Skip to main content
Version: Next

README

Requirements

NameVersion
terraform>= 1.9.0
aws>= 5.62.0, < 6.0.0
kubectl~> 1.19.0
kubernetes~> 2.24.0

Providers

NameVersion
aws5.100.0
kubectl1.19.0
kubernetes2.24.0

Modules

NameSourceVersion
allow_assume_eks_admins_iam_policygit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-policye20e0b9a42084bbc885fd5abb18b8744810bd567
allow_eks_access_iam_policygit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-policye20e0b9a42084bbc885fd5abb18b8744810bd567
ebs_csi_irsagit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-role-for-service-accounts-ekse20e0b9a42084bbc885fd5abb18b8744810bd567
eksgit::https://github.com/terraform-aws-modules/terraform-aws-eks.git2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b
eks_admins_iam_rolegit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-assumable-rolee20e0b9a42084bbc885fd5abb18b8744810bd567
iam_usergit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-usere20e0b9a42084bbc885fd5abb18b8744810bd567
vpcgit::https://github.com/terraform-aws-modules/terraform-aws-vpc.git573f574c922782bc658f05523d0c902a4792b0a8
vpc_cni_irsagit::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-role-for-service-accounts-ekse20e0b9a42084bbc885fd5abb18b8744810bd567

Resources

NameType
aws_iam_policy.ecr_accessresource
aws_iam_policy.ecr_pull_through_cacheresource
aws_iam_policy.s3_accessresource
aws_iam_policy_attachment.eks_admins_policy_attachmentresource
aws_security_group.vpc_endpointresource
aws_security_group_rule.vpc_endpoint_egressresource
aws_security_group_rule.vpc_endpoint_self_ingressresource
aws_vpc_endpoint.ecrresource
aws_vpc_endpoint.s3resource
aws_vpc_endpoint.stsresource
aws_vpc_endpoint_route_table_association.s3resource
aws_vpc_security_group_ingress_rule.vpc_endpoints_accessresource
kubectl_manifest.ebs_storage_classesresource
kubernetes_annotations.set_default_storage_classresource
kubernetes_annotations.unset_eks_default_gp2resource
kubernetes_annotations.unset_eks_default_gp3resource

Inputs

NameDescriptionTypeDefaultRequired
AWS_ACCESS_KEY_IDAWS access key associated with an IAM accountstring""no
AWS_PROFILEAWS Profile that resources are created instring"default"no
AWS_REGIONTarget AWS regionstring"eu-west-2"no
AWS_SECRET_ACCESS_KEYAWS secret key associated with the access keystring""no
AWS_SESSION_TOKENSession token for temporary security credentials from AWS STSstring""no
common_tagsCommon tags associated to resources createdmap(string){
"Environment": "dev",
"Project": "radar-base"
}
no
create_dmz_node_groupWhether or not to create a DMZ node group with taintsboolfalseno
default_storage_classDefault storage class used for describing the EBS usagestring"radar-base-ebs-sc-gp3"no
dmz_node_sizeNode size of the DMZ node groupmap(number){
"desired": 1,
"max": 2,
"min": 0
}
no
ecr_repository_namesDefault prefixes for ECR repositories if used for hosting the imageslist(string)[
"radar-base-ecr-public",
"radar-base-k8s",
"radar-base-quay",
"radar-base-docker-hub",
"radar-base-ghcr"
]
no
eks_admins_group_usersEKS admin IAM user grouplist(string)[]no
eks_admins_mfa_requiredWhether or not MFA is required for EKS admin IAM usersboolfalseno
eks_cluster_nameEKS cluster namestringn/ayes
eks_kubernetes_versionAmazon EKS Kubernetes versionstring"1.35"no
instance_capacity_typeCapacity type used by EKS managed node groupsstring"SPOT"no
instance_typesList of instance types used by EKS managed node groupslist(any)[
"m5.large",
"m5d.large",
"m5a.large",
"m5ad.large",
"m4.large"
]
no
vpc_cidrVPC CIDRstring"10.0.0.0/16"no
vpc_private_subnet_cidrList of private subnet configurationslist(any)[
"10.0.0.0/19",
"10.0.32.0/19",
"10.0.64.0/19"
]
no
vpc_public_subnet_cidrList of public subnet configurationslist(any)[
"10.0.96.0/19",
"10.0.128.0/19",
"10.0.160.0/19"
]
no
worker_node_sizeNode size of the worker node groupmap(number){
"desired": 2,
"max": 10,
"min": 0
}
no

Outputs

NameDescription
radar_base_default_storage_classn/a
radar_base_eks_admins_roleEKS admin role ARN
radar_base_eks_cluster_endpointn/a
radar_base_eks_cluster_kms_key_arnn/a
radar_base_eks_cluster_namen/a
radar_base_eks_dmz_node_group_namen/a
radar_base_eks_worker_node_group_namen/a
radar_base_vpc_public_subnetsn/a