-
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy path03-subnets.tf
65 lines (54 loc) · 2.08 KB
/
03-subnets.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# Private subnet creation
resource "aws_subnet" "eks_private_subnet_1a" {
vpc_id = aws_vpc.eks_vpc_1.id
cidr_block = var.private_subnet_1a_cidr
availability_zone = "${var.region}a"
map_public_ip_on_launch = false
tags = {
"Name" = "private-eks-1-${var.region}a"
"kubernetes.io/role/internal-elb" = "1"
"kubernetes.io/cluster/${var.eks_cluster_1_name}" = "owned"
}
depends_on = [aws_vpc.eks_vpc_1]
}
# Private subnet creation
resource "aws_subnet" "eks_private_subnet_1b" {
vpc_id = aws_vpc.eks_vpc_1.id
cidr_block = var.private_subnet_1b_cidr
availability_zone = "${var.region}b"
map_public_ip_on_launch = false
tags = {
"Name" = "private-eks-1-${var.region}b"
"kubernetes.io/role/internal-elb" = "1"
"kubernetes.io/cluster/${var.eks_cluster_1_name}" = "owned"
}
depends_on = [aws_vpc.eks_vpc_1]
}
# Public subnet creation
resource "aws_subnet" "eks_public_subnet_1a" {
vpc_id = aws_vpc.eks_vpc_1.id
cidr_block = var.public_subnet_1a_cidr
availability_zone = "${var.region}a"
#tfsec:ignore:aws-ec2-no-public-ip-subnet
map_public_ip_on_launch = true
tags = {
"Name" = "public-eks-1-${var.region}a"
"kubernetes.io/role/elb" = "1"
"kubernetes.io/cluster/${var.eks_cluster_1_name}" = "owned"
}
depends_on = [aws_vpc.eks_vpc_1]
}
# Public subnet creation
resource "aws_subnet" "eks_public_subnet_1b" {
vpc_id = aws_vpc.eks_vpc_1.id
cidr_block = var.public_subnet_1b_cidr
availability_zone = "${var.region}b"
#tfsec:ignore:aws-ec2-no-public-ip-subnet
map_public_ip_on_launch = true
tags = {
"Name" = "public-eks-1-${var.region}b"
"kubernetes.io/role/elb" = "1"
"kubernetes.io/cluster/${var.eks_cluster_1_name}" = "owned"
}
depends_on = [aws_vpc.eks_vpc_1]
}