https://github.com/rhythmictech/terraform-aws-eks-cluster
Create and manage an EKS cluster
https://github.com/rhythmictech/terraform-aws-eks-cluster
Last synced: 12 months ago
JSON representation
Create and manage an EKS cluster
- Host: GitHub
- URL: https://github.com/rhythmictech/terraform-aws-eks-cluster
- Owner: rhythmictech
- Created: 2020-03-07T19:49:18.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2023-03-15T21:41:59.000Z (almost 3 years ago)
- Last Synced: 2025-01-08T11:41:02.432Z (about 1 year ago)
- Language: HCL
- Homepage: https://registry.terraform.io/modules/rhythmictech/eks-cluster/aws
- Size: 37.1 KB
- Stars: 5
- Watchers: 3
- Forks: 5
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# terraform-aws-eks-cluster
[](https://github.com/rhythmictech/terraform-aws-eks-cluster/actions?query=workflow%3Atflint+event%3Apush+branch%3Amaster)
[](https://github.com/rhythmictech/terraform-aws-eks-cluster/actions?query=workflow%3Atfsec+event%3Apush+branch%3Amaster)
[](https://github.com/rhythmictech/terraform-aws-eks-cluster/actions?query=workflow%3Ayamllint+event%3Apush+branch%3Amaster)
[](https://github.com/rhythmictech/terraform-aws-eks-cluster/actions?query=workflow%3Amisspell+event%3Apush+branch%3Amaster)
[](https://github.com/rhythmictech/terraform-aws-eks-cluster/actions?query=workflow%3Apre-commit-check+event%3Apush+branch%3Amaster)
Create and manage an EKS cluster. This module is primarily a wrapper around the official EKS module, which makes a few opinionated decisions to make life easier for most use cases.
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 0.12.19 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | n/a |
## Modules
| Name | Source | Version |
|------|--------|---------|
| [eks](#module\_eks) | git::https://github.com/terraform-aws-modules/terraform-aws-eks.git | v8.0.0 |
## Resources
| Name | Type |
|------|------|
| [aws_cloudwatch_log_metric_filter.invalid_bearer_token](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_metric_filter) | resource |
| [aws_cloudwatch_metric_alarm.invalid_bearer_token](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_metric_alarm) | resource |
| [aws_security_group_rule.cluster_https_cluster_ingress](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [attach\_worker\_autoscaling\_policy](#input\_attach\_worker\_autoscaling\_policy) | Attach an autoscaling policy to the workers | `bool` | `false` | no |
| [cloudwatch\_notification\_arn](#input\_cloudwatch\_notification\_arn) | ARN of SNS topic to send notifications to. Only used if `create_metric_filters` is true. | `string` | `null` | no |
| [cluster\_access\_additional\_sgs](#input\_cluster\_access\_additional\_sgs) | List of security groups to provide access to the internal cluster endpoint | `list(string)` | `[]` | no |
| [cluster\_enabled\_log\_types](#input\_cluster\_enabled\_log\_types) | List of log types to send to CloudWatch | `list(string)` |
[
"api",
"audit",
"authenticator",
"controllerManager",
"scheduler"
]
| no |
| [cluster\_endpoint\_private\_access](#input\_cluster\_endpoint\_private\_access) | Whether or not to create private endpoint for cluster access | `bool` | `true` | no |
| [cluster\_name](#input\_cluster\_name) | Name of EKS cluster | `string` | n/a | yes |
| [cluster\_version](#input\_cluster\_version) | Version of EKS cluster (be careful about changing this on a running cluster) | `string` | `"1.15"` | no |
| [create\_metric\_filters](#input\_create\_metric\_filters) | Creates metric filters to look for kubernetes logs that indicate a problem. Must set `cloudwatch_notification_arn = true` if used. | `bool` | `false` | no |
| [disable\_imds](#input\_disable\_imds) | Disable IMDS (EC2 metadata url) for pods, see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html | `bool` | `false` | no |
| [enable\_irsa](#input\_enable\_irsa) | Enable IRSA (EKS IAM security OIDC provider) | `bool` | `true` | no |
| [invalid\_bearer\_token\_threshold](#input\_invalid\_bearer\_token\_threshold) | Threshold for invalid bearer token alerting. This can indicate a misconfigured cluster but can fire false positives if set too low. | `number` | `10` | no |
| [manage\_worker\_autoscaling\_policy](#input\_manage\_worker\_autoscaling\_policy) | Whether or not the worker autoscaling policy should be managed by this module | `bool` | `false` | no |
| [map\_roles](#input\_map\_roles) | Additional IAM roles to add to the aws-auth configmap. | `list(any)` | `[]` | no |
| [map\_users](#input\_map\_users) | Additional IAM users to add to the aws-auth configmap. | `list(any)` | `[]` | no |
| [subnets](#input\_subnets) | A list of subnets to place the EKS cluster and workers within. | `list(string)` | n/a | yes |
| [tags](#input\_tags) | Tags to apply to supported resources | `map(string)` | `{}` | no |
| [vpc\_id](#input\_vpc\_id) | VPC where the cluster and workers will be deployed. | `string` | n/a | yes |
| [worker\_groups](#input\_worker\_groups) | A list of maps defining worker group configurations to be defined using AWS Launch Configurations. See workers\_group\_defaults for valid keys. | `list(any)` | `[]` | no |
| [worker\_groups\_launch\_template](#input\_worker\_groups\_launch\_template) | A list of maps defining worker group configurations to be defined using AWS Launch Template. See workers\_group\_defaults for valid keys. | `list` | `[]` | no |
| [workers\_additional\_policies](#input\_workers\_additional\_policies) | Additional IAM policies to attach (use ARNs) | `list(string)` | `[]` | no |
| [workers\_group\_defaults](#input\_workers\_group\_defaults) | Override default values for target groups. See `workers_group_defaults_defaults` in local.tf for valid keys. | `map` | `{}` | no |
## Outputs
| Name | Description |
|------|-------------|
| [cloudwatch\_log\_group\_name](#output\_cloudwatch\_log\_group\_name) | Cluodwatch log group name, if logging enabled |
| [cluster\_certificate\_authority\_data](#output\_cluster\_certificate\_authority\_data) | Cluster CA Cert |
| [cluster\_endpoint](#output\_cluster\_endpoint) | Kubernetes API Endpoint URL |
| [cluster\_iam\_role\_arn](#output\_cluster\_iam\_role\_arn) | IAM role name for the cluster |
| [cluster\_id](#output\_cluster\_id) | EKS Cluster ID |
| [cluster\_issuer\_arn](#output\_cluster\_issuer\_arn) | OIDC Issuer ARN (returns empty string unless IRSA is enabled) |
| [cluster\_issuer\_url](#output\_cluster\_issuer\_url) | OIDC Issuer URL (returns empty string unless IRSA is enabled) |
| [cluster\_security\_group\_id](#output\_cluster\_security\_group\_id) | Security group protecting the cluster endpoint |
| [cluster\_version](#output\_cluster\_version) | Kubernetes cluster version |
| [worker\_iam\_role\_arn](#output\_worker\_iam\_role\_arn) | IAM role attached to workers |
| [worker\_iam\_role\_name](#output\_worker\_iam\_role\_name) | IAM role attached to workers |
| [worker\_security\_group\_id](#output\_worker\_security\_group\_id) | Security group ID attached to the EKS workers. |