Adding the example to deploy an EKS Cluster + app using CSharp
ADD
aws-cs-eks/.gitignore
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+
+# User-specific files
+*.rsuser
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Mono auto generated files
+mono_crash.*
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+[Aa][Rr][Mm]/
+[Aa][Rr][Mm]64/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+[Ll]ogs/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_h.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*_wpftmp.csproj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# NuGet Symbol Packages
+*.snupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+*.appxbundle
+*.appxupload
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!?*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+*- [Bb]ackup.rdl
+*- [Bb]ackup ([0-9]).rdl
+*- [Bb]ackup ([0-9][0-9]).rdl
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# CodeRush personal settings
+.cr/personal
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+# BeatPulse healthcheck temp database
+healthchecksdb
+
+# Backup folder for Package Reference Convert tool in Visual Studio 2017
+MigrationBackup/
+
+# Ionide (cross platform F# VS Code tools) working folder
+.ionide/

ADD
aws-cs-eks/EksStack.cs
+using System.Collections.Generic;
+using Pulumi;
+using Pulumi.Aws.Eks.Inputs;
+using Pulumi.Kubernetes.Types.Inputs.Apps.V1;
+using Pulumi.Kubernetes.Types.Inputs.Core.V1;
+using Pulumi.Kubernetes.Types.Inputs.Meta.V1;
+using Ec2 = Pulumi.Aws.Ec2;
+using Iam = Pulumi.Aws.Iam;
+using Eks = Pulumi.Aws.Eks;
+using K8s = Pulumi.Kubernetes;
+using CoreV1 = Pulumi.Kubernetes.Core.V1;
+using AppsV1 = Pulumi.Kubernetes.Apps.V1;
+
+class EksStack : Stack
+{
+ private Output<string> GenerateKubeconfig(Output<string> clusterEndpoint, Output<string> certData,
+ Output<string> clusterName)
+ {
+ return Output.Format($@"{{
+ ""apiVersion"": ""v1"",
+ ""clusters"": [{{
+ ""cluster"": {{
+ ""server"": ""{clusterEndpoint}"",
+ ""certificate-authority-data"": ""{certData}""
+ }},
+ ""name"": ""kubernetes"",
+ }}],
+ ""contexts"": [{{
+ ""context"": {{
+ ""cluster"": ""kubernetes"",
+ ""user"": ""aws"",
+ }},
+ ""name"": ""aws"",
+ }}],
+ ""current-context"": ""aws"",
+ ""kind"": ""Config"",
+ ""users"": [{{
+ ""name"": ""aws"",
+ ""user"": {{
+ ""exec"": {{
+ ""apiVersion"": ""client.authentication.k8s.io/v1alpha1"",
+ ""command"": ""aws-iam-authenticator"",
+ ""args"": [
+ ""token"",
+ ""-i"",
+ ""{clusterName}"",
+ ],
+ }},
+ }},
+ }}],
+ }}");
+ }
+
+ public EksStack()
+ {
+ // Read back the default VPC and public subnets, which we will use.
+ var vpc = Output.Create(Ec2.GetVpc.InvokeAsync(new Ec2.GetVpcArgs {Default = true}));
+ var vpcId = vpc.Apply(vpc => vpc.Id);
+ var subnet = vpcId.Apply(id => Ec2.GetSubnetIds.InvokeAsync(new Ec2.GetSubnetIdsArgs {VpcId = id}));
+ var subnetIds = subnet.Apply(s => s.Ids);
+
+ // Create an IAM role that can be used by our service's task.
+ var eksRole = new Iam.Role("eks-iam-eksRole", new Iam.RoleArgs
+ {
+ AssumeRolePolicy = @"{
+""Version"": ""2008-10-17"",
+""Statement"": [{
+ ""Sid"": """",
+ ""Effect"": ""Allow"",
+ ""Principal"": {
+ ""Service"": ""eks.amazonaws.com""
+ },
+ ""Action"": ""sts:AssumeRole""
+}]
+}"
+ });
+
+ var eksPolicies = new Dictionary<string, string>
+ {
+ {"service-policy", "arn:aws:iam::aws:policy/AmazonEKSServicePolicy"},
+ {"cluster-policy", "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"}
+ };
+
+ foreach (var (name, policy) in eksPolicies)
+ {
+ var taskExecAttach = new Iam.RolePolicyAttachment($"rpa-{name}",
+ new Iam.RolePolicyAttachmentArgs
+ {
+ Role = eksRole.Name,
+ PolicyArn = policy,
+ });
+ }
+
+ // Create an IAM role that can be used by our service's task.
