GitHub - msfidelis/eks-with-cilium: :whale: :rocket: - Terraform template for a production ready EKS Cluster and Cilium Service Mesh and eBPF

Requirements

Name	Version
aws	~> 3.0
helm	~> 2.0
kubectl	~> 1.14
kubernetes	~> 2.0
tls	~> 3.1.0

Providers

Name	Version
aws	3.76.1
helm	2.11.0
kubectl	1.14.0
kubernetes	2.23.0
tls	3.1.0

Modules

No modules.

Resources

Name	Type
aws_api_gateway_vpc_link.nlb	resource
aws_eip.vpc_iep	resource
aws_eks_cluster.eks_cluster	resource
aws_eks_node_group.cluster	resource
aws_iam_openid_connect_provider.eks	resource
aws_iam_policy.aws_load_balancer_controller_policy	resource
aws_iam_policy.csi_driver	resource
aws_iam_policy.keda_policy	resource
aws_iam_policy_attachment.aws_load_balancer_controller_policy	resource
aws_iam_policy_attachment.csi_driver	resource
aws_iam_policy_attachment.keda	resource
aws_iam_role.alb_controller	resource
aws_iam_role.eks_cluster_role	resource
aws_iam_role.eks_nodes_roles	resource
aws_iam_role.keda_role	resource
aws_iam_role_policy_attachment.cloudwatch	resource
aws_iam_role_policy_attachment.cni	resource
aws_iam_role_policy_attachment.ecr	resource
aws_iam_role_policy_attachment.eks-cluster-cluster	resource
aws_iam_role_policy_attachment.eks-cluster-service	resource
aws_iam_role_policy_attachment.node	resource
aws_iam_role_policy_attachment.ssm	resource
aws_internet_gateway.gw	resource
aws_kms_alias.eks	resource
aws_kms_key.eks	resource
aws_lb.ingress	resource
aws_lb_listener.ingress_443	resource
aws_lb_listener.ingress_80	resource
aws_lb_target_group.http	resource
aws_lb_target_group.https	resource
aws_nat_gateway.nat	resource
aws_route.nat_access	resource
aws_route.public_internet_access	resource
aws_route_table.igw_route_table	resource
aws_route_table.nat	resource
aws_route_table_association.private1a	resource
aws_route_table_association.private1b	resource
aws_route_table_association.private1c	resource
aws_route_table_association.public_1a	resource
aws_route_table_association.public_1b	resource
aws_route_table_association.public_1c	resource
aws_security_group.cluster_nodes_sg	resource
aws_security_group.cluster_sg	resource
aws_security_group_rule.cluster_ingress_http	resource
aws_security_group_rule.cluster_ingress_http_8080	resource
aws_security_group_rule.cluster_ingress_https	resource
aws_security_group_rule.coredns_udp	resource
aws_security_group_rule.nodeport	resource
aws_security_group_rule.nodeport_cluster	resource
aws_security_group_rule.nodeport_cluster_udp	resource
aws_security_group_rule.nodes_coredns_udp	resource
aws_security_group_rule.nodes_ingress_http	resource
aws_security_group_rule.nodes_ingress_http_8080	resource
aws_subnet.private_subnet_1a	resource
aws_subnet.private_subnet_1b	resource
aws_subnet.private_subnet_1c	resource
aws_subnet.public_subnet_1a	resource
aws_subnet.public_subnet_1b	resource
aws_subnet.public_subnet_1c	resource
aws_vpc.cluster_vpc	resource
aws_vpc_ipv4_cidr_block_association.pods	resource
helm_release.alb_ingress_controller	resource
helm_release.argo_rollouts	resource
helm_release.cilium	resource
helm_release.descheduler	resource
helm_release.jaeger	resource
helm_release.keda	resource
helm_release.kube_state_metrics	resource
helm_release.prometheus	resource
helm_release.tetragon	resource
kubectl_manifest.cilium_target_group_binding_http	resource
kubectl_manifest.cilium_target_group_binding_https	resource
kubectl_manifest.grafana_ingress	resource
kubectl_manifest.hubble_ingress	resource
kubectl_manifest.jaeger_ingress	resource
kubectl_manifest.prometheus_all_pod_monitor	resource
kubernetes_config_map.aws-auth	resource
kubernetes_secret.prometheus_scrape_configs	resource
aws_caller_identity.current	data source
aws_eks_cluster_auth.default	data source
aws_iam_policy_document.aws_load_balancer_controller_assume_role	data source
aws_iam_policy_document.aws_load_balancer_controller_policy	data source
aws_iam_policy_document.csi_driver	data source
aws_iam_policy_document.eks_cluster_role	data source
aws_iam_policy_document.eks_nodes_role	data source
aws_iam_policy_document.keda_policy	data source
aws_iam_policy_document.keda_role	data source
tls_certificate.eks	data source

