Skip to content
This repository was archived by the owner on Oct 31, 2019. It is now read-only.

Commit abbe0f7

Browse files
garthyowainlewis
authored andcommitted
Allow dns label config (#168)
* Allow overriding of the DNS labels for the subnets
1 parent 661d15e commit abbe0f7

File tree

5 files changed

+55
-13
lines changed

5 files changed

+55
-13
lines changed

docs/input-variables.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,7 @@ The following input variables are used to configure the inbound security rules o
112112
name | default | description
113113
------------------------------------|-------------------------|------------
114114
network_cidrs | See map in variables.tf | A CIDR notation IP range of the VCN and its subnets.
115+
network_subnet_dns | See map in variables.tf | A DNS label for each of the subnet in the VCN (Max 15 characters)
115116
etcd_cluster_ingress | 10.0.0.0/16 (VCN only) | A CIDR notation IP range that is allowed to access the etcd cluster. Must be a subset of the VCN CIDR.
116117
etcd_ssh_ingress | 10.0.0.0/16 (VCN only) | A CIDR notation IP range that is allowed to SSH to etcd nodes. Must be a subset of the VCN CIDR.
117118
master_ssh_ingress | 10.0.0.0/16 (VCN only) | A CIDR notation IP range that is allowed to access the master(s). Must be a subset of the VCN CIDR.

k8s-oci.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,7 @@ module "vcn" {
6161
master_nodeport_ingress = "${var.master_nodeport_ingress}"
6262
external_icmp_ingress = "${var.external_icmp_ingress}"
6363
internal_icmp_ingress = "${var.internal_icmp_ingress}"
64+
network_subnet_dns = "${var.network_subnet_dns}"
6465
}
6566

6667
module "oci-cloud-controller" {

network/vcn/subnets.tf

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ resource "oci_core_subnet" "etcdSubnetAD1" {
7979
cidr_block = "${lookup(var.network_cidrs, "etcdSubnetAD1")}"
8080
compartment_id = "${var.compartment_ocid}"
8181
display_name = "${var.label_prefix}${var.control_plane_subnet_access}ETCDSubnetAD1"
82-
dns_label = "etcdsubnet1"
82+
dns_label = "${lookup(var.network_subnet_dns, "etcdSubnetAD1")}"
8383
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
8484

8585
# Work around HIL issue #50 using join and use coalesce to pick the first route that is not empty (AD1 first pick)
@@ -98,7 +98,7 @@ resource "oci_core_subnet" "etcdSubnetAD2" {
9898
cidr_block = "${lookup(var.network_cidrs, "etcdSubnetAD2")}"
9999
compartment_id = "${var.compartment_ocid}"
100100
display_name = "${var.label_prefix}${var.control_plane_subnet_access}ETCDSubnetAD2"
101-
dns_label = "etcdsubnet2"
101+
dns_label = "${lookup(var.network_subnet_dns, "etcdSubnetAD2")}"
102102
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
103103

104104
# Work around HIL issue #50 using join and use coalesce to pick the first route that is not empty (AD2 first pick)
@@ -117,7 +117,7 @@ resource "oci_core_subnet" "etcdSubnetAD3" {
117117
cidr_block = "${lookup(var.network_cidrs, "etcdSubnetAD3")}"
118118
compartment_id = "${var.compartment_ocid}"
119119
display_name = "${var.label_prefix}${var.control_plane_subnet_access}ETCDSubnetAD3"
120-
dns_label = "etcdsubnet3"
120+
dns_label = "${lookup(var.network_subnet_dns, "etcdSubnetAD3")}"
121121
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
122122

123123
# Work around HIL issue #50 using join and use coalesce to pick the first route that is not empty (AD3 first pick)
@@ -136,7 +136,7 @@ resource "oci_core_subnet" "k8sMasterSubnetAD1" {
136136
cidr_block = "${lookup(var.network_cidrs, "masterSubnetAD1")}"
137137
compartment_id = "${var.compartment_ocid}"
138138
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SMasterSubnetAD1"
139-
dns_label = "k8smasterad1"
139+
dns_label = "${lookup(var.network_subnet_dns, "masterSubnetAD1")}"
140140
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
141141
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
142142
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -153,7 +153,7 @@ resource "oci_core_subnet" "k8sMasterSubnetAD2" {
153153
cidr_block = "${lookup(var.network_cidrs, "masterSubnetAD2")}"
154154
compartment_id = "${var.compartment_ocid}"
155155
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SMasterSubnetAD2"
156-
dns_label = "k8smasterad2"
156+
dns_label = "${lookup(var.network_subnet_dns, "masterSubnetAD2")}"
157157
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
158158
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
159159
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -170,7 +170,7 @@ resource "oci_core_subnet" "k8sMasterSubnetAD3" {
170170
cidr_block = "${lookup(var.network_cidrs, "masterSubnetAD3")}"
171171
compartment_id = "${var.compartment_ocid}"
172172
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SMasterSubnetAD3"
173-
dns_label = "k8smasterad3"
173+
dns_label = "${lookup(var.network_subnet_dns, "masterSubnetAD3")}"
174174
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
175175
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
176176
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -187,7 +187,7 @@ resource "oci_core_subnet" "k8sWorkerSubnetAD1" {
187187
cidr_block = "${lookup(var.network_cidrs, "workerSubnetAD1")}"
188188
compartment_id = "${var.compartment_ocid}"
189189
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SWorkerSubnetAD1"
190-
dns_label = "k8sworkerad1"
190+
dns_label = "${lookup(var.network_subnet_dns, "workerSubnetAD1")}"
191191
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
192192
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
193193
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -204,7 +204,7 @@ resource "oci_core_subnet" "k8sWorkerSubnetAD2" {
204204
cidr_block = "${lookup(var.network_cidrs, "workerSubnetAD2")}"
205205
compartment_id = "${var.compartment_ocid}"
206206
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SWorkerSubnetAD2"
207-
dns_label = "k8sworkerad2"
207+
dns_label = "${lookup(var.network_subnet_dns, "workerSubnetAD2")}"
208208
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
209209
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
210210
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -221,7 +221,7 @@ resource "oci_core_subnet" "k8sWorkerSubnetAD3" {
221221
cidr_block = "${lookup(var.network_cidrs, "workerSubnetAD3")}"
222222
compartment_id = "${var.compartment_ocid}"
223223
display_name = "${var.label_prefix}${var.control_plane_subnet_access}K8SWorkerSubnetAD3"
224-
dns_label = "k8sworkerad3"
224+
dns_label = "${lookup(var.network_subnet_dns, "workerSubnetAD3")}"
225225
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
226226
route_table_id = "${var.control_plane_subnet_access == "private" ? coalesce(join(" ", oci_core_route_table.NATInstanceAD3RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD1RouteTable.*.id), join(" ", oci_core_route_table.NATInstanceAD2RouteTable.*.id), oci_core_route_table.PublicRouteTable.id) : oci_core_route_table.PublicRouteTable.id}"
227227
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -241,7 +241,7 @@ resource "oci_core_subnet" "k8sCCMLBSubnetAD1" {
241241
cidr_block = "${lookup(var.network_cidrs, "k8sCCMLBSubnetAD1")}"
242242
compartment_id = "${var.compartment_ocid}"
243243
display_name = "${var.label_prefix}PublicK8SCCMLBSubnetAD1"
244-
dns_label = "k8sccmlbad1"
244+
dns_label = "${lookup(var.network_subnet_dns, "k8sCCMLBSubnetAD1")}"
245245
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
246246
route_table_id = "${oci_core_route_table.PublicRouteTable.id}"
247247
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -258,7 +258,7 @@ resource "oci_core_subnet" "k8sCCMLBSubnetAD2" {
258258
cidr_block = "${lookup(var.network_cidrs, "k8sCCMLBSubnetAD2")}"
259259
compartment_id = "${var.compartment_ocid}"
260260
display_name = "${var.label_prefix}PublicK8SCCMLBSubnetAD2"
261-
dns_label = "k8sccmlbad2"
261+
dns_label = "${lookup(var.network_subnet_dns, "k8sCCMLBSubnetAD2")}"
262262
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
263263
route_table_id = "${oci_core_route_table.PublicRouteTable.id}"
264264
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
@@ -275,11 +275,11 @@ resource "oci_core_subnet" "k8sCCMLBSubnetAD3" {
275275
cidr_block = "${lookup(var.network_cidrs, "k8sCCMLBSubnetAD3")}"
276276
compartment_id = "${var.compartment_ocid}"
277277
display_name = "${var.label_prefix}PublicK8SCCMLBSubnetAD3"
278-
dns_label = "k8sccmlbad3"
278+
dns_label = "${lookup(var.network_subnet_dns, "k8sCCMLBSubnetAD3")}"
279279
vcn_id = "${oci_core_virtual_network.CompleteVCN.id}"
280280
route_table_id = "${oci_core_route_table.PublicRouteTable.id}"
281281
dhcp_options_id = "${oci_core_virtual_network.CompleteVCN.default_dhcp_options_id}"
282-
security_list_ids = ["${oci_core_security_list.K8SCCMLBSubnet.id}"]
282+
security_list_ids = ["${oci_core_security_list.K8SCCMLBSubnet.id}"]
283283
prohibit_public_ip_on_vnic = "false"
284284

285285
provisioner "local-exec" {

network/vcn/variables.tf

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,26 @@ variable "network_cidrs" {
2424
}
2525
}
2626

27+
variable "network_subnet_dns" {
28+
type = "map"
29+
30+
default = {
31+
etcdSubnetAD1 = "etcdsubnet1"
32+
etcdSubnetAD2 = "etcdsubnet2"
33+
etcdSubnetAD3 = "etcdsubnet3"
34+
masterSubnetAD1 = "k8smasterad1"
35+
masterSubnetAD2 = "k8smasterad2"
36+
masterSubnetAD3 = "k8smasterad3"
37+
workerSubnetAD1 = "k8sworkerad1"
38+
workerSubnetAD2 = "k8sworkerad2"
39+
workerSubnetAD3 = "k8sworkerad3"
40+
k8sCCMLBSubnetAD1 = "k8sccmlbad1"
41+
k8sCCMLBSubnetAD2 = "k8sccmlbad2"
42+
k8sCCMLBSubnetAD3 = "k8sccmlbad3"
43+
}
44+
}
45+
46+
2747
variable "tenancy_ocid" {}
2848

2949
variable "control_plane_subnet_access" {

variables.tf

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,26 @@ variable "network_cidrs" {
2929
}
3030
}
3131

32+
variable "network_subnet_dns" {
33+
type = "map"
34+
35+
default = {
36+
etcdSubnetAD1 = "etcdsubnet1"
37+
etcdSubnetAD2 = "etcdsubnet2"
38+
etcdSubnetAD3 = "etcdsubnet3"
39+
masterSubnetAD1 = "k8smasterad1"
40+
masterSubnetAD2 = "k8smasterad2"
41+
masterSubnetAD3 = "k8smasterad3"
42+
workerSubnetAD1 = "k8sworkerad1"
43+
workerSubnetAD2 = "k8sworkerad2"
44+
workerSubnetAD3 = "k8sworkerad3"
45+
k8sCCMLBSubnetAD1 = "k8sccmlbad1"
46+
k8sCCMLBSubnetAD2 = "k8sccmlbad2"
47+
k8sCCMLBSubnetAD3 = "k8sccmlbad3"
48+
}
49+
}
50+
51+
3252
variable "domain_name" {
3353
default = "k8sbmcs.oraclevcn.com"
3454
}

0 commit comments

Comments
 (0)