Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/dominodatalab/terraform-external-sagemaker
Terraform module for setting up an external AWS account as a sagemaker deployment target in Domino.
https://github.com/dominodatalab/terraform-external-sagemaker
Last synced: 29 days ago
JSON representation
Terraform module for setting up an external AWS account as a sagemaker deployment target in Domino.
- Host: GitHub
- URL: https://github.com/dominodatalab/terraform-external-sagemaker
- Owner: dominodatalab
- Created: 2024-10-21T13:21:15.000Z (2 months ago)
- Default Branch: main
- Last Pushed: 2024-11-13T20:44:16.000Z (about 1 month ago)
- Last Synced: 2024-11-13T21:36:09.341Z (about 1 month ago)
- Language: HCL
- Homepage:
- Size: 6.84 KB
- Stars: 0
- Watchers: 5
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# terraform-external-sagemaker
This is a terraform module for setting up an external AWS account as a sagemaker deployment target in Domino.
## Prerequisites
Must be running Domino 6.0.0 (or newer) on AWS EKS
## Testing locally
1. Configure the AWS CLI with valid admin creds for an AWS account to use in testing
2. `terraform init`
3. `terraform test -verbose`
4. Verify the tests succeeded or failed.
## Applying remotely
1. Configure the AWS CLI with valid admin creds for the target AWS account
2. `terraform init`
3. `terraform apply`
1. Enter the value for `domino_external_deployments_role_arn` when prompted. Use the ARN of the external deployments
IAM role for the Domino platform.
```
var.domino_external_deployments_role_arn
ARN for the Domino external deployments IAM role (in the domino AWS account)
Enter a value: arn:aws:iam::123456789012:role/domino-external-deployments-operator
```
2. Enter the value for `region` when prompted. Use the region where you want sagemaker resources to be created in
the target account (NOT the region of the Domino platform).
```
var.region
AWS region in which to create the sagemaker resources
Enter a value: us-west-2
```
3. If successful, you'll see output like this:
```
Apply complete! Resources: 3 added, 0 changed, 0 destroyed.
Outputs:
sagemaker = {
"account_id" = "521624712688"
"bucket" = "domino-sagemaker-521624712688"
"region" = "us-west-2"
"repository" = "domino-sagemaker"
"role_arn" = "arn:aws:iam::521624712688:role/domino-sagemaker"
}
```
## Destroying remotely
1. Configure the AWS CLI with valid admin creds for the target AWS account
2. `terraform init`
3. `terraform destroy`
1. Enter the value for `domino_external_deployments_role_arn` when prompted. Use the ARN of the external deployments
IAM role for the Domino platform.
```
var.domino_external_deployments_role_arn
ARN for the Domino external deployments IAM role (in the domino AWS account)
Enter a value: arn:aws:iam::123456789012:role/domino-external-deployments-operator
```
2. Enter the value for `region` when prompted. Use the region where you want sagemaker resources to be created in
the target account (NOT the region of the Domino platform).
```
var.region
AWS region in which to create the sagemaker resources
Enter a value: us-west-2
```
3. If successful, you'll see output like this:
```
Destroy complete! Resources: 3 destroyed.
```
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 1.0 |
| [aws](#requirement\_aws) | ~> 5.0 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | ~> 5.0 |
## Modules
No modules.
## Resources
| Name | Type |
|------|------|
| [aws_iam_policy.role_permissions_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |
| [aws_iam_role.domino_sagemaker_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |
| [aws_iam_role_policy_attachment.role_permissions_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
| [aws_iam_policy_document.read_domino_environments](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_iam_policy_document.role_permissions_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_iam_policy_document.role_trust_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_partition.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/partition) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [bucket](#input\_bucket) | S3 bucket to use for sagemaker deployment model artifacts (in the target AWS account). Defaults to the value specified by `resource_identifier` plus the suffix `-{aws_account_id}.` | `string` | `null` | no |
| [domino\_environments\_repository\_arn](#input\_domino\_environments\_repository\_arn) | ARN for the Domino environments repository. ONLY needed if deploying in the SAME AWS account as Domino. | `string` | n/a | yes |
| [domino\_external\_deployments\_role\_arn](#input\_domino\_external\_deployments\_role\_arn) | ARN for the Domino external deployments IAM role (in the domino AWS account) | `string` | n/a | yes |
| [region](#input\_region) | AWS region in which to create the sagemaker resources | `string` | n/a | yes |
| [repository](#input\_repository) | ECR repository name to use for sagemaker deployment images (in the target AWS account). Defaults to the value specified by `resource_identifier`. | `string` | `null` | no |
| [resource\_identifier](#input\_resource\_identifier) | identifier for domino-created resources in the AWS account | `string` | `"domino-sagemaker"` | no |
| [role\_name](#input\_role\_name) | IAM role name to use for creating sagemaker deployment resources (in the target AWS account). Defaults to the value specified by `resource_identifier`. | `string` | `null` | no |
## Outputs
| Name | Description |
|------|-------------|
| [sagemaker](#output\_sagemaker) | Domino sagemaker deployments info |