Terraform module that defines an EKS cluster and node group with IAM roles and policies.
Terraform Registry - https://registry.terraform.io/modules/tmccoy14/eks/aws/latest
module "eks" {
source = "tmccoy14/eks/aws"
# pin a specific version found at:
# https://github.com/tmccoy14/terraform-aws-eks/releases
# https://registry.terraform.io/modules/tmccoy14/eks/aws/latest
version = "x.x.x"
cluster_name = "testing-cluster"
vpc_id = "vpc-1234abcd"
nodegroup_name = "testing-nodegroup"
desired_size = "1"
max_size = "1"
min_size = "1"
}| Name | Version |
|---|---|
| terraform | >= 0.14.0 |
| aws | "~> 3.0" |
| Resource Name |
|---|
| aws_eks_cluster.eks_cluster |
| aws_eks_node_group.eks_cluster_nodegroup |
| aws_iam_role.cluster_role |
| aws_iam_role.nodegroup_role |
| aws_iam_role_policy_attachment.cluster_policy |
| aws_iam_role_policy_attachment.cluster_service_policy |
| aws_iam_role_policy_attachment.cni_policy |
| aws_iam_role_policy_attachment.ecr_readonly_policy |
| aws_iam_role_policy_attachment.worker_nodegroup_policy |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| cluster_role_description | Description of the role. | string | null | false |
| cluster_role_force_detach_policies | Whether to force detaching any policies the role has before destroying it. | bool | false | false |
| cluster_role_managed_policy_arns | Set of exclusive IAM managed policy ARNs to attach to the IAM role. | list(string) | [] | false |
| cluster_role_max_session_duration | Maximum session duration (in seconds) that you want to set for the specified role. | number | null | false |
| cluster_role_name | Friendly name of the role. If omitted, Terraform will assign a random, unique name. | string | null | false |
| cluster_role_path | Path to the role. | string | null | false |
| cluster_role_permissions_boundary | ARN of the policy that is used to set the permissions boundary for the role. | string | null | false |
| cluster_name | Name of the cluster. | string | true | |
| vpc_id | The VPC associated with your cluster. | string | true | |
| enabled_cluster_log_types | A list of the desired control plane logging to enable. | list(string) | [] | flase |
| endpoint_private_access | Indicates whether or not the Amazon EKS private API server endpoint is enabled. | bool | false | false |
| endpoint_public_access | Indicates whether or not the Amazon EKS public API server endpoint is enabled. | bool | false | false |
| public_access_cidrs | List of CIDR blocks. Indicates which CIDR blocks can access the Amazon EKS public API server endpoint when enabled. | list(string) | ["0.0.0.0/0] | false |
| security_group_ids | List of security group IDs for the cross-account elastic network interfaces that Amazon EKS creates to use to allow communication between your worker nodes and the Kubernetes control plane. | list(string) | [] | false |
| eks_version | Desired Kubernetes master version. If you do not specify a value, the latest available version at resource creation is used and no upgrades will occur except those automatically triggered by EKS. | string | null | false |
| nodegroup_role_description | Description of the role. | string | null | false |
| nodegroup_role_force_detach_policies | Whether to force detaching any policies the role has before destroying it. | bool | false | false |
| nodegroup_role_managed_policy_arns | Set of exclusive IAM managed policy ARNs to attach to the IAM role. | list(string) | [] | false |
| nodegroup_role_max_session_duration | Maximum session duration (in seconds) that you want to set for the specified role. | number | null | false |
| nodegroup_role_name | The name of AWS EKS nodegroup role. | string | null | false |
| nodegroup_role_path | Path to the role. | string | null | false |
| nodegroup_role_permissions_boundary | ARN of the policy that is used to set the permissions boundary for the role. | string | null | false |
| desired_size | Desired number of worker nodes. | string | true | |
| max_size | Maximum number of worker nodes. | string | true | |
| min_size | Minimum number of worker nodes. | string | true | |
| nodegroup_name | Name of the EKS Node Group. | string | true | |
| instance_types | List of instance types associated with the EKS Node Group. | list(string) | ["t3.medium"] | false |
| ami_type | Type of Amazon Machine Image (AMI) associated with the EKS Node Group. | string | "AL2_x86_64" | false |
| disk_size | Disk size in GiB for worker nodes. | string | "20" | false |
| tags | Key-value mapping of resource tags. | map(any) | {} | false |
| Name | Description |
|---|---|
| autoscaling_groups | List of objects containing information about AutoScaling Groups. |
| autoscaling_groups_names | Name of the AutoScaling Group. |
| certificate-authority | Nested attribute containing certificate-authority-data for your cluster. |
| cluster_arn | The Amazon Resource Name (ARN) of the cluster. |
| cluster_id | The name of the cluster. |
| cluster_role_arn | Amazon Resource Name (ARN) specifying the role. |
| cluster_role_create_date | Creation date of the IAM role. |
| cluster_role_id | ID of the role. |
| cluster_role_name | Name of the role. |
| cluster_role_unique_id | Stable and unique string identifying the role. |
| cluster_status | The status of the EKS cluster. One of CREATING, ACTIVE, DELETING, FAILED. |
| endpoint | The endpoint for your Kubernetes API server. |
| identity | Nested attribute containing identity provider information for your cluster. |
| nodegroup_arn | Amazon Resource Name (ARN) of the EKS Node Group. |
| nodegroup_id | EKS Cluster name and EKS Node Group name separated by a colon (:). |
| nodegroup_role_arn | Amazon Resource Name (ARN) specifying the role. |
| nodegroup_role_create_date | Creation date of the IAM role. |
| nodegroup_role_id | ID of the role. |
| nodegroup_role_name | Name of the role. |
| nodegroup_role_unique_id | Stable and unique string identifying the role. |
| nodegroup_status | Status of the EKS Node Group. |
| platform_version | The platform version for the cluster. |
| remote_access_security_group_id | Identifier of the remote access EC2 Security Group. |
| version | The Kubernetes server version for the cluster. |
| vpc_config | Additional nested attributes. |