variable "cluster_name" { description = "Name of the EKS cluster. Also used as a prefix in names of related resources." } variable "cluster_security_group_id" { description = "If provided, the EKS cluster will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the workers and provide API access to your current IP/32." default = "" } variable "workstation_cidr" { description = "Override the default ingress rule that allows communication with the EKS cluster API. If not given, will use current IP/32. " default = "" } variable "cluster_version" { description = "Kubernetes version to use for the EKS cluster." default = "1.10" } variable "config_output_path" { description = "Determines where config files are placed if using configure_kubectl_session and you want config files to land outside the current working directory." default = "./" } variable "write_kubeconfig" { description = "Whether to write a kubeconfig file containing the cluster configuration." default = true } variable "manage_aws_auth" { description = "Whether to write and apply the aws-auth configmap file." default = true } variable "map_accounts" { description = "Additional AWS account numbers to add to the aws-auth configmap. See examples/eks_test_fixture/variables.tf for example format." type = "list" default = [] } variable "map_roles" { description = "Additional IAM roles to add to the aws-auth configmap. See examples/eks_test_fixture/variables.tf for example format." type = "list" default = [] } variable "map_users" { description = "Additional IAM users to add to the aws-auth configmap. See examples/eks_test_fixture/variables.tf for example format." type = "list" default = [] } variable "subnets" { description = "A list of subnets to place the EKS cluster and workers within." type = "list" } variable "tags" { description = "A map of tags to add to all resources." type = "map" default = {} } variable "vpc_id" { description = "VPC where the cluster and workers will be deployed." } variable "worker_groups" { description = "A list of maps defining worker group configurations. See workers_group_defaults for valid keys." type = "list" default = [{ "name" = "default" }] } variable "workers_group_defaults" { description = "Default values for target groups as defined by the list of maps." type = "map" default = { name = "count.index" # Name of the worker group. Literal count.index will never be used but if name is not set, the count.index interpolation will be used. ami_id = "" # AMI ID for the eks workers. If none is provided, Terraform will search for the latest version of their EKS optimized worker AMI. asg_desired_capacity = "1" # Desired worker capacity in the autoscaling group. asg_max_size = "3" # Maximum worker capacity in the autoscaling group. asg_min_size = "1" # Minimum worker capacity in the autoscaling group. instance_type = "m4.large" # Size of the workers instances. key_name = "" # The key name that should be used for the instances in the autoscaling group pre_userdata = "" # userdata to pre-append to the default userdata. additional_userdata = "" # userdata to append to the default userdata. ebs_optimized = true # sets whether to use ebs optimization on supported types. public_ip = false # Associate a public ip address with a worker kubelet_node_labels = "" # This string is passed directly to kubelet via --node-lables= if set. It should be comma delimited with no spaces. If left empty no --node-labels switch is added. } } variable "worker_security_group_id" { description = "If provided, all workers will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the EKS cluster." default = "" } variable "worker_sg_ingress_from_port" { description = "Minimum port number from which pods will accept communication. Must be changed to a lower value if some pods in your cluster will expose a port lower than 1025 (e.g. 22, 80, or 443)." default = "1025" } variable "kubeconfig_aws_authenticator_command" { description = "Command to use to to fetch AWS EKS credentials" default = "aws-iam-authenticator" } variable "kubeconfig_aws_authenticator_additional_args" { description = "Any additional arguments to pass to the authenticator such as the role to assume [\"-r\", \"MyEksRole\"]" type = "list" default = [] } variable "kubeconfig_aws_authenticator_env_variables" { description = "Environment variables that should be used when executing the authenticator i.e. { AWS_PROFILE = \"eks\"}" type = "map" default = {} } variable "kubeconfig_name" { description = "Override the default name used for items kubeconfig." default = "" }