eks-terraform/eks.tf at main · jithshetty/eks-terraform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
module "eks"{
    source = "terraform-aws-modules/eks/aws"
    version = "~> 20.0"
    cluster_name = local.cluster_name
    cluster_version = "1.30"
    subnet_ids = module.vpc.private_subnets

    cluster_endpoint_public_access = true

    # Optional: Adds the current caller identity as an administrator via cluster access entry
    enable_cluster_creator_admin_permissions = true

    tags = {
        Name = "AoK-EKS-Cluster"
    }

    vpc_id = module.vpc.vpc_id
    eks_managed_node_group_defaults = {
        root_volume_type = "gp3"
        root_volume_size = 30
    }


    eks_managed_node_groups = {
        aok_group = {
            name_prefix    = "Aok-"
            ami_type       = "AL2_x86_64"
            instance_types = ["t2.2xlarge"]
            min_size     = 1
            max_size     = 1
            desired_size = 1

            block_device_mappings = {
                xvda = {
                    device_name = "/dev/xvda"
                ebs = {
                    volume_size           = 30
                    volume_type           = "gp3"
                    iops                  = 3000
                    throughput            = 150
                    delete_on_termination = true
          }
        }
      }
        }
    }
}

resource "aws_eks_addon" "ebs_csi_driver" {
  cluster_name = module.eks.cluster_name
  addon_name   = "aws-ebs-csi-driver"
  resolve_conflicts_on_create = "OVERWRITE"
  resolve_conflicts_on_update = "OVERWRITE"

  # Optional: Specify the IAM Role ARN if needed
  service_account_role_arn = aws_iam_role.ebs_csi_role.arn
}

resource "aws_eks_addon" "vpc_cni" {
  cluster_name      = module.eks.cluster_name
  addon_name        = "vpc-cni"
  addon_version     = "v1.19.2-eksbuild.5"
  service_account_role_arn = aws_iam_role.vpc_cni_addon.arn
  resolve_conflicts_on_create = "OVERWRITE"
  resolve_conflicts_on_update = "OVERWRITE"
}

resource "aws_eks_addon" "coredns" {
  cluster_name                = module.eks.cluster_name
  addon_name                  = "coredns"
  addon_version               = "v1.11.4-eksbuild.2"
  resolve_conflicts_on_create = "OVERWRITE"
  resolve_conflicts_on_update = "OVERWRITE"

  configuration_values = jsonencode({
    replicaCount = 2
    resources = {
      limits = {
        cpu    = "100m"
        memory = "150Mi"
      }
      requests = {
        cpu    = "100m"
        memory = "150Mi"
      }
    }
  })
}

resource "aws_eks_addon" "kube_proxy" {
  cluster_name      = module.eks.cluster_name
  addon_name        = "kube-proxy"
  addon_version     = "v1.30.9-eksbuild.3"
  resolve_conflicts_on_create = "OVERWRITE"
  resolve_conflicts_on_update = "OVERWRITE"
}

# resource "aws_eks_addon" "cert_manager" {
#   cluster_name      = module.eks.cluster_name
#   addon_name        = "cert-manager"
#   addon_version     = "v1.17.1-eksbuild.1"
#   #resolve_conflicts = "OVERWRITE"
# }