+ var nodeGroupRole = new Iam.Role("nodegroup-iam-role", new Iam.RoleArgs
+ {
+ AssumeRolePolicy = @"{
+""Version"": ""2008-10-17"",
+""Statement"": [{
+ ""Sid"": """",
+ ""Effect"": ""Allow"",
+ ""Principal"": {
+ ""Service"": ""ec2.amazonaws.com""
+ },
+ ""Action"": ""sts:AssumeRole""
+}]
+}"
+ });
+
+ var nodeGroupPolicies = new Dictionary<string, string>
+ {
+ { "worker", "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy" },
+ { "cni", "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy" },
+ { "registry", "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly" }
+ };
+ foreach (var (name, policy) in nodeGroupPolicies)
+ {
+ var taskExecAttach = new Iam.RolePolicyAttachment($"ngpa-{name}",
+ new Iam.RolePolicyAttachmentArgs
+ {
+ Role = nodeGroupRole.Name,
+ PolicyArn = policy,
+ });
+ }
+
+ var clusterSg = new Ec2.SecurityGroup("cluster-sg", new Ec2.SecurityGroupArgs
+ {
+ VpcId = vpcId,
+ Egress =
+ {
+ new Ec2.Inputs.SecurityGroupEgressArgs
+ {
+ Protocol = "-1",
+ FromPort = 0,
+ ToPort = 0,
+ CidrBlocks = {"0.0.0.0/0"}
+ }
+ },
+ Ingress =
+ {
+ new Ec2.Inputs.SecurityGroupIngressArgs
+ {
+ Protocol = "tcp",
+ FromPort = 80,
+ ToPort = 80,
+ CidrBlocks = {"0.0.0.0/0"}
+ }
+ }
+ });
+
+ var cluster = new Eks.Cluster("eks-cluster", new Eks.ClusterArgs
+ {
+ RoleArn = eksRole.Arn,
+ VpcConfig = new ClusterVpcConfigArgs
+ {
+ PublicAccessCidrs =
+ {
+ "0.0.0.0/0",
+ },
+ SecurityGroupIds =
+ {
+ clusterSg.Id,
+ },
+ SubnetIds = subnetIds,
+ },
+ });
+
+ var nodeGroup = new Eks.NodeGroup("node-group", new Eks.NodeGroupArgs
+ {
+ ClusterName = cluster.Name,
+ NodeGroupName = "demo-eks-nodegroup",
+ NodeRoleArn = nodeGroupRole.Arn,
+ SubnetIds = subnetIds,
+ ScalingConfig = new NodeGroupScalingConfigArgs
+ {
+ DesiredSize = 2,
+ MaxSize = 2,
+ MinSize = 2
+ },
+ });
+
+ this.Kubeconfig = GenerateKubeconfig(cluster.Endpoint,
+ cluster.CertificateAuthority.Apply(x => x.Data),
+ cluster.Name);
+
+ var k8sProvider = new K8s.Provider("k8s-provider", new K8s.ProviderArgs
+ {
+ KubeConfig = this.Kubeconfig
+ }, new CustomResourceOptions
+ {
+ DependsOn = {nodeGroup},
+ });
+
+ var appNamespace = new CoreV1.Namespace("app-ns", new NamespaceArgs
+ {
+ Metadata = new ObjectMetaArgs
+ {
+ Name = "joe-duffy",
+ },
+ }, new CustomResourceOptions
+ {
+ Provider = k8sProvider,
+ });
+
+ var appLabels = new InputMap<string>
+ {
+ {"app", "iac-workshop"}
+ };
+ var deployment = new AppsV1.Deployment("app-dep", new DeploymentArgs
+ {
+ Metadata = new ObjectMetaArgs
+ {
+ Namespace = appNamespace.Metadata.Apply(x => x.Name),
+ },
+ Spec = new DeploymentSpecArgs
+ {
+ Selector = new LabelSelectorArgs
+ {
+ MatchLabels = appLabels
+ },
+ Replicas = 1,
+ Template = new PodTemplateSpecArgs
+ {
+ Metadata = new ObjectMetaArgs
+ {
+ Labels = appLabels
+ },
+ Spec = new PodSpecArgs
+ {
+ Containers =
+ {
+ new ContainerArgs
+ {
+ Name = "iac-workshop",
+ Image = "jocatalin/kubernetes-bootcamp:v2",
+ }
+ }
+ }
+ }
+ },
+ }, new CustomResourceOptions
+ {
+ Provider = k8sProvider,
+ });
+
+ var service = new CoreV1.Service("app-service", new ServiceArgs
+ {
+ Metadata = new ObjectMetaArgs
+ {
+ Namespace = appNamespace.Metadata.Apply(x=>x.Name),
+ Labels = deployment.Spec.Apply(spec => spec.Template.Metadata.Labels),
+ },
+ Spec = new ServiceSpecArgs
+ {
+ Type = "LoadBalancer",
+ Ports =
+ {
+ new ServicePortArgs
+ {
+ Port = 80,
+ TargetPort = 8080
+ },
+ },
+ Selector = deployment.Spec.Apply(spec => spec.Template.Metadata.Labels)
+ },
+ }, new CustomResourceOptions
+ {
+ Provider = k8sProvider,
+ });
+
+ this.Url = service.Status.Apply(status => status.LoadBalancer.Ingress[0].Hostname);
+ }
+
+ [Output] public Output<string> Kubeconfig { get; set; }
+ [Output] public Output<string> Url { get; set; }
+}
+

