Deploy the AWS resources for hosting a Rancher Server.
Currently only supports a single-node k3s cluster.
HA multi-node (RKE) cluster is on TODO list.
Originally based off the Rancher AWS Quickstart.
Is designed to be deployed in combination with these other modules :
Example of usage of Rancher modules is below and is used here :
locals {
rancher_server_admin_password = local.secrets_primary.data["rancher-server-admin.password"]
rancher_server_hostname = "rancher.${var.environment.name}.${module.global_variables.org_domain_name}"
rancher_managed_cluster_hostname = "kube.${var.environment.name}.${module.global_variables.org_domain_name}"
}
module "k8s-rancher-server-infra" {
count = contains(var.prpl_deploy_modes, "RKE") ? 1 : 0
source = "../../../../../terraform-modules/terraform-module-aws-k8s-rancher-server-infra"
# source = "git@github.com:davidcallen/terraform-module-aws-k8s-rancher-server-infra.git?ref=1.0.0"
environment = var.environment
vpc_id = module.vpc.vpc_id
vpc_private_subnet_ids = module.vpc.private_subnets
vpc_private_subnet_cidrs = module.vpc.private_subnets_cidr_blocks
route53_private_hosted_zone_id = module.dns[0].route53_private_hosted_zone_id
rancher_server_dns = local.rancher_server_hostname
cluster_ssh_key_name = aws_key_pair.ssh.key_name
cluster_ssh_private_key_filename = "~/.ssh/prpl-aws/${var.environment.resource_name_prefix}-ssh-key"
cluster_ingress_allowed_cidrs = concat(
module.vpc.private_subnets_cidr_blocks,
module.global_variables.allowed_org_private_network_cidrs,
module.global_variables.allowed_org_vpn_cidrs
)
ec2_instance_type = "t3a.medium"
global_default_tags = merge(module.global_variables.default_tags, var.environment.default_tags)
}
# Helm provider
provider "helm" {
kubernetes {
config_path = module.k8s-rancher-server-deploy.kube_config_yaml_filename
}
}
# Rancher2 bootstrapping provider
provider "rancher2" {
alias = "bootstrap"
api_url = "https://${local.rancher_server_hostname}"
insecure = true
# ca_certs = data.kubernetes_secret.rancher_cert.data["ca.crt"]
bootstrap = true
}
# Rancher resources
module "k8s-rancher-server-deploy" {
# count = contains(var.prpl_deploy_modes, "RKE") ? 1 : 0
source = "../../../../../terraform-modules/terraform-module-k8s-rancher-server-deploy"
# source = "git@github.com:davidcallen/terraform-module-k8s-rancher-server-deploy.git?ref=1.0.0"
node_public_ip = (module.k8s-rancher-server-infra[0].rancher_server_public_ip != "") ? module.k8s-rancher-server-infra[0].rancher_server_public_ip : module.k8s-rancher-server-infra[0].rancher_server_private_ip
node_internal_ip = module.k8s-rancher-server-infra[0].rancher_server_private_ip
node_username = module.k8s-rancher-server-infra[0].node_username
cluster_ssh_private_key_filename = "~/.ssh/prpl-aws/${var.environment.resource_name_prefix}-ssh-key"
rancher_version = "v2.6.3"
rancher_kubernetes_version = "v1.21.8+k3s1"
rancher_server_dns = local.rancher_server_hostname
rancher_server_bootstrap_admin_password = local.rancher_server_admin_password
cert_manager_version = "1.5.3"
providers = {
rancher2.bootstrap = rancher2.bootstrap
}
}
# Rancher2 administration provider
provider "rancher2" {
alias = "admin"
api_url = "https://${local.rancher_server_hostname}"
insecure = true
# ca_certs = data.kubernetes_secret.rancher_cert.data["ca.crt"]
token_key = module.k8s-rancher-server-deploy.rancher2_bootstrap_admin_token
timeout = "300s"
}
module "k8s-rancher-managed-cluster" {
# count = contains(var.prpl_deploy_modes, "RKE") ? 1 : 0
source = "../../../../../terraform-modules/terraform-module-aws-k8s-rancher-managed-cluster"
# source = "git@github.com:davidcallen/terraform-module-aws-k8s-rancher-managed-cluster.git?ref=1.0.0"
environment = var.environment
vpc_id = module.vpc.vpc_id
vpc_private_subnet_ids = module.vpc.private_subnets
vpc_private_subnet_cidrs = module.vpc.private_subnets_cidr_blocks
route53_private_hosted_zone_id = module.dns[0].route53_private_hosted_zone_id
cluster_name = "kube"
cluster_dns = local.rancher_managed_cluster_hostname
cluster_ssh_key_name = aws_key_pair.ssh.key_name
cluster_ssh_private_key_filename = "~/.ssh/prpl-aws/${var.environment.resource_name_prefix}-ssh-key"
cluster_ingress_allowed_cidrs = concat(
module.vpc.private_subnets_cidr_blocks,
module.global_variables.allowed_org_private_network_cidrs,
module.global_variables.allowed_org_vpn_cidrs
)
ec2_instance_type = "t3a.medium"
docker_version = "19.03"
windows_prefered_cluster = false
kubernetes_version = "v1.21.4+k3s1" # For k3s install on managed-cluster
global_default_tags = module.global_variables.default_tags
providers = {
rancher2.admin = rancher2.admin
}
}