mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-05-26 01:19:19 +02:00
Jonas Chevalier
576aa293f5
NOTES: The EKS cluster can be provisioned with both private and public subnets. But Fargate only accepts private ones. This new variable allows to override the subnets to explicitly pass the private subnets to Fargate and work around that issue.
116 lines
2.5 KiB
Terraform
116 lines
2.5 KiB
Terraform
terraform {
|
|
required_version = ">= 0.12.6"
|
|
}
|
|
|
|
provider "aws" {
|
|
version = ">= 2.28.1"
|
|
region = var.region
|
|
}
|
|
|
|
provider "random" {
|
|
version = "~> 2.1"
|
|
}
|
|
|
|
provider "local" {
|
|
version = "~> 1.2"
|
|
}
|
|
|
|
provider "null" {
|
|
version = "~> 2.1"
|
|
}
|
|
|
|
provider "template" {
|
|
version = "~> 2.1"
|
|
}
|
|
|
|
data "aws_eks_cluster" "cluster" {
|
|
name = module.eks.cluster_id
|
|
}
|
|
|
|
data "aws_eks_cluster_auth" "cluster" {
|
|
name = module.eks.cluster_id
|
|
}
|
|
|
|
provider "kubernetes" {
|
|
host = data.aws_eks_cluster.cluster.endpoint
|
|
cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
|
|
token = data.aws_eks_cluster_auth.cluster.token
|
|
load_config_file = false
|
|
version = "~> 1.11"
|
|
}
|
|
|
|
data "aws_availability_zones" "available" {
|
|
}
|
|
|
|
locals {
|
|
cluster_name = "test-eks-${random_string.suffix.result}"
|
|
}
|
|
|
|
resource "random_string" "suffix" {
|
|
length = 8
|
|
special = false
|
|
}
|
|
|
|
module "vpc" {
|
|
source = "terraform-aws-modules/vpc/aws"
|
|
version = "2.47.0"
|
|
|
|
name = "test-vpc"
|
|
cidr = "172.16.0.0/16"
|
|
azs = data.aws_availability_zones.available.names
|
|
private_subnets = ["172.16.1.0/24", "172.16.2.0/24", "172.16.3.0/24"]
|
|
public_subnets = ["172.16.4.0/24", "172.16.5.0/24", "172.16.6.0/24"]
|
|
enable_nat_gateway = true
|
|
single_nat_gateway = true
|
|
enable_dns_hostnames = true
|
|
|
|
public_subnet_tags = {
|
|
"kubernetes.io/cluster/${local.cluster_name}" = "shared"
|
|
"kubernetes.io/role/elb" = "1"
|
|
}
|
|
|
|
private_subnet_tags = {
|
|
"kubernetes.io/cluster/${local.cluster_name}" = "shared"
|
|
"kubernetes.io/role/internal-elb" = "1"
|
|
}
|
|
}
|
|
|
|
module "eks" {
|
|
source = "../.."
|
|
cluster_name = local.cluster_name
|
|
cluster_version = "1.17"
|
|
subnets = module.vpc.private_subnets
|
|
|
|
tags = {
|
|
Environment = "test"
|
|
GithubRepo = "terraform-aws-eks"
|
|
GithubOrg = "terraform-aws-modules"
|
|
}
|
|
|
|
vpc_id = module.vpc.vpc_id
|
|
|
|
fargate_profiles = {
|
|
example = {
|
|
namespace = "default"
|
|
|
|
# Kubernetes labels for selection
|
|
# labels = {
|
|
# Environment = "test"
|
|
# GithubRepo = "terraform-aws-eks"
|
|
# GithubOrg = "terraform-aws-modules"
|
|
# }
|
|
|
|
# using specific subnets instead of all the ones configured in eks
|
|
# subnets = ["subnet-0ca3e3d1234a56c78"]
|
|
|
|
tags = {
|
|
Owner = "test"
|
|
}
|
|
}
|
|
}
|
|
|
|
map_roles = var.map_roles
|
|
map_users = var.map_users
|
|
map_accounts = var.map_accounts
|
|
}
|