Inputs

Name	Description	Type	Default	Required
addon_cni_version	VPC CNI Version	`string`	`"v1.12.6-eksbuild.1"`	no
addon_coredns_version	CoreDNS Version	`string`	`"v1.10.1-eksbuild.2"`	no
addon_csi_version	CSI Version	`string`	`"v1.17.0-eksbuild.1"`	no
addon_kubeproxy_version	Kubeproxy Version	`string`	`"v1.27.3-eksbuild.2"`	no
argo_rollouts_toggle	Enable Argo Rollouts Installation	`bool`	`true`	no
auto_scale_options	n/a	`map`	{ "desired": 6, "max": 10, "min": 4 }	no
aws_region	n/a	`string`	`"us-east-1"`	no
chaos_mesh_toggle	Enable Chaos Mesh Installation	`bool`	`true`	no
cilium_hubble_host	n/a	`string`	`"hubble.msfidelis.com.br"`	no
cluster_autoscaler_toggle	Enable Cluster Autoscaler Installation	`bool`	`true`	no
cluster_name	n/a	`string`	`"eks-cilium"`	no
cluster_private_zone	n/a	`string`	`"k8s.cluster"`	no
default_tags	n/a	`map`	{ "Environment": "prod", "Foo": "Bar", "Ping": "Pong" }	no
descheduler_toggle	Enable Descheduler Installation	`bool`	`false`	no
enable_cross_zone_load_balancing	n/a	`bool`	`false`	no
grafana_host	n/a	`string`	`"grafana.msfidelis.com.br"`	no
jaeger_host	n/a	`string`	`"jaeger.msfidelis.com.br"`	no
jaeger_toggle	Enable Jaeger Installation	`bool`	`false`	no
k8s_version	n/a	`string`	`"1.28"`	no
keda_toggle	Enable Keda Installation	`bool`	`false`	no
nlb_ingress_enable_termination_protection	n/a	`bool`	`false`	no
nlb_ingress_internal	n/a	`bool`	`false`	no
nlb_ingress_type	n/a	`string`	`"network"`	no
nodes_instances_sizes	n/a	`list`	[ "t3.large" ]	no
proxy_protocol_v2	n/a	`bool`	`false`	no

Outputs

Name	Description
cilium_ingress_vpclink	n/a
cluster_name	n/a

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
docs		docs
helm/prometheus		helm/prometheus
samples		samples
.DS_Store		.DS_Store
.gitignore		.gitignore
.terraform-docs.yml		.terraform-docs.yml
LICENSE		LICENSE
README.md		README.md
aws-auth.tf		aws-auth.tf
data.tf		data.tf
eks.tf		eks.tf
helm_alb_ingress.tf		helm_alb_ingress.tf
helm_argo_rollouts.tf		helm_argo_rollouts.tf
helm_cilium.tf		helm_cilium.tf
helm_descheduler.tf		helm_descheduler.tf
helm_jaeger.tf		helm_jaeger.tf
helm_keda.tf		helm_keda.tf
helm_kube_state_metrics.tf		helm_kube_state_metrics.tf
helm_prometheus.tf		helm_prometheus.tf
iam_alb_controller.tf		iam_alb_controller.tf
iam_cluster_role.tf		iam_cluster_role.tf
iam_keda.tf		iam_keda.tf
iam_nodes.tf		iam_nodes.tf
internet_gateway.tf		internet_gateway.tf
kms.tf		kms.tf
nat.tf		nat.tf
nlb.tf		nlb.tf
nodes.tf		nodes.tf
oidc.tf		oidc.tf
output.tf		output.tf
private_subnets.tf		private_subnets.tf
providers.tf		providers.tf
public_subnet.tf		public_subnet.tf
sg.tf		sg.tf
variables.tf		variables.tf
vpc.tf		vpc.tf

License

msfidelis/eks-with-cilium

Folders and files

Latest commit

History

Repository files navigation

Requirements

Providers

Modules

Resources

Inputs

Outputs

About

Topics

Resources

License

Stars

Watchers

Forks

Languages