README

Requirements

Name	Version
terraform	>= 1.9.0
archive	~> 2.7.0
aws	>= 5.62.0, < 6.0.0
helm	~> 2.11.0
kubectl	~> 1.19.0
kubernetes	~> 2.24.0
random	~> 3.7.0

Providers

Name	Version
archive	2.7.1
aws	5.100.0
helm	2.11.0
kubectl	1.19.0
kubernetes	2.24.0
random	3.7.2

Modules

Name	Source	Version
cert_manager_irsa	git::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-role-for-service-accounts-eks	e20e0b9a42084bbc885fd5abb18b8744810bd567
external_dns_irsa	git::https://github.com/terraform-aws-modules/terraform-aws-iam.git//modules/iam-role-for-service-accounts-eks	e20e0b9a42084bbc885fd5abb18b8744810bd567
karpenter	git::https://github.com/terraform-aws-modules/terraform-aws-eks.git//modules/karpenter	8a0efdbbc84180a26e0bacfd2b6fcfceac53b3b6

Resources

Name	Type
aws_cloudwatch_log_group.msk_broker	resource
aws_db_instance.radar_postgres	resource
aws_db_instance.radar_postgres_replicas	resource
aws_db_subnet_group.rds_subnet	resource
aws_ecr_pull_through_cache_rule.dockerhub	resource
aws_ecr_repository_creation_template.dockerhub	resource
aws_eip.cluster_loadbalancer_eip	resource
aws_iam_access_key.s3_access	resource
aws_iam_access_key.smtp_user_key	resource
aws_iam_policy.ecr_repository_permissions	resource
aws_iam_policy.s3_access	resource
aws_iam_policy.smtp_user_policy	resource
aws_iam_role.ecr_repository_creator	resource
aws_iam_role.msk_role	resource
aws_iam_role.secret_rotation_role	resource
aws_iam_role_policy.karpenter_list_instance_profiles	resource
aws_iam_role_policy.secret_rotation_policy	resource
aws_iam_role_policy_attachment.ecr_attach	resource
aws_iam_role_policy_attachment.msk_policy_attachment	resource
aws_iam_user.s3_access	resource
aws_iam_user.smtp_user	resource
aws_iam_user_policy_attachment.s3_access	resource
aws_iam_user_policy_attachment.smtp_user_policy_attach	resource
aws_lambda_function.secret_rotation_function	resource
aws_lambda_permission.secrets_manager_invoke	resource
aws_msk_cluster.msk_cluster	resource
aws_msk_configuration.msk_configuration	resource
aws_route53_record.main	resource
aws_route53_record.smtp_dkim_record	resource
aws_route53_record.smtp_dmarc	resource
aws_route53_record.smtp_mail_from_mx	resource
aws_route53_record.smtp_mail_from_txt	resource
aws_route53_record.this	resource
aws_s3_bucket.this	resource
aws_s3_bucket_ownership_controls.this	resource
aws_s3_bucket_server_side_encryption_configuration.this	resource
aws_secretsmanager_secret.dockerhub_credentials	resource
aws_secretsmanager_secret_rotation.dockerhub	resource
aws_secretsmanager_secret_version.dockerhub_credentials_version	resource
aws_security_group.msk_cluster_access	resource
aws_security_group.rds_access	resource
aws_ses_configuration_set.configuration_set	resource
aws_ses_domain_dkim.smtp_dkim	resource
aws_ses_domain_identity.smtp_identity	resource
aws_ses_domain_mail_from.smtp_mail_from	resource
aws_ses_event_destination.sns	resource
aws_ses_identity_notification_topic.ses_bounce_domain_identity	resource
aws_ses_identity_notification_topic.ses_complaint_domain_identity	resource
aws_sns_topic.ses_bounce_event_topic	resource
aws_sns_topic_subscription.ses_bounce_event_subscriptions	resource
helm_release.headlamp	resource
helm_release.karpenter	resource
helm_release.karpenter_crd	resource
helm_release.metrics_server	resource
kubectl_manifest.create_databases_if_not_exist	resource
kubectl_manifest.karpenter_node_class	resource
kubectl_manifest.karpenter_node_pool	resource
kubernetes_cluster_role_binding_v1.headlamp_user	resource
kubernetes_cluster_role_v1.read_only	resource
kubernetes_namespace.headlamp	resource
kubernetes_secret_v1.headlamp_user	resource
kubernetes_service_account_v1.headlamp_user	resource
random_id.msk_config	resource
archive_file.secret_rotation_lambda_artifact	data source
aws_eks_cluster.main	data source
aws_eks_cluster_auth.main	data source
aws_eks_node_group.main	data source
aws_eks_node_groups.main	data source
aws_route53_zone.primary	data source
aws_security_group.node	data source
aws_security_group.vpc_default	data source
aws_subnet.private_subnet	data source
aws_subnets.private	data source
aws_vpc.main	data source

