-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add EKS addons to deprecate tg modules (#46)
- now uses aws provider 6.x - eks module updated to 21.6.1 - k8s version 1.34 support - added ingress route for metrics-server - added ingress route for cert-manager - tags on resources removed as they should be handled at provider (also provider throws on dupe tags) - added cert-manager as eks-addon - added metrics-server as eks-addon - added eks-node-monitoring-agent as eks-addon - added before_compute = true to vpc-cni and ebs-pod-identity addons - updated node-pool label for karpenter.sh/controller = true
- Loading branch information
Showing
13 changed files
with
144 additions
and
163 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,68 @@ | ||
| locals { | ||
| node_security_group_additional_rules = { | ||
| ingress_nodes_ephemeral = { | ||
| description = "Node to node ingress on ephemeral ports" | ||
| from_port = 80 | ||
| protocol = "tcp" | ||
| self = true | ||
| to_port = 65535 | ||
| type = "ingress" | ||
| } | ||
| # ALB controller, NGINX | ||
| ingress_cluster_9443_webhook = { | ||
| description = "Cluster API to node 9443/tcp webhook" | ||
| from_port = 9443 | ||
| protocol = "tcp" | ||
| source_cluster_security_group = true | ||
| to_port = 9443 | ||
| type = "ingress" | ||
| } | ||
| # no longer required as of k8s v1.34+ | ||
| # ingress_metrics_server = { | ||
| # description = "Metrics server" | ||
| # from_port = 10251 | ||
| # protocol = "tcp" | ||
| # source_cluster_security_group = true | ||
| # to_port = 10251 | ||
| # type = "ingress" | ||
| # } | ||
| ingress_cert_manager_webhook = { | ||
| description = "cert-manager webhook" | ||
| from_port = 10260 | ||
| protocol = "tcp" | ||
| source_cluster_security_group = true | ||
| to_port = 10260 | ||
| type = "ingress" | ||
| } | ||
| } | ||
| cluster_security_group_additional_rules = { | ||
| api_internal_148_129 = { | ||
| cidr_blocks = ["148.129.0.0/16"] | ||
| from_port = 443 | ||
| to_port = 443 | ||
| ip_protocol = "tcp" | ||
| description = "Census Internal 148.129/16" | ||
| }, | ||
| api_internal_192_168 = { | ||
| cidr_blocks = ["192.168.0.0/16"] | ||
| from_port = 443 | ||
| to_port = 443 | ||
| ip_protocol = "tcp" | ||
| description = "Census Internal 192.168/16" | ||
| }, | ||
| api_internal_172_16 = { | ||
| cidr_blocks = ["172.16.0.0/12"] | ||
| from_port = 443 | ||
| to_port = 443 | ||
| ip_protocol = "tcp" | ||
| description = "Census Internal 172.16/12" | ||
| }, | ||
| api_internal_10_0 = { | ||
| cidr_blocks = ["10.0.0.0/8"] | ||
| from_port = 443 | ||
| to_port = 443 | ||
| ip_protocol = "tcp" | ||
| description = "Census Internal 10/8" | ||
| } | ||
| } | ||
| } |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.