terraform-aws-eks/modules/self-managed-node-group

Self Managed Node Group Module

Configuration in this directory creates a Self Managed Node Group (AutoScaling Group) along with an IAM role, security group, and launch template

Usage

module "self_managed_node_group" {
  source = "terraform-aws-modules/eks/aws//modules/self-managed-node-group"

  name                = "separate-self-mng"
  cluster_name        = "my-cluster"
  cluster_version     = "1.31"
  cluster_endpoint    = "https://012345678903AB2BAE5D1E0BFE0E2B50.gr7.us-east-1.eks.amazonaws.com"
  cluster_auth_base64 = "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"

  subnet_ids = ["subnet-abcde012", "subnet-bcde012a", "subnet-fghi345a"]

  // The following variables are necessary if you decide to use the module outside of the parent EKS module context.
  // Without it, the security groups of the nodes are empty and thus won't join the cluster.
  vpc_security_group_ids = [
    module.eks.cluster_primary_security_group_id,
    module.eks.cluster_security_group_id,
  ]

  min_size     = 1
  max_size     = 10
  desired_size = 1

  launch_template_name   = "separate-self-mng"
  instance_type          = "m5.large"

  tags = {
    Environment = "dev"
    Terraform   = "true"
  }
}

Requirements

Name	Version
terraform	>= 1.3.2
aws	>= 5.95, < 6.0.0

Providers

Name	Version
aws	>= 5.95, < 6.0.0

Modules

Name	Source	Version
user_data	../_user_data	n/a

Resources

Name	Type
aws_autoscaling_group.this	resource
aws_autoscaling_schedule.this	resource
aws_eks_access_entry.this	resource
aws_iam_instance_profile.this	resource
aws_iam_role.this	resource
aws_iam_role_policy.this	resource
aws_iam_role_policy_attachment.additional	resource
aws_iam_role_policy_attachment.this	resource
aws_launch_template.this	resource
aws_placement_group.this	resource
aws_caller_identity.current	data source
aws_ec2_instance_type.this	data source
aws_ec2_instance_type_offerings.this	data source
aws_iam_policy_document.assume_role_policy	data source
aws_iam_policy_document.role	data source
aws_partition.current	data source
aws_ssm_parameter.ami	data source
aws_subnets.placement_group	data source

Inputs

Name	Description	Type	Default	Required
additional_cluster_dns_ips	Additional DNS IP addresses to use for the cluster. Only used when ami_type = BOTTLEROCKET_*	list(string)	[]	no
ami_id	The AMI from which to launch the instance	string	""	no
ami_type	Type of Amazon Machine Image (AMI) associated with the node group. See the AWS documentation for valid values	string	"AL2_x86_64"	no
autoscaling_group_tags	A map of additional tags to add to the autoscaling group created. Tags are applied to the autoscaling group only and are NOT propagated to instances	map(string)	{}	no
availability_zones	A list of one or more availability zones for the group. Used for EC2-Classic and default subnets when not specified with subnet_ids argument. Conflicts with subnet_ids	list(string)	null	no
block_device_mappings	Specify volumes to attach to the instance besides the volumes specified by the AMI	any	{}	no
bootstrap_extra_args	Additional arguments passed to the bootstrap script. When ami_type = BOTTLEROCKET_*; these are additional settings that are provided to the Bottlerocket user data	string	""	no
capacity_rebalance	Indicates whether capacity rebalance is enabled	bool	null	no
capacity_reservation_specification	Targeting for EC2 capacity reservations	any	{}	no
cloudinit_post_nodeadm	Array of cloud-init document parts that are created after the nodeadm document part	list(object({ content = string content_type = optional(string) filename = optional(string) merge_type = optional(string) }))	[]	no
cloudinit_pre_nodeadm	Array of cloud-init document parts that are created before the nodeadm document part	list(object({ content = string content_type = optional(string) filename = optional(string) merge_type = optional(string) }))	[]	no
cluster_auth_base64	Base64 encoded CA of associated EKS cluster	string	""	no
cluster_endpoint	Endpoint of associated EKS cluster	string	""	no
cluster_ip_family	The IP family used to assign Kubernetes pod and service addresses. Valid values are ipv4 (default) and ipv6	string	"ipv4"	no
cluster_name	Name of associated EKS cluster	string	""	no
cluster_primary_security_group_id	The ID of the EKS cluster primary security group to associate with the instance(s). This is the security group that is automatically created by the EKS service	string	null	no
cluster_service_cidr	The CIDR block (IPv4 or IPv6) used by the cluster to assign Kubernetes service IP addresses. This is derived from the cluster itself	string	""	no
cluster_version	Kubernetes cluster version - used to lookup default AMI ID if one is not provided	string	null	no
context	Reserved	string	null	no
cpu_options	The CPU options for the instance	map(string)	{}	no
create	Determines whether to create self managed node group or not	bool	true	no
create_access_entry	Determines whether an access entry is created for the IAM role used by the node group	bool	true	no
create_autoscaling_group	Determines whether to create autoscaling group or not	bool	true	no
create_iam_instance_profile	Determines whether an IAM instance profile is created or to use an existing IAM instance profile	bool	true	no
create_iam_role_policy	Determines whether an IAM role policy is created or not	bool	true	no
create_launch_template	Determines whether to create launch template or not	bool	true	no
create_placement_group	Determines whether a placement group is created & used by the node group	bool	false	no
create_schedule	Determines whether to create autoscaling group schedule or not	bool	true	no
credit_specification	Customize the credit specification of the instance	map(string)	{}	no
default_cooldown	The amount of time, in seconds, after a scaling activity completes before another scaling activity can start	number	null	no
default_instance_warmup	Amount of time, in seconds, until a newly launched instance can contribute to the Amazon CloudWatch metrics. This delay lets an instance finish initializing before Amazon EC2 Auto Scaling aggregates instance metrics, resulting in more reliable usage data	number	null	no
delete_timeout	Delete timeout to wait for destroying autoscaling group	string	null	no
desired_size	The number of Amazon EC2 instances that should be running in the autoscaling group	number	1	no
desired_size_type	The unit of measurement for the value specified for desired_size. Supported for attribute-based instance type selection only. Valid values: units, vcpu, memory-mib	string	null	no
disable_api_termination	If true, enables EC2 instance termination protection	bool	null	no
ebs_optimized	If true, the launched EC2 instance will be EBS-optimized	bool	null	no
efa_indices	The indices of the network interfaces that should be EFA-enabled. Only valid when enable_efa_support = true	list(number)	[ 0 ]	no
elastic_gpu_specifications	The elastic GPU to attach to the instance	any	{}	no
elastic_inference_accelerator	Configuration block containing an Elastic Inference Accelerator to attach to the instance	map(string)	{}	no
enable_efa_only	Determines whether to enable EFA (false, default) or EFA and EFA-only (true) network interfaces. Note: requires vpc-cni version v1.18.4 or later	bool	false	no
enable_efa_support	Determines whether to enable Elastic Fabric Adapter (EFA) support	bool	false	no
enable_monitoring	Enables/disables detailed monitoring	bool	true	no
enabled_metrics	A list of metrics to collect. The allowed values are GroupDesiredCapacity, GroupInServiceCapacity, GroupPendingCapacity, GroupMinSize, GroupMaxSize, GroupInServiceInstances, GroupPendingInstances, GroupStandbyInstances, GroupStandbyCapacity, GroupTerminatingCapacity, GroupTerminatingInstances, GroupTotalCapacity, GroupTotalInstances	list(string)	[]	no
enclave_options	Enable Nitro Enclaves on launched instances	map(string)	{}	no
force_delete	Allows deleting the Auto Scaling Group without waiting for all instances in the pool to terminate. You can force an Auto Scaling Group to delete even if it's in the process of scaling a resource. Normally, Terraform drains all the instances before deleting the group. This bypasses that behavior and potentially leaves resources dangling	bool	null	no
force_delete_warm_pool	Allows deleting the Auto Scaling Group without waiting for all instances in the warm pool to terminate	bool	null	no
health_check_grace_period	Time (in seconds) after instance comes into service before checking health	number	null	no
health_check_type	EC2 or ELB. Controls how health checking is done	string	null	no
hibernation_options	The hibernation options for the instance	map(string)	{}	no
iam_instance_profile_arn	Amazon Resource Name (ARN) of an existing IAM instance profile that provides permissions for the node group. Required if create_iam_instance_profile = false	string	null	no
iam_role_additional_policies	Additional policies to be added to the IAM role	map(string)	{}	no
iam_role_arn	ARN of the IAM role used by the instance profile. Required when create_access_entry = true and create_iam_instance_profile = false	string	null	no
iam_role_attach_cni_policy	Whether to attach the AmazonEKS_CNI_Policy/AmazonEKS_CNI_IPv6_Policy IAM policy to the IAM IAM role. WARNING: If set false the permissions must be assigned to the aws-node DaemonSet pods via another method or nodes will not be able to join the cluster	bool	true	no
iam_role_description	Description of the role	string	null	no
iam_role_name	Name to use on IAM role created	string	null	no
iam_role_path	IAM role path	string	null	no
iam_role_permissions_boundary	ARN of the policy that is used to set the permissions boundary for the IAM role	string	null	no
iam_role_policy_statements	A list of IAM policy statements - used for adding specific IAM permissions as needed	any	[]	no
iam_role_tags	A map of additional tags to add to the IAM role created	map(string)	{}	no
iam_role_use_name_prefix	Determines whether cluster IAM role name (iam_role_name) is used as a prefix	bool	true	no
ignore_failed_scaling_activities	Whether to ignore failed Auto Scaling scaling activities while waiting for capacity.	bool	null	no
initial_lifecycle_hooks	One or more Lifecycle Hooks to attach to the Auto Scaling Group before instances are launched. The syntax is exactly the same as the separate aws_autoscaling_lifecycle_hook resource, without the autoscaling_group_name attribute. Please note that this will only work when creating a new Auto Scaling Group. For all other use-cases, please use aws_autoscaling_lifecycle_hook resource	list(map(string))	[]	no
instance_initiated_shutdown_behavior	Shutdown behavior for the instance. Can be stop or terminate. (Default: stop)	string	null	no
instance_maintenance_policy	If this block is configured, add a instance maintenance policy to the specified Auto Scaling group	any	{}	no
instance_market_options	The market (purchasing) option for the instance	any	{}	no
instance_refresh	If this block is configured, start an Instance Refresh when this Auto Scaling Group is updated	any	{ "preferences": { "min_healthy_percentage": 66 }, "strategy": "Rolling" }	no
instance_requirements	The attribute requirements for the type of instance. If present then instance_type cannot be present	any	{}	no
instance_type	The type of the instance to launch	string	""	no
kernel_id	The kernel ID	string	null	no
key_name	The key name that should be used for the instance	string	null	no
launch_template_default_version	Default Version of the launch template	string	null	no
launch_template_description	Description of the launch template	string	null	no
launch_template_id	The ID of an existing launch template to use. Required when create_launch_template = false	string	""	no
launch_template_name	Name of launch template to be created	string	null	no
launch_template_tags	A map of additional tags to add to the tag_specifications of launch template created	map(string)	{}	no
launch_template_use_name_prefix	Determines whether to use launch_template_name as is or create a unique name beginning with the launch_template_name as the prefix	bool	true	no
launch_template_version	Launch template version. Can be version number, $Latest, or $Default	string	null	no
license_specifications	A map of license specifications to associate with	any	{}	no
maintenance_options	The maintenance options for the instance	any	{}	no
max_instance_lifetime	The maximum amount of time, in seconds, that an instance can be in service, values must be either equal to 0 or between 604800 and 31536000 seconds	number	null	no
max_size	The maximum size of the autoscaling group	number	3	no
metadata_options	Customize the metadata options for the instance	map(string)	{ "http_endpoint": "enabled", "http_put_response_hop_limit": 2, "http_tokens": "required" }	no
metrics_granularity	The granularity to associate with the metrics to collect. The only valid value is 1Minute	string	null	no
min_elb_capacity	Setting this causes Terraform to wait for this number of instances to show up healthy in the ELB only on creation. Updates will not wait on ELB instance number changes	number	null	no
min_size	The minimum size of the autoscaling group	number	0	no
mixed_instances_policy	Configuration block containing settings to define launch targets for Auto Scaling groups	any	null	no
name	Name of the Self managed Node Group	string	""	no
network_interfaces	Customize network interfaces to be attached at instance boot time	list(any)	[]	no
placement	The placement of the instance	map(string)	{}	no
placement_group	The name of the placement group into which you'll launch your instances, if any	string	null	no
placement_group_az	Availability zone where placement group is created (ex. eu-west-1c)	string	null	no
platform	[DEPRECATED - must use ami_type instead. Will be removed in v21.0]	string	null	no
post_bootstrap_user_data	User data that is appended to the user data script after of the EKS bootstrap script. Not used when ami_type = BOTTLEROCKET_*	string	""	no
pre_bootstrap_user_data	User data that is injected into the user data script ahead of the EKS bootstrap script. Not used when ami_type = BOTTLEROCKET_*	string	""	no
private_dns_name_options	The options for the instance hostname. The default values are inherited from the subnet	map(string)	{}	no
protect_from_scale_in	Allows setting instance protection. The autoscaling group will not select instances with this setting for termination during scale in events.	bool	false	no
ram_disk_id	The ID of the ram disk	string	null	no
schedules	Map of autoscaling group schedule to create	map(any)	{}	no
service_linked_role_arn	The ARN of the service-linked role that the ASG will use to call other AWS services	string	null	no
subnet_ids	A list of subnet IDs to launch resources in. Subnets automatically determine which availability zones the group will reside. Conflicts with availability_zones	list(string)	null	no
suspended_processes	A list of processes to suspend for the Auto Scaling Group. The allowed values are Launch, Terminate, HealthCheck, ReplaceUnhealthy, AZRebalance, AlarmNotification, ScheduledActions, AddToLoadBalancer. Note that if you suspend either the Launch or Terminate process types, it can prevent your Auto Scaling Group from functioning properly	list(string)	[]	no
tag_specifications	The tags to apply to the resources during launch	list(string)	[ "instance", "volume", "network-interface" ]	no
tags	A map of tags to add to all resources	map(string)	{}	no
target_group_arns	A set of aws_alb_target_group ARNs, for use with Application or Network Load Balancing	list(string)	[]	no
termination_policies	A list of policies to decide how the instances in the Auto Scaling Group should be terminated. The allowed values are OldestInstance, NewestInstance, OldestLaunchConfiguration, ClosestToNextInstanceHour, OldestLaunchTemplate, AllocationStrategy, Default	list(string)	[]	no
update_launch_template_default_version	Whether to update Default Version each update. Conflicts with launch_template_default_version	bool	true	no
use_mixed_instances_policy	Determines whether to use a mixed instances policy in the autoscaling group or not	bool	false	no
use_name_prefix	Determines whether to use name as is or create a unique name beginning with the name as the prefix	bool	true	no
user_data_template_path	Path to a local, custom user data template file to use when rendering user data	string	""	no
vpc_security_group_ids	A list of security group IDs to associate	list(string)	[]	no
wait_for_capacity_timeout	A maximum duration that Terraform should wait for ASG instances to be healthy before timing out. (See also Waiting for Capacity below.) Setting this to '0' causes Terraform to skip all Capacity Waiting behavior.	string	null	no
wait_for_elb_capacity	Setting this will cause Terraform to wait for exactly this number of healthy instances in all attached load balancers on both create and update operations. Takes precedence over min_elb_capacity behavior.	number	null	no
warm_pool	If this block is configured, add a Warm Pool to the specified Auto Scaling group	any	{}	no

