diff --git a/storage_classes.tf b/storage_classes.tf deleted file mode 100644 index 497cdcf..0000000 --- a/storage_classes.tf +++ /dev/null @@ -1,69 +0,0 @@ -resource "kubernetes_storage_class" "gp3_encrypted" { - metadata { - name = "gp3-encrypted" - annotations = { - "storageclass.kubernetes.io/is-default-class" = "true" - } - } - parameters = { - fsType = "ext4" - type = "gp3" - encrypted = "true" - # kms_key_id = data.aws_kms_key.ebs_key.arn - kmsKeyId = data.aws_kms_key.ebs_key.arn - } - storage_provisioner = "ebs.csi.aws.com" - reclaim_policy = "Delete" - volume_binding_mode = "Immediate" - allow_volume_expansion = "true" -} - -resource "kubernetes_storage_class" "ebs_encrypted" { - metadata { - name = "gp2-encrypted" - annotations = { - "storageclass.kubernetes.io/is-default-class" = "false" - } - } - parameters = { - fsType = "ext4" - type = "gp2" - encrypted = "true" - # kms_key_id = data.aws_kms_key.ebs_key.arn - kmsKeyId = data.aws_kms_key.ebs_key.arn - } - storage_provisioner = "kubernetes.io/aws-ebs" - reclaim_policy = "Delete" - volume_binding_mode = "Immediate" - allow_volume_expansion = "true" -} - -module "efs" { - source = "git@github.e.it.census.gov:terraform-modules/aws-efs.git" - - name = var.cluster_name - vpc_id = local.vpc_id - subnet_ids = local.subnets - security_groups = [aws_security_group.all_worker_mgmt.id] - - tags = merge( - local.base_tags, - var.tags, - tomap({ "efs.csi.aws.com/cluster" = "true" }), - ) -} - -resource "kubernetes_storage_class" "efs-sc" { - depends_on = [module.efs] - - metadata { - name = "efs" - } - storage_provisioner = "efs.csi.aws.com" - parameters = { - provisioningMode = "efs-ap" - fileSystemId = module.efs.id - directoryPerms = "700" - } - mount_options = ["tls"] -}