---
AWSTemplateFormatVersion: 2010-09-09
Description: AWS Templates - Default EKS Cluster

Parameters:

  PublicSubnet1Id:
    Type: String
    Default: subnet-00000000000000000
  PublicSubnet2Id:
    Type: String
    Default: subnet-00000000000000000

Resources:

  EksServiceIamRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: 'TestCase1ClusterRole'
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Effect: Allow
            Principal:
              Service: eks.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonEKSServicePolicy
        - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
      Policies:
        - PolicyName: EksEC2
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Sid: AllowEC2Describe
                Effect: Allow
                Action:
                  - ec2:DescribeAccountAttributes
                  - ec2:DescribeInternetGateways
                Resource: '*'

  EksCluster:
    Type: AWS::EKS::Cluster
    Properties:
      Name: 'TestCase1Cluster'
      ResourcesVpcConfig:
        SubnetIds:
          - !Ref PublicSubnet1Id
          - !Ref PublicSubnet2Id
      RoleArn: !GetAtt EksServiceIamRole.Arn