mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-01-16 08:37:18 +01:00
6b40bdbb1d
* feat: Replace `resolve_conflicts` with `resolve_conflicts_on_create`/`delete`; raise MSV of AWS provider to `v5.0` to support * fix: Replace dynamic DNS suffix for `sts:AssumeRole` API calls for static suffix * feat: Add module tag * feat: Align Karpenter permissions with Karpenter v1beta1/v0.32 permissions from upstream * refactor: Move `aws-auth` ConfigMap functionality to its own sub-module * chore: Update examples * feat: Add state `moved` block for Karpenter Pod Identity role re-name * fix: Correct variable `create` description * feat: Add support for cluster access entries * chore: Bump MSV of Terraform to `1.3` * fix: Replace defunct kubectl provider with an updated forked equivalent * chore: Update and validate examples for access entry; clean up provider usage * docs: Correct double redundant variable descriptions * feat: Add support for Cloudwatch log group class argument * fix: Update usage tag placement, fix Karpenter event spelling, add upcoming changes section to upgrade guide * feat: Update Karpenter module to generalize naming used and align policy with the upstream Karpenter policy * feat: Add native support for Windows based managed nodegroups similar to AL2 and Bottlerocket * feat: Update self-managed nodegroup module to use latest features of ASG * docs: Update and simplify docs * fix: Correct variable description for AMI types * fix: Update upgrade guide with changes; rename Karpenter controller resource names to support migrating for users * docs: Complete upgrade guide docs for migration and changes applied * Update examples/karpenter/README.md Co-authored-by: Anton Babenko <anton@antonbabenko.com> * Update examples/outposts/README.md Co-authored-by: Anton Babenko <anton@antonbabenko.com> * Update modules/karpenter/README.md Co-authored-by: Anton Babenko <anton@antonbabenko.com> --------- Co-authored-by: Anton Babenko <anton@antonbabenko.com>
345 lines
9.4 KiB
HCL
345 lines
9.4 KiB
HCL
locals {
|
|
name = "ex-${replace(basename(path.cwd), "_", "-")}"
|
|
|
|
cluster_endpoint = "https://012345678903AB2BAE5D1E0BFE0E2B50.gr7.us-east-1.eks.amazonaws.com"
|
|
cluster_auth_base64 = "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"
|
|
cluster_service_ipv4_cidr = "172.16.0.0/16"
|
|
}
|
|
|
|
################################################################################
|
|
# User Data Module
|
|
################################################################################
|
|
|
|
# EKS managed node group - linux
|
|
module "eks_mng_linux_no_op" {
|
|
source = "../../modules/_user_data"
|
|
}
|
|
|
|
module "eks_mng_linux_additional" {
|
|
source = "../../modules/_user_data"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
export USE_MAX_PODS=false
|
|
EOT
|
|
}
|
|
|
|
module "eks_mng_linux_custom_ami" {
|
|
source = "../../modules/_user_data"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
cluster_service_ipv4_cidr = local.cluster_service_ipv4_cidr
|
|
|
|
enable_bootstrap_user_data = true
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
export FOO=bar
|
|
EOT
|
|
|
|
bootstrap_extra_args = "--kubelet-extra-args '--instance-type t3a.large'"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
echo "All done"
|
|
EOT
|
|
}
|
|
|
|
|
|
module "eks_mng_linux_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
user_data_template_path = "${path.module}/templates/linux_custom.tpl"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
echo "foo"
|
|
export FOO=bar
|
|
EOT
|
|
|
|
bootstrap_extra_args = "--kubelet-extra-args '--node-labels=node.kubernetes.io/lifecycle=spot'"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
echo "All done"
|
|
EOT
|
|
}
|
|
|
|
# EKS managed node group - bottlerocket
|
|
module "eks_mng_bottlerocket_no_op" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
}
|
|
|
|
module "eks_mng_bottlerocket_additional" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
bootstrap_extra_args = <<-EOT
|
|
# extra args added
|
|
[settings.kernel]
|
|
lockdown = "integrity"
|
|
EOT
|
|
}
|
|
|
|
module "eks_mng_bottlerocket_custom_ami" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
enable_bootstrap_user_data = true
|
|
|
|
bootstrap_extra_args = <<-EOT
|
|
# extra args added
|
|
[settings.kernel]
|
|
lockdown = "integrity"
|
|
EOT
|
|
}
|
|
|
|
module "eks_mng_bottlerocket_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
user_data_template_path = "${path.module}/templates/bottlerocket_custom.tpl"
