Skip to content

gotokazuki/terraform-aws-eks

Repository files navigation

aws-terraform-eks

This module creates an EKS cluster with Auto Mode enabled on AWS.

Requirements

Name Version
terraform >= 1.0
aws >= 5.79
tls >= 4.0

Providers

Name Version
aws >= 5.79
tls >= 4.0

Modules

Name Source Version
access_entry ./modules/access_entry n/a

Resources

Name Type
aws_cloudwatch_log_group.this resource
aws_eks_cluster.this resource
aws_iam_openid_connect_provider.this resource
aws_iam_role.eks_cluster resource
aws_iam_role.eks_node resource
aws_iam_role_policy_attachment.eks_cluster_auth_mode resource
aws_iam_role_policy_attachment.eks_node resource
aws_security_group.eks_owned_eni resource
aws_security_group_rule.eks_cluster_egress resource
aws_security_group_rule.eks_cluster_ingress resource
aws_caller_identity.current data source
tls_certificate.eks_cluster_oidc data source

Inputs

Name Description Type Default Required
eks_access_entries IAM users to access the EKS cluster.
map(object({
iam = string
policy = string
access_scope_type = string
access_scope_namespaces = set(string)
}))
n/a yes
eks_bootstrap_cluster_creator_admin_permissions Whether to bootstrap the cluster creator with admin permissions. bool true no
eks_cluster_name Name of the EKS cluster. string n/a yes
eks_cluster_version Kubernetes version of the EKS cluster. Currently supports 1.32. string n/a yes
eks_enabled_cluster_log_types List of the desired control plane logging to enable. set(string)
[
"api",
"audit"
]
no
eks_endpoint_private_access Whether the Amazon EKS private API server endpoint is enabled. bool false no
eks_endpoint_public_access Whether the Amazon EKS public API server endpoint is enabled. bool true no
eks_logs_retention_in_days Logs retention in days of the EKS cluster. number 7 no
prefix Name prefix for resources. string n/a yes
private_subnet_ids IDs of the private subnet. set(string) n/a yes
vpc_cidr_block CIDR block of the VPC. string n/a yes
vpc_id ID of the VPC. string n/a yes

Outputs

Name Description
cluster_certificate_authority Certificate authority of the EKS cluster.
cluster_endpoint Endpoint of the EKS cluster.
cluster_iam_oidc_provider_arn OpenID Connect provider ARN of the EKS cluster.
cluster_iam_oidc_provider_url OpenID Connect provider URL of the EKS cluster.
cluster_name Name of the EKS cluster.
cluster_oidc_issuer_url Issuer URL on the EKS cluster for the OpenID Connect identity provider.
eks_cluster_security_group_id Security Group ID of the EKS cluster that generated automatically by EKS.
eks_owned_eni_security_group_id Security Group ID to allow between the worker nodes and the control plane in the EKS cluster.

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages