mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-03-18 07:23:45 +01:00
576aa293f5
NOTES: The EKS cluster can be provisioned with both private and public subnets. But Fargate only accepts private ones. This new variable allows to override the subnets to explicitly pass the private subnets to Fargate and work around that issue.
30 lines
1.3 KiB
HCL
30 lines
1.3 KiB
HCL
resource "aws_iam_role" "eks_fargate_pod" {
|
|
count = local.create_eks && var.create_fargate_pod_execution_role ? 1 : 0
|
|
name_prefix = format("%s-fargate", var.cluster_name)
|
|
assume_role_policy = data.aws_iam_policy_document.eks_fargate_pod_assume_role[0].json
|
|
permissions_boundary = var.permissions_boundary
|
|
tags = var.tags
|
|
path = var.iam_path
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "eks_fargate_pod" {
|
|
count = local.create_eks && var.create_fargate_pod_execution_role ? 1 : 0
|
|
policy_arn = "${var.iam_policy_arn_prefix}/AmazonEKSFargatePodExecutionRolePolicy"
|
|
role = aws_iam_role.eks_fargate_pod[0].name
|
|
}
|
|
|
|
resource "aws_eks_fargate_profile" "this" {
|
|
for_each = local.create_eks ? local.fargate_profiles_expanded : {}
|
|
cluster_name = var.cluster_name
|
|
fargate_profile_name = lookup(each.value, "name", format("%s-fargate-%s", var.cluster_name, replace(each.key, "_", "-")))
|
|
pod_execution_role_arn = local.pod_execution_role_arn
|
|
subnet_ids = lookup(each.value, "subnets", var.subnets)
|
|
tags = each.value.tags
|
|
selector {
|
|
namespace = each.value.namespace
|
|
labels = lookup(each.value, "labels", null)
|
|
}
|
|
|
|
depends_on = [var.eks_depends_on]
|
|
}
|