|
|
|
|
bootstrap_extra_args = <<-EOT
|
|
# extra args added
|
|
[settings.kernel]
|
|
lockdown = "integrity"
|
|
EOT
|
|
}
|
|
|
|
# EKS managed node group - windows
|
|
module "eks_mng_windows_no_op" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
}
|
|
|
|
module "eks_mng_windows_additional" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
}
|
|
|
|
module "eks_mng_windows_custom_ami" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
enable_bootstrap_user_data = true
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
# I don't know if this is the right way on Windows, but its just a string check here anyways
|
|
bootstrap_extra_args = "-KubeletExtraArgs --node-labels=node.kubernetes.io/lifecycle=spot"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IStillDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
}
|
|
|
|
module "eks_mng_windows_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
enable_bootstrap_user_data = true
|
|
|
|
user_data_template_path = "${path.module}/templates/windows_custom.tpl"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
# I don't know if this is the right way on Windows, but its just a string check here anyways
|
|
bootstrap_extra_args = "-KubeletExtraArgs --node-labels=node.kubernetes.io/lifecycle=spot"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IStillDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
}
|
|
|
|
# Self managed node group - linux
|
|
module "self_mng_linux_no_op" {
|
|
source = "../../modules/_user_data"
|
|
|
|
is_eks_managed_node_group = false
|
|
}
|
|
|
|
module "self_mng_linux_bootstrap" {
|
|
source = "../../modules/_user_data"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
echo "foo"
|
|
export FOO=bar
|
|
EOT
|
|
|
|
bootstrap_extra_args = "--kubelet-extra-args '--node-labels=node.kubernetes.io/lifecycle=spot'"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
echo "All done"
|
|
EOT
|
|
}
|
|
|
|
module "self_mng_linux_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
user_data_template_path = "${path.module}/templates/linux_custom.tpl"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
echo "foo"
|
|
export FOO=bar
|
|
EOT
|
|
|
|
bootstrap_extra_args = "--kubelet-extra-args '--node-labels=node.kubernetes.io/lifecycle=spot'"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
echo "All done"
|
|
EOT
|
|
}
|
|
|
|
# Self managed node group - bottlerocket
|
|
module "self_mng_bottlerocket_no_op" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
is_eks_managed_node_group = false
|
|
}
|
|
|
|
module "self_mng_bottlerocket_bootstrap" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
bootstrap_extra_args = <<-EOT
|
|
# extra args added
|
|
[settings.kernel]
|
|
lockdown = "integrity"
|
|
EOT
|
|
}
|
|
|
|
module "self_mng_bottlerocket_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "bottlerocket"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
user_data_template_path = "${path.module}/templates/bottlerocket_custom.tpl"
|
|
|
|
bootstrap_extra_args = <<-EOT
|
|
# extra args added
|
|
[settings.kernel]
|
|
lockdown = "integrity"
|
|
EOT
|
|
}
|
|
|
|
# Self managed node group - windows
|
|
module "self_mng_windows_no_op" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
is_eks_managed_node_group = false
|
|
}
|
|
|
|
module "self_mng_windows_bootstrap" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
# I don't know if this is the right way on Windows, but its just a string check here anyways
|
|
bootstrap_extra_args = "-KubeletExtraArgs --node-labels=node.kubernetes.io/lifecycle=spot"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IStillDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
}
|
|
|
|
module "self_mng_windows_custom_template" {
|
|
source = "../../modules/_user_data"
|
|
|
|
platform = "windows"
|
|
|
|
enable_bootstrap_user_data = true
|
|
is_eks_managed_node_group = false
|
|
|
|
cluster_name = local.name
|
|
cluster_endpoint = local.cluster_endpoint
|
|
cluster_auth_base64 = local.cluster_auth_base64
|
|
|
|
user_data_template_path = "${path.module}/templates/windows_custom.tpl"
|
|
|
|
pre_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
# I don't know if this is the right way on Windows, but its just a string check here anyways
|
|
bootstrap_extra_args = "-KubeletExtraArgs --node-labels=node.kubernetes.io/lifecycle=spot"
|
|
|
|
post_bootstrap_user_data = <<-EOT
|
|
[string]$Something = 'IStillDoNotKnowAnyPowerShell ¯\_(ツ)_/¯'
|
|
EOT
|
|
}
|