feat(eks): cluster tagging (#4995) (#18109)

Fixes #4995


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: choryuidentify

packages/@aws-cdk/aws-eks/lib/cluster-resource.ts

@@ -28,6 +28,7 @@ export interface ClusterResourceProps {
   readonly secretsEncryptionKey?: kms.IKey;
   readonly onEventLayer?: lambda.ILayerVersion;
   readonly clusterHandlerSecurityGroup?: ec2.ISecurityGroup;
+  readonly tags?: { [key: string]: string };
 }
 
 /**
@@ -89,6 +90,7 @@ export class ClusterResource extends CoreConstruct {
             endpointPrivateAccess: props.endpointPrivateAccess,
             publicAccessCidrs: props.publicAccessCidrs,
           },
+          tags: props.tags,
         },
         AssumeRoleArn: this.adminRole.roleArn,
 

packages/@aws-cdk/aws-eks/lib/cluster.ts

@@ -744,13 +744,19 @@ export interface ClusterProps extends ClusterOptions {
    */
   readonly defaultCapacityType?: DefaultCapacityType;
 
-
   /**
    * The IAM role to pass to the Kubectl Lambda Handler.
    *
    * @default - Default Lambda IAM Execution Role
    */
   readonly kubectlLambdaRole?: iam.IRole;
+
+  /**
+   * The tags assigned to the EKS cluster
+   *
+   * @default - none
+   */
+  readonly tags?: { [key: string]: string };
 }
 
 /**
@@ -1372,6 +1378,7 @@ export class Cluster extends ClusterBase {
       subnets: placeClusterHandlerInVpc ? privateSubnets : undefined,
       clusterHandlerSecurityGroup: this.clusterHandlerSecurityGroup,
       onEventLayer: this.onEventLayer,
+      tags: props.tags,
     });
 
     if (this.endpointAccess._config.privateAccess && privateSubnets.length !== 0) {

packages/@aws-cdk/aws-eks/test/integ.eks-cluster.expected.json

@@ -951,6 +951,9 @@
             ],
             "endpointPublicAccess": true,
             "endpointPrivateAccess": true
+          },
+          "tags": {
+            "foo": "bar"
           }
         },
         "AssumeRoleArn": {

packages/@aws-cdk/aws-eks/test/integ.eks-cluster.ts

@@ -38,6 +38,9 @@ class EksClusterStack extends TestStack {
       defaultCapacity: 2,
       version: eks.KubernetesVersion.V1_21,
       secretsEncryptionKey,
+      tags: {
+        foo: 'bar',
+      },
     });
 
     this.assertFargateProfile();