terraform-kubernetes-agent

A Terraform Module to create a Secret and DaemonSet for deploying the Lacework Datacollector Agent in a Kubernetes cluster.

Kubernetes

The main.tf file will configure a Kubernetes Secret and DaemonSet which will then be used to run the Lacework Datacollector pod across all worker nodes in a cluster.

Requirements

Name	Version
terraform	>= 0.12.31
kubernetes	>= 2.0.0

Providers

Name	Version
kubernetes	>= 2.0.0
random	n/a

Resources

Name	Type
kubernetes_daemonset.lacework_datacollector	resource
kubernetes_secret.lacework_config	resource
random_id.config_name_tail	resource

Inputs

Name	Description	Type	Default	Required
lacework_access_token	The access token for the Lacework agent	`string`	n/a	yes
lacework_agent_interface_connection_size	Desired value for the InterfaceConnectionSize Lacework agent parameter	`string`	`""`	no
lacework_agent_name	The name for the Lacework agent service within Kubernetes	`string`	`"lacework-agent"`	no
lacework_agent_tags	A map/dictionary of Tags to be assigned to the Lacework datacollector	`map(string)`	`{}`	no
lacework_config_name	The name for the Lacework agent configuration within Kubernetes	`string`	`"lacework-config"`	no
lacework_image	The name of the image to use for deploying the Lacework datacollector	`string`	`"lacework/datacollector"`	no
lacework_image_pull_policy	The pull policy to use for deploying the Lacework datacollector	`string`	`"Always"`	no
lacework_server_url	The server URL for the Lacework agent	`string`	`""`	no
namespace	The Kubernetes namespace in which to deploy	`string`	`"default"`	no
pod_cpu_limit	The limit of CPU units for the Lacework datacollector pod	`string`	`"1"`	no
pod_cpu_request	The amount of CPU units to request for the Lacework datacollector pod	`string`	`"100m"`	no
pod_mem_limit	The limit of Memory for the Lacework datacollector pod	`string`	`"1024Mi"`	no
pod_mem_request	The amount of Memory to request for the Lacework datacollector pod	`string`	`"512Mi"`	no
pod_service_account	The Kubernetes ServiceAccount to use in the pod template	`string`	`""`	no
tolerations	A list of Kubernetes Tolerations to apply to the DaemonSet definition	`list(map(string))`	[ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" } ]	no

Outputs

Name	Description
lacework_config_name	Name of the Kubernetes Secret containing the Lacework config
lacework_config_version	Version of the Kubernetes Secret containing the Lacework config
lacework_datacollector_name	Name of the Kubernetes DaemonSet for the Lacework datacollector
lacework_datacollector_version	Version of the Kubernetes DaemonSet for the Lacework datacollector