Optional ReadonlyallowWhether the instances can initiate connections to anywhere by default
Optional ReadonlyassociateWhether instances in the Auto Scaling Group should have public IP addresses associated with them.
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified
Optional ReadonlyautoThe name of the Auto Scaling group. This name must be unique per Region per account.
Optional ReadonlyazThe strategy for distributing instances across Availability Zones.
Optional ReadonlyblockSpecifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes.
Each instance that is launched has an associated root device volume, either an Amazon EBS volume or an instance store volume. You can use block device mappings to specify additional EBS volumes or instance store volumes to attach to an instance when it is launched.
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified
Optional ReadonlybootstrapConfigures the EC2 user-data script for instances in this autoscaling group
to bootstrap the node (invoke /etc/eks/bootstrap.sh) and associate it
with the EKS cluster.
If you wish to provide a custom user data script, set this to false and
manually invoke autoscalingGroup.addUserData().
Optional ReadonlybootstrapEKS node bootstrapping options.
Optional ReadonlycapacityIndicates whether Capacity Rebalancing is enabled. When you turn on Capacity Rebalancing, Amazon EC2 Auto Scaling attempts to launch a Spot Instance whenever Amazon EC2 notifies that a Spot Instance is at an elevated risk of interruption. After launching a new instance, it then terminates an old instance.
Optional ReadonlyclusterName for the cluster.
Optional ReadonlycooldownDefault scaling cooldown for this AutoScalingGroup
Optional ReadonlydefaultThe amount of time, in seconds, until a newly launched instance can contribute to the Amazon CloudWatch metrics. This delay lets an instance finish initializing before Amazon EC2 Auto Scaling aggregates instance metrics, resulting in more reliable usage data. Set this value equal to the amount of time that it takes for resource consumption to become stable after an instance reaches the InService state.
To optimize the performance of scaling policies that scale continuously, such as target tracking and step scaling policies, we strongly recommend that you enable the default instance warmup, even if its value is set to 0 seconds
Default instance warmup will not be added if no value is specified
OptionaldesiredDesired size, defaults to min size.
Optional ReadonlygroupEnable monitoring for group metrics, these metrics describe the group rather than any of its instances.
To report all group metrics use GroupMetrics.all()
Group metrics are reported in a granularity of 1 minute at no additional charge.
Optional ReadonlyhealthConfiguration for health checks
Optional ReadonlyhealthConfiguration for EC2 or additional health checks
Even when using HealthChecks.withAdditionalChecks(), the EC2 type is implicitly included.
Id of this node group. Expected to be unique in cluster scope.
Optional ReadonlyignoreIf the ASG has scheduled actions, don't reset unchanged group sizes
Only used if the ASG has scheduled actions (which may scale your ASG up or down regardless of cdk deployments). If true, the size of the group will only be reset if it has been changed in the CDK app. If false, the sizes will always be changed back to what they were in the CDK app on deployment.
Optional ReadonlyinstanceControls whether instances in this group are launched with detailed or basic monitoring.
When detailed monitoring is enabled, Amazon CloudWatch generates metrics every minute and your account is charged a fee. When you disable detailed monitoring, CloudWatch generates metrics every 5 minutes.
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified
OptionalinstanceInstance type of the instances to start. If not specified defaults are applied in the following order:
OptionalisolatedIs the EKS Cluster in isolated subnets?
Optional ReadonlykeyName of SSH keypair to grant access to instances
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified
You can either specify keyPair or keyName, not both.
Optional ReadonlykeyThe SSH keypair to grant access to the instance.
Feature flag AUTOSCALING_GENERATE_LAUNCH_TEMPLATE must be enabled to use this property.
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified.
You can either specify keyPair or keyName, not both.
Optional ReadonlymachineMachine image type
Optional ReadonlymapWill automatically update the aws-auth ConfigMap to map the IAM instance role to RBAC.
This cannot be explicitly set to true if the cluster has kubectl disabled.
Optional ReadonlymaxThe maximum amount of time that an instance can be in service. The maximum duration applies to all current and future instances in the group. As an instance approaches its maximum duration, it is terminated and replaced, and cannot be used again.
