mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-01-16 00:34:31 +01:00
96 lines
2.6 KiB
HCL
96 lines
2.6 KiB
HCL
provider "aws" {
|
|
region = local.region
|
|
}
|
|
|
|
locals {
|
|
region = "eu-west-1"
|
|
k8s_version = "1.21"
|
|
}
|
|
|
|
module "eks" {
|
|
source = "../.."
|
|
|
|
cluster_name = "bottlerocket-${random_string.suffix.result}"
|
|
cluster_version = local.k8s_version
|
|
|
|
vpc_id = data.aws_vpc.default.id
|
|
subnets = data.aws_subnet_ids.default.ids
|
|
|
|
write_kubeconfig = false
|
|
manage_aws_auth = false
|
|
|
|
worker_groups_launch_template = [
|
|
{
|
|
name = "bottlerocket-nodes"
|
|
ami_id = data.aws_ami.bottlerocket_ami.id
|
|
instance_type = "t3a.small"
|
|
asg_desired_capacity = 2
|
|
key_name = aws_key_pair.nodes.key_name
|
|
|
|
# Since we are using default VPC there is no NAT gateway so we need to
|
|
# attach public ip to nodes so they can reach k8s API server
|
|
# do not repeat this at home (i.e. production)
|
|
public_ip = true
|
|
|
|
# This section overrides default userdata template to pass bottlerocket
|
|
# specific user data
|
|
userdata_template_file = "${path.module}/userdata.toml"
|
|
# we are using this section to pass additional arguments for
|
|
# userdata template rendering
|
|
userdata_template_extra_args = {
|
|
enable_admin_container = false
|
|
enable_control_container = true
|
|
aws_region = local.region
|
|
}
|
|
# example of k8s/kubelet configuration via additional_userdata
|
|
additional_userdata = <<EOT
|
|
[settings.kubernetes.node-labels]
|
|
ingress = "allowed"
|
|
EOT
|
|
}
|
|
]
|
|
}
|
|
|
|
# SSM policy for bottlerocket control container access
|
|
# https://github.com/bottlerocket-os/bottlerocket/blob/develop/QUICKSTART-EKS.md#enabling-ssm
|
|
resource "aws_iam_role_policy_attachment" "ssm" {
|
|
role = module.eks.worker_iam_role_name
|
|
policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
|
|
}
|
|
|
|
################################################################################
|
|
# Supporting Resources
|
|
################################################################################
|
|
|
|
data "aws_vpc" "default" {
|
|
default = true
|
|
}
|
|
|
|
data "aws_subnet_ids" "default" {
|
|
vpc_id = data.aws_vpc.default.id
|
|
}
|
|
|
|
data "aws_ami" "bottlerocket_ami" {
|
|
most_recent = true
|
|
owners = ["amazon"]
|
|
|
|
filter {
|
|
name = "name"
|
|
values = ["bottlerocket-aws-k8s-${local.k8s_version}-x86_64-*"]
|
|
}
|
|
}
|
|
|
|
resource "random_string" "suffix" {
|
|
length = 8
|
|
special = false
|
|
}
|
|
|
|
resource "tls_private_key" "nodes" {
|
|
algorithm = "RSA"
|
|
}
|
|
|
|
resource "aws_key_pair" "nodes" {
|
|
key_name = "bottlerocket-nodes-${random_string.suffix.result}"
|
|
public_key = tls_private_key.nodes.public_key_openssh
|
|
}
|