diff --git a/examples/kubectl-assume-role/credentials.eks.tf b/examples/kubectl-assume-role/credentials.eks.tf new file mode 100644 index 0000000..073b79c --- /dev/null +++ b/examples/kubectl-assume-role/credentials.eks.tf @@ -0,0 +1,22 @@ +provider "aws" { + alias = "eks" + region = var.region + profile = var.profile + + assume_role { + role_arn = format("arn:%v:iam::%v:role/r-inf-terraform", data.aws_arn.current.partition, data.aws_caller_identity.current.account_id) + session_name = var.os_username + } +} + +variable "os_environment" { + description = "OS environment variables to pass in with TF_VAR_os_environment={}" + type = map(string) + default = {} +} + +variable "os_username" { + description = "OS username $USER pass in as TF_VAR_os_username=$USER" + type = string + default = "UNDEFINED" +} diff --git a/examples/kubectl-assume-role/data.eks-main.tf b/examples/kubectl-assume-role/data.eks-main.tf new file mode 100644 index 0000000..e319646 --- /dev/null +++ b/examples/kubectl-assume-role/data.eks-main.tf @@ -0,0 +1,19 @@ +locals { + aws_eks_cluster_auth = data.aws_eks_cluster_auth.cluster + # for main.tf + aws_eks_cluster = aws_eks_cluster.eks_cluster + # for all subdirectories + ## aws_eks_cluster = data.aws_eks_cluster.cluster +} + +data "aws_eks_cluster_auth" "cluster" { + provider = aws.eks + name = var.cluster_name +} + +#--- +# for all subdirectories only +#--- +## data "aws_eks_cluster" "cluster" { +## name = var.cluster_name +## } diff --git a/examples/kubectl-assume-role/data.eks-subdirectory.tf b/examples/kubectl-assume-role/data.eks-subdirectory.tf new file mode 100644 index 0000000..279f713 --- /dev/null +++ b/examples/kubectl-assume-role/data.eks-subdirectory.tf @@ -0,0 +1,16 @@ +data "aws_eks_cluster" "cluster" { + name = var.cluster_name +} + +data "aws_eks_cluster_auth" "cluster" { + provider = aws.eks + name = var.cluster_name +} + +locals { + aws_eks_cluster_auth = data.aws_eks_cluster_auth.cluster + # for main.tf + # aws_eks_cluster = aws_eks_cluster.eks_cluster + # for all subdirectories + aws_eks_cluster = data.aws_eks_cluster.cluster +}