You must specify a value of at least 86,400 seconds (one day). To clear a previously set value, leave this property undefined.
OptionalmaxMax size of the node group.
OptionalminMin size of the node group
OptionalnameThe name for the cluster.
Optional ReadonlynewWhether newly-launched instances are protected from termination by Amazon EC2 Auto Scaling when scaling in.
By default, Auto Scaling can terminate an instance at any time after launch when scaling in an Auto Scaling Group, subject to the group's termination policy. However, you may wish to protect newly-launched instances from being scaled in if they are going to run critical applications that should not be prematurely terminated.
This flag must be enabled if the Auto Scaling Group will be associated with an ECS Capacity Provider with managed termination protection.
OptionalnodeSubnets for the autoscaling group where nodes (instances) will be placed.
Optional ReadonlynotificationsConfigure autoscaling group to send notifications about fleet changes to an SNS topic(s)
Optional ReadonlyoutputDetermines whether a CloudFormation output with the name of the cluster will be synthesized.
Optional ReadonlyoutputDetermines whether a CloudFormation output with the aws eks update-kubeconfig command will be synthesized. This command will include
the cluster name and the ARN of the masters IAM role.
Note: If mastersRole is not specified, this property will be ignored and no config command will be emitted.
OptionalprivateIs it a private only EKS Cluster? Defaults to private_and_public cluster, set to true for private cluster
Optional ReadonlyroleRole that provides permissions for the Kubernetes control plane to make calls to AWS API operations on your behalf.
Optional ReadonlysecuritySecurity Group to use for Control Plane ENIs
Optional ReadonlysignalsConfigure waiting for signals during deployment
Use this to pause the CloudFormation deployment to wait for the instances
in the AutoScalingGroup to report successful startup during
creation and updates. The UserData script needs to invoke cfn-signal
with a success or failure code after it is done setting up the instance.
Without waiting for signals, the CloudFormation deployment will proceed as soon as the AutoScalingGroup has been created or updated but before the instances in the group have been started.
For example, to have instances wait for an Elastic Load Balancing health check before they signal success, add a health-check verification by using the cfn-init helper script. For an example, see the verify_instance_health command in the Auto Scaling rolling updates sample template:
Optional ReadonlyspotInstalls the AWS spot instance interrupt handler on the cluster if it's not
already added. Only relevant if spotPrice is used.
Optional ReadonlyspotThe maximum hourly price (in USD) to be paid for any Spot Instance launched to fulfill the request. Spot Instances are launched when the price you specify exceeds the current Spot market price.
launchTemplate and mixedInstancesPolicy must not be specified when this property is specified
Optional ReadonlyssmAdd SSM session permissions to the instance role
Setting this to true adds the necessary permissions to connect
to the instance using SSM Session Manager. You can do this
from the AWS Console.
NOTE: Setting this flag to true may not be enough by itself.
You must also use an AMI that comes with the SSM Agent, or install
the SSM Agent yourself. See
Working with SSM Agent
in the SSM Developer Guide.
OptionaltagsTags for the cluster
Optional ReadonlyterminationA policy or a list of policies that are used to select the instances to terminate. The policies are executed in the order that you list them.
Optional ReadonlyterminationA lambda function Arn that can be used as a custom termination policy to select the instances to terminate. This property must be specified if the TerminationPolicy.CUSTOM_LAMBDA_FUNCTION is used.
Optional ReadonlyupdateWhat to do when an AutoScalingGroup's instance configuration is changed
This is applied when any of the settings on the ASG are changed that affect how the instances should be created (VPC, instance type, startup scripts, etc.). It indicates how the existing instances should be replaced with new instances matching the new config. By default, nothing is done and only new instances are launched with the new config.
Optional ReadonlyversionThe Kubernetes version to run in the cluster
Optional ReadonlyvpcThe VPC in which to create the Cluster.
Optional ReadonlyvpcWhere to place EKS Control Plane ENIs
For example, to only select private subnets, supply the following:
vpcSubnets: [{ subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }]
Configuration options for the cluster provider.