Inputs

Name	Description	Type	Default	Required
AWS_ACCESS_KEY_ID	AWS access key associated with an IAM account	string	n/a	yes
AWS_PROFILE	AWS Profile that resources are created in	string	"default"	no
AWS_REGION	Target AWS region	string	"eu-west-2"	no
AWS_SECRET_ACCESS_KEY	AWS secret key associated with the access key	string	n/a	yes
AWS_SESSION_TOKEN	Session token for temporary security credentials from AWS STS	string	""	no
common_tags	Common tags associated to resources created	map(string)	{ "Environment": "dev", "Project": "radar-base" }	no
docker_hub_access_token	Docker Hub access token for ECR pull through cache	string	n/a	yes
docker_hub_username	Docker Hub username for ECR pull through cache	string	n/a	yes
domain_name	Pair of top level domain and hosted zone ID for deployed applications	map(string)	{}	no
eks_cluster_name	EKS cluster name	string	n/a	yes
enable_ecr_ptc	Do you need ECR pull-through cache? [true, false]	bool	n/a	yes
enable_eip	Do you need EIP? [true, false]	bool	n/a	yes
enable_karpenter	Do you need Karpenter? [true, false]	bool	n/a	yes
enable_metrics	Do you need Metrics Server? [true, false]	bool	n/a	yes
enable_msk	Do you need MSK? [true, false]	bool	n/a	yes
enable_msk_logging	Do you need logging on MSK brokers? [true, false]	bool	n/a	yes
enable_rds	Do you need RDS? [true, false]	bool	n/a	yes
enable_rds_multi_az	Do you need RDS Multi-AZ? [true, false]	bool	n/a	yes
enable_route53	Do you need Route53? [true, false]	bool	n/a	yes
enable_s3	Do you need S3? [true, false]	bool	n/a	yes
enable_ses	Do you need SES? [true, false]	bool	n/a	yes
environment	Environment name	string	"dev"	no
headlamp_version	Version of the Headlamp	string	"0.43.0"	no
kafka_version	Version of the Kafka to be used for MSK	string	"3.9.x"	no
karpenter_ami_version_alias	Selector alias for the AMI version used by Karpenter EC2 node class	string	"al2023@latest"	no
karpenter_node_pools	Configuration for the Karpenter node pool(s) with each key being the node pool name	map(object({ architecture = list(string) os = list(string) instance_capacity_type = list(string) instance_category = list(string) instance_cpu = list(string) }))	{}	no
karpenter_version	n/a	string	"1.3.6"	no
karpenter_volume_size	EBS data volume size for Karpenter nodes	string	"40Gi"	no
karpenter_volume_type	EBS volume type for Karpenter nodes	string	"gp3"	no
metrics_server_version	Version of the Metrics Server	string	"3.12.1"	no
postgres_read_replicas	Number of PostgreSQL read replicas if needed	number	0	no
postgres_version	Version of the PostgreSQL to be used for RDS	string	"14.22"	no
radar_postgres_password	Password for the PostgreSQL database used by Radar components	string	n/a	yes
ses_bounce_destinations	List of email addresses for receiving bounced email notifications	list(string)	[]	no
with_dmz_pods	Whether or not to utilise the DMZ node group if it exists	bool	false	no

Outputs

Name	Description
radar_base_eip_allocation_id	n/a
radar_base_eip_public_dns	n/a
radar_base_headlamp_user_token	n/a
radar_base_msk_bootstrap_brokers	n/a
radar_base_msk_zookeeper_connect	n/a
radar_base_rds_appserver_host	n/a
radar_base_rds_appserver_password	n/a
radar_base_rds_appserver_port	n/a
radar_base_rds_appserver_username	n/a
radar_base_rds_hydra_host	n/a
radar_base_rds_hydra_password	n/a
radar_base_rds_hydra_port	n/a
radar_base_rds_hydra_username	n/a
radar_base_rds_kratos_host	n/a
radar_base_rds_kratos_password	n/a
radar_base_rds_kratos_port	n/a
radar_base_rds_kratos_username	n/a
radar_base_rds_managementportal_host	n/a
radar_base_rds_managementportal_password	n/a
radar_base_rds_managementportal_port	n/a
radar_base_rds_managementportal_username	n/a
radar_base_rds_replicas_info	n/a
radar_base_rds_rest_sources_auth_host	n/a
radar_base_rds_rest_sources_auth_password	n/a
radar_base_rds_rest_sources_auth_port	n/a
radar_base_rds_rest_sources_auth_username	n/a
radar_base_route53_hosted_zone_id	n/a
radar_base_s3_access_key	n/a
radar_base_s3_intermediate_output_bucket_name	n/a
radar_base_s3_output_bucket_name	n/a
radar_base_s3_secret_key	n/a
radar_base_s3_velero_bucket_name	n/a
radar_base_smtp_host	n/a
radar_base_smtp_password	n/a
radar_base_smtp_port	n/a
radar_base_smtp_username	n/a