Outputs

Name	Description
access_entry_arn	Amazon Resource Name (ARN) of the Access Entry
autoscaling_group_arn	The ARN for this autoscaling group
autoscaling_group_availability_zones	The availability zones of the autoscaling group
autoscaling_group_default_cooldown	Time between a scaling activity and the succeeding scaling activity
autoscaling_group_desired_capacity	The number of Amazon EC2 instances that should be running in the group
autoscaling_group_health_check_grace_period	Time after instance comes into service before checking health
autoscaling_group_health_check_type	EC2 or ELB. Controls how health checking is done
autoscaling_group_id	The autoscaling group id
autoscaling_group_max_size	The maximum size of the autoscaling group
autoscaling_group_min_size	The minimum size of the autoscaling group
autoscaling_group_name	The autoscaling group name
autoscaling_group_schedule_arns	ARNs of autoscaling group schedules
autoscaling_group_vpc_zone_identifier	The VPC zone identifier
iam_instance_profile_arn	ARN assigned by AWS to the instance profile
iam_instance_profile_id	Instance profile's ID
iam_instance_profile_unique	Stable and unique string identifying the IAM instance profile
iam_role_arn	The Amazon Resource Name (ARN) specifying the IAM role
iam_role_name	The name of the IAM role
iam_role_unique_id	Stable and unique string identifying the IAM role
image_id	ID of the image
launch_template_arn	The ARN of the launch template
launch_template_id	The ID of the launch template
launch_template_latest_version	The latest version of the launch template
launch_template_name	The name of the launch template
platform	[DEPRECATED - Will be removed in v21.0] Identifies the OS platform as bottlerocket, linux (AL2), al2023, or windows
user_data	Base64 encoded user data