/ap-terraform-eks-core

Analytical Platform Terraform EKS Core • This repository is defined and managed in Terraform

Primary LanguageHCL

Requirements

Name Version
terraform >= 0.14
aws >= 3.71.0
kubernetes >= 2.10

Providers

Name Version
aws 3.71.0

Modules

Name Source Version
eks terraform-aws-modules/eks/aws 17.18.0
iam_assumable_role_cert_manager github.com/ministryofjustice/ap-terraform-iam-roles//eks-role v1.4.0
iam_assumable_role_cluster_autoscaler github.com/ministryofjustice/ap-terraform-iam-roles//eks-role v1.4.0
iam_assumable_role_ebs_csi_driver github.com/ministryofjustice/ap-terraform-iam-roles//eks-role v1.4.0
iam_assumable_role_external_dns github.com/ministryofjustice/ap-terraform-iam-roles//eks-role v1.4.0
iam_assumable_role_external_secrets github.com/ministryofjustice/ap-terraform-iam-roles//eks-role v1.4.0

Resources

Name Type
aws_eks_addon.coredns resource
aws_eks_addon.ebs_csi resource
aws_eks_addon.vpc_cni resource
aws_eks_identity_provider_config.this resource
aws_iam_policy.cert_manager resource
aws_iam_policy.cluster_autoscaler resource
aws_iam_policy.ebs_csi_driver resource
aws_iam_policy.external_dns resource
aws_iam_policy.external_secrets resource
aws_iam_role_policy_attachment.eks_worker_cloudwatch_agent resource
aws_kms_key.eks resource
aws_caller_identity.current data source
aws_iam_policy_document.cert_manager data source
aws_iam_policy_document.cluster_autoscaler data source
aws_iam_policy_document.ebs_csi_driver data source
aws_iam_policy_document.external_dns data source
aws_iam_policy_document.external_secrets data source

Inputs

Name Description Type Default Required
cluster_coredns_version Version of the CoreDNS add on string n/a yes
cluster_ebs_csi_version Version of the EBS CSI add on string n/a yes
cluster_name The K8S version of the EKS control plane to provision string n/a yes
cluster_node_group_version The K8S version of the EKS node group to provision string n/a yes
cluster_version The K8S version of the EKS control plane to provision string n/a yes
cluster_vpc_cni_version Version of the VPC CNI add on string n/a yes
core_infra_nodegroup_desired_capacity The desired capacity for the EKS node group number n/a yes
core_infra_nodegroup_instance_types EC2 instance types to be used for the core infra EKS nodegroup string n/a yes
core_infra_nodegroup_max_capacity The maximum capacity for the EKS node group number n/a yes
core_infra_nodegroup_min_capacity The minimum capacity for the EKS node group number n/a yes
create_timeout value string "60m" no
delete_timeout value string "60m" no
disk_size The desired capacity for the EKS node group number n/a yes
main_nodegroup_desired_capacity The desired capacity for the EKS node group number n/a yes
main_nodegroup_instance_types EC2 instance types to be used for the main EKS nodegroup string n/a yes
main_nodegroup_max_capacity The maximum capacity for the EKS node group number n/a yes
main_nodegroup_min_capacity The minimum capacity for the EKS node group number n/a yes
map_roles Additional IAM roles to add to the aws-auth configmap. 
list(object({
    rolearn  = string
    username = string
    groups   = list(string)
  }))
 n/a yes
org_name Organisation the EKS cluster should trust string n/a yes
route53_zone_arn The route53 zone ID for the cluster's domain string n/a yes
subnets List of private subnet address ranges in CIDR format list(string) n/a yes
vpc_id ID of the VPC to create the cluster in string n/a yes

Outputs

Name Description
cluster_id The ID of the cluster
cluster_oidc_issuer_url The URL of the OIDC issuer created by the cluster
cluster_role_arns ARNS of the roles created to support core K8S components