tfmod-eks-dns

This module is designed to add DNS to an EKS cluster through the creation of the route53_zone for the cluster domain.

As discussed in PR #7, the data items in the upstream module caused issues with planning. We don't need the heritage records from the aws-dns module either.... digging deeper, it seems we haven't been using cname/alias records. They are different than strict cnames -> https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html

the aws module docs have a note: Exactly one of records or alias must be specified: this determines whether it's an alias record. in my 15s of research, every place we have created lb cnames we used a cname record, and the module for cname records isn't using alias.

There is a minor cost savings from this - alias record queries are not charged -> Route 53 doesn't charge for alias queries to AWS resources. For more information, see [Amazon Route 53 Pricing](https://aws.amazon.com/route53/pricing/).

Additional information regarding comparison of alias and cname records -> https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html#resource-record-sets-choosing-alias-non-alias-comparison

Changelog

Change logs are auto-generated with commitizen.

CHANGELOG.md

Requirements

Name	Version
terraform	>= 1.5
aws	>= 5.14.0
null	>= 3.2.1

Providers

Name	Version
aws	6.0.0
aws.route53_main	6.0.0
aws.route53_main_legacy	6.0.0
aws.route53_self	6.0.0
null	3.2.4

Modules

No modules.

Resources

Name	Type
aws_route53_record.entry	resource
aws_route53_vpc_association_authorization.central_zone_east	resource
aws_route53_vpc_association_authorization.central_zone_west	resource
aws_route53_vpc_association_authorization.legacy_zone_east	resource
aws_route53_vpc_association_authorization.legacy_zone_west	resource
aws_route53_zone.cluster_domain	resource
aws_route53_zone_association.central_zone_east	resource
aws_route53_zone_association.central_zone_west	resource
aws_route53_zone_association.legacy_zone_east	resource
aws_route53_zone_association.legacy_zone_west	resource
null_resource.git_version	resource
aws_arn.current	data source
aws_caller_identity.current	data source
aws_vpc.dummy_vpc	data source
aws_vpc.eks_vpc	data source

Inputs

Name	Description	Type	Default	Required
cluster_name	EKS cluster name name component used through out the EKS cluster describing its purpose (ex: dice-dev)	`string`	n/a	yes
istio_ingress_lb	The istio ingress load balancer DNS.	`map(string)`	n/a	yes
os_username	OS username from environment variable, ideally as $USER	`string`	`null`	no
profile	AWS config profile	`string`	`""`	no
region	AWS config region	`string`	`""`	no
region_map	AWS region map	`map(string)`	{ "east": "us-gov-east-1", "west": "us-gov-west-1" }	no
route53_endpoints	Map of target route53 endpoints (for inbound) central VPCs	`map(map(string))`	{ "route53_main": { "account_id": "269244441389", "alias": "lab-gov-network-nonprod", "us-gov-east-1": "vpc-070595c5b133243dd", "us-gov-west-1": "vpc-08b7b4db6a5ddf9c1" } }	no
tags	AWS Tags to apply to appropriate resources	`map(string)`	`{}`	no
vpc_domain_name	The DNS domain name of the vpc the cluster is in.	`string`	n/a	yes
vpc_name	Define the VPC name that will be used by this cluster	`string`	n/a	yes

Outputs

Name	Description
cluster_domain	DNS Zone Name
cluster_domain_id	DNS Zone ID
cluster_domain_ns	DNS Zone Nameservers
module_name	The name of this module.
module_version	The version of this module.

SCT-Engineering/tfmod-eks-dns

About

Resources

Stars

Watchers

Forks

Releases 7

Contributors 5

Languages