this; } /** *

*/ inline VpcConfigRequest& AddPublicAccessCidrs(Aws::String&& value) { m_publicAccessCidrsHasBeenSet = true; m_publicAccessCidrs.push_back(std::move(value)); return *this; } /** *

*/ inline VpcConfigRequest& AddPublicAccessCidrs(const char* value) { m_publicAccessCidrsHasBeenSet = true; m_publicAccessCidrs.push_back(value); return *this; } private: Aws::Vector m_subnetIds; bool m_subnetIdsHasBeenSet = false; Aws::Vector m_securityGroupIds; bool m_securityGroupIdsHasBeenSet = false; bool m_endpointPublicAccess; bool m_endpointPublicAccessHasBeenSet = false; bool m_endpointPrivateAccess; bool m_endpointPrivateAccessHasBeenSet = false; Aws::Vector m_publicAccessCidrs; bool m_publicAccessCidrsHasBeenSet = false; }; } // namespace Model } // namespace EKS } // namespace Aws

See Also: