Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

terraform-kubernetes-addons:aws

semantic-release terraform-kubernetes-addons

About

Provides various Kubernetes addons that are often used on Kubernetes with AWS

Documentation

User guides, feature documentation and examples are available here

IAM permissions

This module can uses IRSA.

Requirements

Name Version
terraform >= 1.3.2
aws >= 5.27
flux ~> 1.0
github ~> 6.0
helm ~> 2.0
http >= 3
kubectl ~> 2.0
kubernetes ~> 2.0, != 2.12
tls ~> 4.0

Providers

Name Version
aws >= 5.27
flux ~> 1.0
github ~> 6.0
helm ~> 2.0
http >= 3
kubectl ~> 2.0
kubernetes ~> 2.0, != 2.12
random n/a
time n/a
tls ~> 4.0

Modules

Name Source Version
iam_assumable_role_aws-ebs-csi-driver terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_aws-efs-csi-driver terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_aws-for-fluent-bit terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_aws-load-balancer-controller terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_cert-manager terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_cluster-autoscaler terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_cni-metrics-helper terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_external-dns terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_kube-prometheus-stack_grafana terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_kube-prometheus-stack_thanos terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_loki-stack terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_prometheus-cloudwatch-exporter terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_thanos terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_thanos-storegateway terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_velero terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
iam_assumable_role_yet-another-cloudwatch-exporter terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc ~> 5.0
karpenter terraform-aws-modules/eks/aws//modules/karpenter ~> 20.0
kube-prometheus-stack_thanos_bucket terraform-aws-modules/s3-bucket/aws ~> 4.0
loki_bucket terraform-aws-modules/s3-bucket/aws ~> 4.0
s3_logging_bucket terraform-aws-modules/s3-bucket/aws ~> 4.0
security-group-efs-csi-driver terraform-aws-modules/security-group/aws//modules/nfs ~> 5.0
thanos_bucket terraform-aws-modules/s3-bucket/aws ~> 4.0
velero_thanos_bucket terraform-aws-modules/s3-bucket/aws ~> 4.0

Resources

Name Type
aws_cloudwatch_log_group.aws-for-fluent-bit resource
aws_efs_file_system.aws-efs-csi-driver resource
aws_efs_mount_target.aws-efs-csi-driver resource
aws_iam_policy.aws-ebs-csi-driver resource
aws_iam_policy.aws-efs-csi-driver resource
aws_iam_policy.aws-for-fluent-bit resource
aws_iam_policy.aws-load-balancer-controller resource
aws_iam_policy.cert-manager resource
aws_iam_policy.cluster-autoscaler resource
aws_iam_policy.cni-metrics-helper resource
aws_iam_policy.external-dns resource
aws_iam_policy.karpenter_additional resource
aws_iam_policy.kube-prometheus-stack_grafana resource
aws_iam_policy.kube-prometheus-stack_thanos resource
aws_iam_policy.loki-stack resource
aws_iam_policy.prometheus-cloudwatch-exporter resource
aws_iam_policy.thanos resource
aws_iam_policy.thanos-storegateway resource
aws_iam_policy.velero resource
aws_iam_policy.yet-another-cloudwatch-exporter resource
aws_kms_alias.aws-ebs-csi-driver resource
aws_kms_key.aws-ebs-csi-driver resource
flux_bootstrap_git.flux resource
github_branch_default.main resource
github_repository.main resource
github_repository_deploy_key.main resource
helm_release.admiralty resource
helm_release.aws-ebs-csi-driver resource
helm_release.aws-efs-csi-driver resource
helm_release.aws-for-fluent-bit resource
helm_release.aws-load-balancer-controller resource
helm_release.aws-node-termination-handler resource
helm_release.cert-manager resource
helm_release.cert-manager-csi-driver resource
helm_release.cluster-autoscaler resource
helm_release.external-dns resource
helm_release.ingress-nginx resource
helm_release.k8gb resource
helm_release.karma resource
helm_release.karpenter resource
helm_release.keda resource
helm_release.kong resource
helm_release.kube-prometheus-stack resource
helm_release.linkerd-control-plane resource
helm_release.linkerd-crds resource
helm_release.linkerd-viz resource
helm_release.linkerd2-cni resource
helm_release.loki-stack resource
helm_release.metrics-server resource
helm_release.node-problem-detector resource
helm_release.prometheus-adapter resource
helm_release.prometheus-blackbox-exporter resource
helm_release.prometheus-cloudwatch-exporter resource
helm_release.promtail resource
helm_release.reloader resource
helm_release.sealed-secrets resource
helm_release.secrets-store-csi-driver resource
helm_release.thanos resource
helm_release.thanos-memcached resource
helm_release.thanos-storegateway resource
helm_release.thanos-tls-querier resource
helm_release.tigera-operator resource
helm_release.traefik resource
helm_release.velero resource
helm_release.victoria-metrics-k8s-stack resource
helm_release.yet-another-cloudwatch-exporter resource
kubectl_manifest.aws-ebs-csi-driver_vsc resource
kubectl_manifest.calico_crds resource
kubectl_manifest.cert-manager_cluster_issuers resource
kubectl_manifest.cni-metrics-helper resource
kubectl_manifest.csi-external-snapshotter resource
kubectl_manifest.kong_crds resource
kubectl_manifest.linkerd resource
kubectl_manifest.linkerd-viz resource
kubectl_manifest.prometheus-operator_crds resource
kubectl_manifest.secrets-store-csi-driver-provider-aws resource
kubectl_manifest.tigera-operator_crds resource
kubernetes_config_map.loki-stack_grafana_ds resource
kubernetes_namespace.admiralty resource
kubernetes_namespace.aws-ebs-csi-driver resource
kubernetes_namespace.aws-efs-csi-driver resource
kubernetes_namespace.aws-for-fluent-bit resource
kubernetes_namespace.aws-load-balancer-controller resource
kubernetes_namespace.aws-node-termination-handler resource
kubernetes_namespace.cert-manager resource
kubernetes_namespace.cluster-autoscaler resource
kubernetes_namespace.external-dns resource
kubernetes_namespace.flux2 resource
kubernetes_namespace.ingress-nginx resource
kubernetes_namespace.k8gb resource
kubernetes_namespace.karma resource
kubernetes_namespace.karpenter resource
kubernetes_namespace.keda resource
kubernetes_namespace.kong resource
kubernetes_namespace.kube-prometheus-stack resource
kubernetes_namespace.linkerd resource
kubernetes_namespace.linkerd-viz resource
kubernetes_namespace.linkerd2-cni resource
kubernetes_namespace.loki-stack resource
kubernetes_namespace.metrics-server resource
kubernetes_namespace.node-problem-detector resource
kubernetes_namespace.prometheus-adapter resource
kubernetes_namespace.prometheus-blackbox-exporter resource
kubernetes_namespace.prometheus-cloudwatch-exporter resource
kubernetes_namespace.promtail resource
kubernetes_namespace.reloader resource
kubernetes_namespace.sealed-secrets resource
kubernetes_namespace.secrets-store-csi-driver resource
kubernetes_namespace.thanos resource
kubernetes_namespace.tigera-operator resource
kubernetes_namespace.traefik resource
kubernetes_namespace.velero resource
kubernetes_namespace.victoria-metrics-k8s-stack resource
kubernetes_namespace.yet-another-cloudwatch-exporter resource
kubernetes_network_policy.admiralty_allow_namespace resource
kubernetes_network_policy.admiralty_default_deny resource
kubernetes_network_policy.aws-ebs-csi-driver_allow_namespace resource
kubernetes_network_policy.aws-ebs-csi-driver_default_deny resource
kubernetes_network_policy.aws-efs-csi-driver_allow_namespace resource
kubernetes_network_policy.aws-efs-csi-driver_default_deny resource
kubernetes_network_policy.aws-for-fluent-bit_allow_namespace resource
kubernetes_network_policy.aws-for-fluent-bit_default_deny resource
kubernetes_network_policy.aws-load-balancer-controller_allow_control_plane resource
kubernetes_network_policy.aws-load-balancer-controller_allow_namespace resource
kubernetes_network_policy.aws-load-balancer-controller_default_deny resource
kubernetes_network_policy.aws-node-termination-handler_allow_namespace resource
kubernetes_network_policy.aws-node-termination-handler_default_deny resource
kubernetes_network_policy.cert-manager_allow_control_plane resource
kubernetes_network_policy.cert-manager_allow_monitoring resource
kubernetes_network_policy.cert-manager_allow_namespace resource
kubernetes_network_policy.cert-manager_default_deny resource
kubernetes_network_policy.cluster-autoscaler_allow_monitoring resource
kubernetes_network_policy.cluster-autoscaler_allow_namespace resource
kubernetes_network_policy.cluster-autoscaler_default_deny resource
kubernetes_network_policy.external-dns_allow_monitoring resource
kubernetes_network_policy.external-dns_allow_namespace resource
kubernetes_network_policy.external-dns_default_deny resource
kubernetes_network_policy.flux2_allow_monitoring resource
kubernetes_network_policy.flux2_allow_namespace resource
kubernetes_network_policy.ingress-nginx_allow_control_plane resource
kubernetes_network_policy.ingress-nginx_allow_ingress resource
kubernetes_network_policy.ingress-nginx_allow_linkerd_viz resource
kubernetes_network_policy.ingress-nginx_allow_monitoring resource
kubernetes_network_policy.ingress-nginx_allow_namespace resource
kubernetes_network_policy.ingress-nginx_default_deny resource
kubernetes_network_policy.k8gb_allow_namespace resource
kubernetes_network_policy.k8gb_default_deny resource
kubernetes_network_policy.karma_allow_ingress resource
kubernetes_network_policy.karma_allow_namespace resource
kubernetes_network_policy.karma_default_deny resource
kubernetes_network_policy.karpenter_allow_control_plane resource
kubernetes_network_policy.karpenter_allow_monitoring resource
kubernetes_network_policy.karpenter_allow_namespace resource
kubernetes_network_policy.karpenter_default_deny resource
kubernetes_network_policy.keda_allow_namespace resource
kubernetes_network_policy.keda_default_deny resource
kubernetes_network_policy.kong_allow_ingress resource
kubernetes_network_policy.kong_allow_monitoring resource
kubernetes_network_policy.kong_allow_namespace resource
kubernetes_network_policy.kong_default_deny resource
kubernetes_network_policy.kube-prometheus-stack_allow_control_plane resource
kubernetes_network_policy.kube-prometheus-stack_allow_ingress resource
kubernetes_network_policy.kube-prometheus-stack_allow_namespace resource
kubernetes_network_policy.kube-prometheus-stack_default_deny resource
kubernetes_network_policy.linkerd-viz_allow_control_plane resource
kubernetes_network_policy.linkerd-viz_allow_monitoring resource
kubernetes_network_policy.linkerd-viz_allow_namespace resource
kubernetes_network_policy.linkerd-viz_default_deny resource
kubernetes_network_policy.linkerd2-cni_allow_namespace resource
kubernetes_network_policy.linkerd2-cni_default_deny resource
kubernetes_network_policy.loki-stack_allow_ingress resource
kubernetes_network_policy.loki-stack_allow_namespace resource
kubernetes_network_policy.loki-stack_default_deny resource
kubernetes_network_policy.metrics-server_allow_control_plane resource
kubernetes_network_policy.metrics-server_allow_namespace resource
kubernetes_network_policy.metrics-server_default_deny resource
kubernetes_network_policy.npd_allow_namespace resource
kubernetes_network_policy.npd_default_deny resource
kubernetes_network_policy.prometheus-adapter_allow_namespace resource
kubernetes_network_policy.prometheus-adapter_default_deny resource
kubernetes_network_policy.prometheus-blackbox-exporter_allow_namespace resource
kubernetes_network_policy.prometheus-blackbox-exporter_default_deny resource
kubernetes_network_policy.prometheus-cloudwatch-exporter_allow_namespace resource
kubernetes_network_policy.prometheus-cloudwatch-exporter_default_deny resource
kubernetes_network_policy.promtail_allow_ingress resource
kubernetes_network_policy.promtail_allow_namespace resource
kubernetes_network_policy.promtail_default_deny resource
kubernetes_network_policy.reloader_allow_namespace resource
kubernetes_network_policy.reloader_default_deny resource
kubernetes_network_policy.sealed-secrets_allow_namespace resource
kubernetes_network_policy.sealed-secrets_default_deny resource
kubernetes_network_policy.secrets-store-csi-driver_allow_namespace resource
kubernetes_network_policy.secrets-store-csi-driver_default_deny resource
kubernetes_network_policy.tigera-operator_allow_namespace resource
kubernetes_network_policy.tigera-operator_default_deny resource
kubernetes_network_policy.traefik_allow_ingress resource
kubernetes_network_policy.traefik_allow_monitoring resource
kubernetes_network_policy.traefik_allow_namespace resource
kubernetes_network_policy.traefik_default_deny resource
kubernetes_network_policy.velero_allow_monitoring resource
kubernetes_network_policy.velero_allow_namespace resource
kubernetes_network_policy.velero_default_deny resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_control_plane resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_ingress resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_namespace resource
kubernetes_network_policy.victoria-metrics-k8s-stack_default_deny resource
kubernetes_network_policy.yet-another-cloudwatch-exporter_allow_namespace resource
kubernetes_network_policy.yet-another-cloudwatch-exporter_default_deny resource
kubernetes_priority_class.kubernetes_addons resource
kubernetes_priority_class.kubernetes_addons_ds resource
kubernetes_secret.kube-prometheus-stack_thanos resource
kubernetes_secret.linkerd_trust_anchor resource
kubernetes_secret.loki-stack-ca resource
kubernetes_secret.promtail-tls resource
kubernetes_secret.thanos-ca resource
kubernetes_secret.webhook_issuer_tls resource
kubernetes_storage_class.aws-ebs-csi-driver resource
kubernetes_storage_class.aws-efs-csi-driver resource
random_string.grafana_password resource
time_sleep.cert-manager_sleep resource
tls_cert_request.promtail-csr resource
tls_cert_request.thanos-tls-querier-cert-csr resource
tls_locally_signed_cert.promtail-cert resource
tls_locally_signed_cert.thanos-tls-querier-cert resource
tls_private_key.identity resource
tls_private_key.linkerd_trust_anchor resource
tls_private_key.loki-stack-ca-key resource
tls_private_key.promtail-key resource
tls_private_key.thanos-tls-querier-ca-key resource
tls_private_key.thanos-tls-querier-cert-key resource
tls_private_key.webhook_issuer_tls resource
tls_self_signed_cert.linkerd_trust_anchor resource
tls_self_signed_cert.loki-stack-ca-cert resource
tls_self_signed_cert.thanos-tls-querier-ca-cert resource
tls_self_signed_cert.webhook_issuer_tls resource
aws_caller_identity.current data source
aws_iam_policy_document.aws-ebs-csi-driver data source
aws_iam_policy_document.aws-ebs-csi-driver_default data source
aws_iam_policy_document.aws-ebs-csi-driver_kms data source
aws_iam_policy_document.aws-efs-csi-driver data source
aws_iam_policy_document.aws-efs-csi-driver_default data source
aws_iam_policy_document.aws-for-fluent-bit data source
aws_iam_policy_document.aws-load-balancer-controller data source
aws_iam_policy_document.cert-manager data source
aws_iam_policy_document.cluster-autoscaler data source
aws_iam_policy_document.cni-metrics-helper data source
aws_iam_policy_document.external-dns data source
aws_iam_policy_document.karpenter_additional data source
aws_iam_policy_document.kube-prometheus-stack_grafana data source
aws_iam_policy_document.kube-prometheus-stack_thanos data source
aws_iam_policy_document.loki-stack data source
aws_iam_policy_document.prometheus-cloudwatch-exporter data source
aws_iam_policy_document.thanos data source
aws_iam_policy_document.thanos-storegateway data source
aws_iam_policy_document.velero data source
aws_iam_policy_document.velero_default data source
aws_iam_policy_document.velero_kms data source
aws_iam_policy_document.yet-another-cloudwatch-exporter data source
aws_partition.current data source
aws_region.current data source
github_repository.main data source
http_http.calico_crds data source
http_http.csi-external-snapshotter data source
http_http.kong_crds data source
http_http.prometheus-operator_crds data source
http_http.prometheus-operator_version data source
http_http.secrets-store-csi-driver-provider-aws data source
http_http.tigera-operator_crds data source
kubectl_file_documents.calico_crds data source
kubectl_file_documents.csi-external-snapshotter data source
kubectl_file_documents.kong_crds data source
kubectl_file_documents.secrets-store-csi-driver-provider-aws data source
kubectl_file_documents.tigera-operator_crds data source
kubectl_path_documents.cert-manager_cluster_issuers data source

Inputs

Name Description Type Default Required
admiralty Customize admiralty chart, see admiralty.tf for supported values any {} no
arn-partition ARN partition string "" no
aws AWS provider customization any {} no
aws-ebs-csi-driver Customize aws-ebs-csi-driver helm chart, see aws-ebs-csi-driver.tf any {} no
aws-efs-csi-driver Customize aws-efs-csi-driver helm chart, see aws-efs-csi-driver.tf any {} no
aws-for-fluent-bit Customize aws-for-fluent-bit helm chart, see aws-fluent-bit.tf any {} no
aws-load-balancer-controller Customize aws-load-balancer-controller chart, see aws-load-balancer-controller.tf for supported values any {} no
aws-node-termination-handler Customize aws-node-termination-handler chart, see aws-node-termination-handler.tf any {} no
cert-manager Customize cert-manager chart, see cert-manager.tf for supported values any {} no
cert-manager-csi-driver Customize cert-manager-csi-driver chart, see cert-manager.tf for supported values any {} no
cluster-autoscaler Customize cluster-autoscaler chart, see cluster-autoscaler.tf for supported values any {} no
cluster-name Name of the Kubernetes cluster string "sample-cluster" no
cni-metrics-helper Customize cni-metrics-helper deployment, see cni-metrics-helper.tf for supported values any {} no
csi-external-snapshotter Customize csi-external-snapshotter, see csi-external-snapshotter.tf for supported values any {} no
eks EKS cluster inputs any {} no
external-dns Map of map for external-dns configuration: see external_dns.tf for supported values any {} no
flux2 Customize Flux chart, see flux2.tf for supported values any {} no
helm_defaults Customize default Helm behavior any {} no
ingress-nginx Customize ingress-nginx chart, see nginx-ingress.tf for supported values any {} no
ip-masq-agent Configure ip masq agent chart, see ip-masq-agent.tf for supported values. This addon works only on GCP. any {} no
k8gb Customize k8gb chart, see k8gb.tf for supported values any {} no
karma Customize karma chart, see karma.tf for supported values any {} no
karpenter Customize karpenter chart, see karpenter.tf for supported values any {} no
keda Customize keda chart, see keda.tf for supported values any {} no
kong Customize kong-ingress chart, see kong.tf for supported values any {} no
kube-prometheus-stack Customize kube-prometheus-stack chart, see kube-prometheus-stack.tf for supported values any {} no
labels_prefix Custom label prefix used for network policy namespace matching string "particule.io" no
linkerd Customize linkerd chart, see linkerd.tf for supported values any {} no
linkerd-viz Customize linkerd-viz chart, see linkerd-viz.tf for supported values any {} no
linkerd2 Customize linkerd2 chart, see linkerd2.tf for supported values any {} no
linkerd2-cni Customize linkerd2-cni chart, see linkerd2-cni.tf for supported values any {} no
loki-stack Customize loki-stack chart, see loki-stack.tf for supported values any {} no
metrics-server Customize metrics-server chart, see metrics_server.tf for supported values any {} no
npd Customize node-problem-detector chart, see npd.tf for supported values any {} no
priority-class Customize a priority class for addons any {} no
priority-class-ds Customize a priority class for addons daemonsets any {} no
prometheus-adapter Customize prometheus-adapter chart, see prometheus-adapter.tf for supported values any {} no
prometheus-blackbox-exporter Customize prometheus-blackbox-exporter chart, see prometheus-blackbox-exporter.tf for supported values any {} no
prometheus-cloudwatch-exporter Customize prometheus-cloudwatch-exporter chart, see prometheus-cloudwatch-exporter.tf for supported values any {} no
promtail Customize promtail chart, see loki-stack.tf for supported values any {} no
reloader Customize reloader chart, see reloader.tf for supported values any {} no
s3-logging Logging configuration for bucket created by this module any {} no
sealed-secrets Customize sealed-secrets chart, see sealed-secrets.tf for supported values any {} no
secrets-store-csi-driver Customize secrets-store-csi-driver chart, see secrets-store-csi-driver.tf for supported values any {} no
secrets-store-csi-driver-provider-aws Enable secrets-store-csi-driver-provider-aws any {} no
tags Map of tags for AWS resources map(any) {} no
thanos Customize thanos chart, see thanos.tf for supported values any {} no
thanos-memcached Customize thanos chart, see thanos.tf for supported values any {} no
thanos-receive Customize thanos chart, see thanos-receive.tf for supported values any {} no
thanos-storegateway Customize thanos chart, see thanos.tf for supported values any {} no
thanos-tls-querier Customize thanos chart, see thanos.tf for supported values any {} no
tigera-operator Customize tigera-operator chart, see tigera-operator.tf for supported values any {} no
traefik Customize traefik chart, see traefik.tf for supported values any {} no
velero Customize velero chart, see velero.tf for supported values any {} no
victoria-metrics-k8s-stack Customize Victoria Metrics chart, see victoria-metrics-k8s-stack.tf for supported values any {} no
yet-another-cloudwatch-exporter Customize yet-another-cloudwatch-exporter chart, see yet-another-cloudwatch-exporter.tf for supported values any {} no

Outputs

Name Description
karpenter_iam n/a
kube-prometheus-stack n/a
kube-prometheus-stack_sensitive n/a
loki-stack-ca n/a
promtail-cert n/a
promtail-key n/a
thanos_ca n/a