ADD
aws-cs-eks/Program.cs
+using System.Threading.Tasks;
+using Pulumi;
+
+class Program
+{
+ static Task<int> Main() => Deployment.RunAsync<EksStack>();
+}

ADD
aws-cs-eks/Pulumi.yaml
+name: aws-cs-eks
+runtime: dotnet
+description: An ASP.NET application running a simple container in a EKS Cluster

ADD
aws-cs-eks/README.md
+# AWS Golang EKS Cluster
+This example creates an AWS EKS Cluster and deploys a sample container application to it
+
+## Deploying the App
+
+ To deploy your infrastructure, follow the below steps.
+
+### Prerequisites
+
+1. [Install Pulumi](https://www.pulumi.com/docs/get-started/install/)
+2. [Install DotNet SDK](https://docs.microsoft.com/en-us/dotnet/core/install/sdk?pivots=os-windows)
+3. [Configure AWS Credentials](https://www.pulumi.com/docs/intro/cloud-providers/aws/setup/)
+4. [Install `aws-iam-authenticator`](https://docs.aws.amazon.com/eks/latest/userguide/install-aws-iam-authenticator.html)
+4. [Install `kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
+
+### Steps
+
+After cloning this repo, run these commands from the working directory:
+
+1. Create a new stack, which is an isolated deployment target for this example:
+
+ ```bash
+ $ pulumi stack init dev
+ ```
+
+2. Set your desired AWS region:
+
+ ```bash
+ $ pulumi config set aws:region us-east-1 # any valid AWS region will work
+ ```
+
+4. Execute the Pulumi program to create our EKS Cluster:
+
+ ```bash
+ pulumi up
+ ```
+
+5. After 10-15 minutes, your cluster will be ready, and the kubeconfig JSON you'll use to connect to the cluster will
+ be available as an output. You can save this kubeconfig to a file like so:
+
+ ```bash
+ $ pulumi stack output kubeconfig >kubeconfig.json
+ ```
+
+ Once you have this file in hand, you can interact with your new cluster as usual via `kubectl`:
+
+ ```bash
+ $ KUBECONFIG=./kubeconfig.json kubectl get nodes
+ ```
+
+6. Ensure that the application is running as expected:
+
+ ```bash
+ $ curl $(pulumi stack output Url)
+ ```
+
+
+7. Afterwards, destroy your stack and remove it:
+
+ ```bash
+ pulumi destroy --yes
+ pulumi stack rm --yes
+ ```

MODIFY
aws-go-eks/README.md
aws-go-eks/README.md
@@ -8,9 +8,10 @@ This example creates an AWS EKS Cluster and deploys a sample container applicati
### Prerequisites
1. [Install Pulumi](https://www.pulumi.com/docs/get-started/install/)
-2. [Install Node.js 8.11.3](https://nodejs.org/en/download/)
+2. [Install Go 1.13](https://golang.org/doc/install)
3. [Configure AWS Credentials](https://www.pulumi.com/docs/intro/cloud-providers/aws/setup/)
4. [Install `aws-iam-authenticator`](https://docs.aws.amazon.com/eks/latest/userguide/install-aws-iam-authenticator.html)
+4. [Install `kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
### Steps
@@ -28,7 +29,7 @@ After cloning this repo, run these commands from the working directory:
$ pulumi config set aws:region us-east-1 # any valid AWS region will work
```
-4. Execute the Pulumi program to create our lambda:
+4. Execute the Pulumi program to create our EKS Cluster:
```bash
pulumi up

Adding the example to deploy an EKS Cluster + app using CSharp (#633)