https://github.com/nlamirault/terraform-aws-ack

Terraform module for AWS Controllers for Kubernetes
https://github.com/nlamirault/terraform-aws-ack

ack aws galactus terraform terraform-module

Last synced: about 1 month ago
JSON representation

Terraform module for AWS Controllers for Kubernetes

• Host: GitHub
• URL: https://github.com/nlamirault/terraform-aws-ack
• Owner: nlamirault
• Created: 2021-12-09T13:50:30.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2025-03-11T17:15:01.000Z (over 1 year ago)
• Last Synced: 2025-03-11T18:25:33.649Z (over 1 year ago)
• Topics: ack, aws, galactus, terraform, terraform-module
• Language: HCL
• Homepage:
• Size: 201 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# Terraform module for AWS ACK

![Tfsec](https://github.com/nlamirault/terraform-aws-teleport/workflows/Tfsec/badge.svg)

## Documentation

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | >= 1.0.0 |

|  [aws](#requirement\_aws) | >= 4.0.0 |

## Providers

| Name | Version |

|------|---------|

|  [aws](#provider\_aws) | >= 4.0.0 |

## Modules

| Name | Source | Version |

|------|--------|---------|

|  [ack\_controller\_role](#module\_ack\_controller\_role) | terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc | 5.5.0 |

|  [alb\_controller\_role](#module\_alb\_controller\_role) | terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc | 5.5.0 |

## Resources

| Name | Type |

|------|------|

| [aws_iam_policy.ack_eks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |

| [aws_eks_cluster.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/eks_cluster) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [ack\_controller\_namespace](#input\_ack\_controller\_namespace) | The K8s namespace for ACK Controller resources | `string` | `"ack-system"` | no |

|  [ack\_controller\_role\_name](#input\_ack\_controller\_role\_name) | The name of the ACK Controller IAM role | `string` | `"ack-controller"` | no |

|  [ack\_services](#input\_ack\_services) | List of AWS services | 
list(object({
    name       = string
    policy_arn = string
  }))
 | 
[
  {
    "name": "apigatewayv2",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator"
  },
  {
    "name": "applicationautoscaling",
    "policy_arn": "arn:aws:iam::aws:policy/PowerUserAccess"
  },
  {
    "name": "dynamodb",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess"
  },
  {
    "name": "ec2",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonEC2FullAccess"
  },
  {
    "name": "ecr",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess"
  },
  {
    "name": "apigatewayv2",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator"
  },
  {
    "name": "elasticache",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess"
  },
  {
    "name": "kms",
    "policy_arn": "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser"
  },
  {
    "name": "lambda",
    "policy_arn": "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
  },
  {
    "name": "mq",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonMQApiFullAccess"
  },
  {
    "name": "opensearchservice",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonOpenSearchServiceFullAccess"
  },
  {
    "name": "rds",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonRDSFullAccess"
  },
  {
    "name": "s3",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"
  },
  {
    "name": "sagemaker",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonSageMakerFullAccess"
  },
  {
    "name": "sfn",
    "policy_arn": "arn:aws:iam::aws:policy/AWSStepFunctionsFullAccess"
  },
  {
    "name": "sns",
    "policy_arn": "arn:aws:iam::aws:policy/AmazonSNSFullAccess"
  }
]
 | no |

|  [cluster\_name](#input\_cluster\_name) | Name of the EKS cluster | `string` | n/a | yes |

|  [tags](#input\_tags) | A map of tags to add to all resources | `map(string)` | n/a | yes |


## Outputs

No outputs.