mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-01-11 14:30:55 +01:00
* Add aws version constraint for 6.0.0 * fix: Restrict all AWS providers and Helm providers upper version limit --------- Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
9.3 KiB
9.3 KiB
EKS Managed Node Group
Usage
To provision the provided configurations you need to execute:
$ terraform init
$ terraform plan
$ terraform apply --auto-approve
Note that this example may create resources which cost money. Run terraform destroy when you don't need these resources.
Requirements
| Name | Version |
|---|---|
| terraform | >= 1.3.2 |
| aws | >= 5.95, < 6.0.0 |
Providers
| Name | Version |
|---|---|
| aws | >= 5.95, < 6.0.0 |
Modules
| Name | Source | Version |
|---|---|---|
| aws_vpc_cni_ipv6_pod_identity | terraform-aws-modules/eks-pod-identity/aws | ~> 1.6 |
| disabled_eks | ../.. | n/a |
| disabled_eks_managed_node_group | ../../modules/eks-managed-node-group | n/a |
| ebs_kms_key | terraform-aws-modules/kms/aws | ~> 2.1 |
| eks | ../.. | n/a |
| eks_managed_node_group | ../../modules/eks-managed-node-group | n/a |
| key_pair | terraform-aws-modules/key-pair/aws | ~> 2.0 |
| vpc | terraform-aws-modules/vpc/aws | ~> 5.0 |
Resources
| Name | Type |
|---|---|
| aws_iam_policy.node_additional | resource |
| aws_iam_role.this | resource |
| aws_security_group.remote_access | resource |
| aws_ami.eks_default | data source |
| aws_ami.eks_default_arm | data source |
| aws_ami.eks_default_bottlerocket | data source |
| aws_availability_zones.available | data source |
| aws_caller_identity.current | data source |
Inputs
No inputs.
Outputs
| Name | Description |
|---|---|
| access_entries | Map of access entries created and their attributes |
| cloudwatch_log_group_arn | Arn of cloudwatch log group created |
| cloudwatch_log_group_name | Name of cloudwatch log group created |
| cluster_addons | Map of attribute maps for all EKS cluster addons enabled |
| cluster_arn | The Amazon Resource Name (ARN) of the cluster |
| cluster_certificate_authority_data | Base64 encoded certificate data required to communicate with the cluster |
| cluster_dualstack_oidc_issuer_url | Dual-stack compatible URL on the EKS cluster for the OpenID Connect identity provider |
| cluster_endpoint | Endpoint for your Kubernetes API server |
| cluster_iam_role_arn | Cluster IAM role ARN |
| cluster_iam_role_name | Cluster IAM role name |
| cluster_iam_role_unique_id | Stable and unique string identifying the IAM role |
| cluster_id | The ID of the EKS cluster. Note: currently a value is returned only for local EKS clusters created on Outposts |
| cluster_identity_providers | Map of attribute maps for all EKS identity providers enabled |
| cluster_ip_family | The IP family used by the cluster (e.g. ipv4 or ipv6) |
| cluster_name | The name of the EKS cluster |
| cluster_oidc_issuer_url | The URL on the EKS cluster for the OpenID Connect identity provider |
| cluster_platform_version | Platform version for the cluster |
| cluster_primary_security_group_id | Cluster security group that was created by Amazon EKS for the cluster. Managed node groups use this security group for control-plane-to-data-plane communication. Referred to as 'Cluster security group' in the EKS console |
| cluster_security_group_arn | Amazon Resource Name (ARN) of the cluster security group |
| cluster_security_group_id | ID of the cluster security group |
| cluster_service_cidr | The CIDR block where Kubernetes pod and service IP addresses are assigned from |
| cluster_status | Status of the EKS cluster. One of CREATING, ACTIVE, DELETING, FAILED |
| cluster_tls_certificate_sha1_fingerprint | The SHA1 fingerprint of the public key of the cluster's certificate |
| eks_managed_node_groups | Map of attribute maps for all EKS managed node groups created |
| eks_managed_node_groups_autoscaling_group_names | List of the autoscaling group names created by EKS managed node groups |
| fargate_profiles | Map of attribute maps for all EKS Fargate Profiles created |
| kms_key_arn | The Amazon Resource Name (ARN) of the key |
| kms_key_id | The globally unique identifier for the key |
| kms_key_policy | The IAM resource policy set on the key |
| node_iam_role_arn | EKS Auto node IAM role ARN |
| node_iam_role_name | EKS Auto node IAM role name |
| node_iam_role_unique_id | Stable and unique string identifying the IAM role |
| node_security_group_arn | Amazon Resource Name (ARN) of the node shared security group |
| node_security_group_id | ID of the node shared security group |
| oidc_provider | The OpenID Connect identity provider (issuer URL without leading https://) |
| oidc_provider_arn | The ARN of the OIDC Provider if enable_irsa = true |
| self_managed_node_groups | Map of attribute maps for all self managed node groups created |
| self_managed_node_groups_autoscaling_group_names | List of the autoscaling group names created by self-managed node groups |