import { Command as $Command } from "@smithy/smithy-client"; import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { EKSClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EKSClient"; import type { CreateAccessEntryRequest, CreateAccessEntryResponse } from "../models/models_0"; /** * @public */ export type { __MetadataBearer }; export { $Command }; /** * @public * * The input for {@link CreateAccessEntryCommand}. */ export interface CreateAccessEntryCommandInput extends CreateAccessEntryRequest { } /** * @public * * The output of {@link CreateAccessEntryCommand}. */ export interface CreateAccessEntryCommandOutput extends CreateAccessEntryResponse, __MetadataBearer { } declare const CreateAccessEntryCommand_base: { new (input: CreateAccessEntryCommandInput): import("@smithy/smithy-client").CommandImpl; new (input: CreateAccessEntryCommandInput): import("@smithy/smithy-client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions; }; /** *

Creates an access entry.

*

An access entry allows an IAM principal to access your cluster. Access * entries can replace the need to maintain entries in the aws-auth * ConfigMap for authentication. You have the following options for * authorizing an IAM principal to access Kubernetes objects on your cluster: Kubernetes * role-based access control (RBAC), Amazon EKS, or both. Kubernetes RBAC authorization requires you * to create and manage Kubernetes Role, ClusterRole, * RoleBinding, and ClusterRoleBinding objects, in addition * to managing access entries. If you use Amazon EKS authorization exclusively, you don't need * to create and manage Kubernetes Role, ClusterRole, * RoleBinding, and ClusterRoleBinding objects.

*

For more information about access entries, see Access entries in the * Amazon EKS User Guide.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { EKSClient, CreateAccessEntryCommand } from "@aws-sdk/client-eks"; // ES Modules import * // const { EKSClient, CreateAccessEntryCommand } = require("@aws-sdk/client-eks"); // CommonJS import * // import type { EKSClientConfig } from "@aws-sdk/client-eks"; * const config = {}; // type is EKSClientConfig * const client = new EKSClient(config); * const input = { // CreateAccessEntryRequest * clusterName: "STRING_VALUE", // required * principalArn: "STRING_VALUE", // required * kubernetesGroups: [ // StringList * "STRING_VALUE", * ], * tags: { // TagMap * "": "STRING_VALUE", * }, * clientRequestToken: "STRING_VALUE", * username: "STRING_VALUE", * type: "STRING_VALUE", * }; * const command = new CreateAccessEntryCommand(input); * const response = await client.send(command); * // { // CreateAccessEntryResponse * // accessEntry: { // AccessEntry * // clusterName: "STRING_VALUE", * // principalArn: "STRING_VALUE", * // kubernetesGroups: [ // StringList * // "STRING_VALUE", * // ], * // accessEntryArn: "STRING_VALUE", * // createdAt: new Date("TIMESTAMP"), * // modifiedAt: new Date("TIMESTAMP"), * // tags: { // TagMap * // "": "STRING_VALUE", * // }, * // username: "STRING_VALUE", * // type: "STRING_VALUE", * // }, * // }; * * ``` * * @param CreateAccessEntryCommandInput - {@link CreateAccessEntryCommandInput} * @returns {@link CreateAccessEntryCommandOutput} * @see {@link CreateAccessEntryCommandInput} for command's `input` shape. * @see {@link CreateAccessEntryCommandOutput} for command's `response` shape. * @see {@link EKSClientResolvedConfig | config} for EKSClient's `config` shape. * * @throws {@link InvalidParameterException} (client fault) *

The specified parameter is invalid. Review the available parameters for the API * request.

* * @throws {@link InvalidRequestException} (client fault) *

The request is invalid given the state of the cluster. Check the state of the cluster * and the associated operations.

* * @throws {@link ResourceInUseException} (client fault) *

The specified resource is in use.

* * @throws {@link ResourceLimitExceededException} (client fault) *

You have encountered a service limit on the specified resource.

* * @throws {@link ResourceNotFoundException} (client fault) *

The specified resource could not be found. You can view your available clusters with * ListClusters. You can view your available managed node groups with * ListNodegroups. Amazon EKS clusters and node groups are Amazon Web Services Region * specific.

* * @throws {@link ServerException} (server fault) *

These errors are usually caused by a server-side issue.

* * @throws {@link EKSServiceException} *

Base exception class for all service exceptions from EKS service.

* * * @public */ export declare class CreateAccessEntryCommand extends CreateAccessEntryCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: CreateAccessEntryRequest; output: CreateAccessEntryResponse; }; sdk: { input: CreateAccessEntryCommandInput; output: CreateAccessEntryCommandOutput; }; }; }