Skip to content

Latest commit

 

History

History
65 lines (51 loc) · 4.56 KB

README.md

File metadata and controls

65 lines (51 loc) · 4.56 KB

terraform-aws-eks Core Module

This folder contains the core code of the terraform-aws-eks repo. When embedding this repo as a submodule, point the Terraform module source to this folder rather than the root of the repo. The root of the repo contains a wrapper that allows for testing and validation of the module on Terraform Cloud.

For background info on this repo and its functionality at a higher level, see the repo readme.

To regenerate this section, delete everything under the horizontal divider below and run terraform-docs markdown ./ >> README.md in the folder root.

Requirements

No requirements.

Providers

Name Version
aws 3.52.0

Modules

Name Source Version
amazon_eks terraform-aws-modules/eks/aws 17.1.0

Resources

Name Type
aws_eks_cluster.eks-cluster data source
aws_eks_cluster_auth.eks-cluster data source

Inputs

Name Description Type Default Required
eks_desired_capacity Number of desired nodes any n/a yes
eks_instance_type EC2 instance type to install K8s on to any n/a yes
eks_max_capacity Max allowed number of nodes any n/a yes
eks_min_capacity Minimum allowed number of nodes any n/a yes
enable_irsa Enable IRSA (IAM Roles for Service Accounts). Enabling this provisions and configures an OIDC (OpenID Connect) provider for in the EKS cluster any n/a yes
kubernetes_version version of K8s to install in the cluster any n/a yes
map_roles Additional IAM roles to add to the aws-auth-configmap. 
list(object({
    rolearn  = string
    username = string
    groups   = list(string)
  }))
 [] no
map_users Additional IAM users to add to the aws-auth configmap. 
list(object({
    userarn  = string
    username = string
    groups   = list(string)
  }))
 [] no
name Name allocated to the EKS cluster any n/a yes
private_subnets A list of AWS subnet Ids, used to deploy the EKS cluster list(string) n/a yes
vpc_id AWS id for the VPC to install the EKS cluster in any n/a yes

Outputs

Name Description
certificate_authority_data CA data used to connect to the cluster. Outputted to allow the Kubernetes provider to install the aws_auth config map (allow allocated users to access)
cluster_id Tied to the internal cluster_id of the AWS EKS module
cluster_oidc_issuer_url The URL on the EKS cluster OIDC Issuer
cluster_primary_security_group_id The primary cluster Security Group
eks-cluster-endpoint The URI of the cluster endpoint, used for Admin tasks, i.e Kubectl
eks-cluster-token Token to access the EKS cluster
oidc_provider_arn The ARN of the OIDC Provider if enable_irsa = true