EBSI
Technical Office
devops
Terraform Aws Eks Blueprints

Repository



Requirements


Name
Version


 terraform

>= 1.0.0


 aws

>= 3.66.0


 helm

>= 2.4.1


 kubernetes

>= 2.7.1


 local

2.1.0


 null

3.1.0


Providers


Name
Version


 aws

>= 3.66.0


Modules


Name
Source
Version


 agones

./agones
n/a


 argo_rollouts

./argo-rollouts
n/a


 argocd

./argocd
n/a


 aws_coredns

./aws-coredns
n/a


 aws_ebs_csi_driver

./aws-ebs-csi-driver
n/a


 aws_efs_csi_driver

./aws-efs-csi-driver
n/a


 aws_for_fluent_bit

./aws-for-fluentbit
n/a


 aws_kube_proxy

./aws-kube-proxy
n/a


 aws_load_balancer_controller

./aws-load-balancer-controller
n/a


 aws_node_termination_handler

./aws-node-termination-handler
n/a


 aws_vpc_cni

./aws-vpc-cni
n/a


 cert_manager

./cert-manager
n/a


 cluster_autoscaler

./cluster-autoscaler
n/a


 crossplane

./crossplane
n/a


 fargate_fluentbit

./fargate-fluentbit
n/a


 ingress_nginx

./ingress-nginx
n/a


 karpenter

./karpenter
n/a


 keda

./keda
n/a


 kubernetes_dashboard

./kubernetes-dashboard
n/a


 metrics_server

./metrics-server
n/a


 prometheus

./prometheus
n/a


 spark_k8s_operator

./spark-k8s-operator
n/a


 traefik

./traefik
n/a


 vpa

./vpa
n/a


 yunikorn

./yunikorn
n/a


Resources


Name
Type


aws_caller_identity.current
data source


aws_eks_cluster.eks_cluster
data source


aws_partition.current
data source


aws_region.current
data source


Inputs


Name
Description
Type
Default
Required


 agones_helm_config

Agones GameServer Helm Chart config
any
{}
no


 amazon_eks_aws_ebs_csi_driver_config

configMap for AWS EBS CSI Driver add-on
any
{}
no


 amazon_eks_coredns_config

ConfigMap for Amazon CoreDNS EKS add-on
any
{}
no


 amazon_eks_kube_proxy_config

ConfigMap for Amazon EKS Kube-Proxy add-on
any
{}
no


 amazon_eks_vpc_cni_config

ConfigMap of Amazon EKS VPC CNI add-on
any
{}
no


 amazon_prometheus_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 amazon_prometheus_irsa_role_path

IAM role path
string
"/"
no


 amazon_prometheus_workspace_endpoint

AWS Managed Prometheus WorkSpace Endpoint
string
null
no


 argo_rollouts_helm_config

Argo Rollouts Helm Chart config
any
null
no


 argocd_admin_password_secret_name

Name for a secret stored in AWS Secrets Manager that contains the admin password.
string
""
no


 argocd_applications

Argo CD Applications config to bootstrap the cluster
any
{}
no


 argocd_helm_config

Argo CD Kubernetes add-on config
any
{}
no


 argocd_manage_add_ons

Enable managing add-on configuration via ArgoCD
bool
false
no


 auto_scaling_group_names

List of self-managed node groups autoscaling group names
list(string)
[]
no


 aws_efs_csi_driver_helm_config

AWS EFS CSI driver Helm Chart config
any
{}
no


 aws_for_fluentbit_cw_log_group_kms_key_arn

FluentBit CloudWatch Log group KMS Key
string
null
no


 aws_for_fluentbit_cw_log_group_name

FluentBit CloudWatch Log group name
string
null
no


 aws_for_fluentbit_cw_log_group_retention

FluentBit CloudWatch Log group retention period
number
90
no


 aws_for_fluentbit_helm_config

AWS for FluentBit Helm Chart config
any
{}
no


 aws_for_fluentbit_irsa_policies

Additional IAM policies for a IAM role for service accounts
list(string)
[]
no


 aws_for_fluentbit_irsa_role_path

IAM role path
string
"/"
no


 aws_load_balancer_controller_helm_config

AWS Load Balancer Controller Helm Chart config
any
{}
no


 aws_load_balancer_controller_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 aws_load_balancer_controller_irsa_role_path

IAM role path
string
"/"
no


 aws_node_termination_handler_helm_config

AWS Node Termination Handler Helm Chart config
any
{}
no


 aws_node_termination_handler_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 aws_node_termination_handler_irsa_policies

Additional IAM policies for a IAM role for service accounts
list(string)
[]
no


 aws_node_termination_handler_irsa_role_path

IAM role path
string
"/"
no


 cert_manager_helm_config

Cert Manager Helm Chart config
any
{}
no


 cluster_autoscaler_helm_config

Cluster Autoscaler Helm Chart config
any
{}
no


 cluster_autoscaler_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 cluster_autoscaler_irsa_role_path

IAM role path
string
"/"
no


 crossplane_aws_provider

AWS Provider config for Crossplane
object({
    enable                   = bool
    provider_aws_version     = string
    additional_irsa_policies = list(string)
  })
{
  "additional_irsa_policies": [],
  "enable": false,
  "provider_aws_version": "v0.24.1"
}
no


 crossplane_helm_config

Crossplane Helm Chart config
any
null
no


 crossplane_jet_aws_provider

AWS Provider Jet AWS config for Crossplane
object({
    enable                   = bool
    provider_aws_version     = string
    additional_irsa_policies = list(string)
  })
{
  "additional_irsa_policies": [],
  "enable": false,
  "provider_aws_version": "v0.24.1"
}
no


 eks_cluster_id

EKS Cluster Id
string
n/a
yes


 eks_worker_security_group_id

EKS Worker Security group Id created by EKS module
string
""
no


 enable_agones

Enable Agones GamServer add-on
bool
false
no


 enable_amazon_eks_aws_ebs_csi_driver

Enable EKS Managed AWS EBS CSI Driver add-on
bool
false
no


 enable_amazon_eks_coredns

Enable CoreDNS add-on
bool
false
no


 enable_amazon_eks_kube_proxy

Enable Kube Proxy add-on
bool
false
no


 enable_amazon_eks_vpc_cni

Enable VPC CNI add-on
bool
false
no


 enable_amazon_prometheus

Enable AWS Managed Prometheus service
bool
false
no


 enable_argo_rollouts

Enable Argo Rollouts add-on
bool
false
no


 enable_argocd

Enable Argo CD Kubernetes add-on
bool
false
no


 enable_aws_efs_csi_driver

Enable AWS EFS CSI driver add-on
bool
false
no


 enable_aws_for_fluentbit

Enable AWS for FluentBit add-on
bool
false
no


 enable_aws_load_balancer_controller

Enable AWS Load Balancer Controller add-on
bool
false
no


 enable_aws_node_termination_handler

Enable AWS Node Termination Handler add-on
bool
false
no


 enable_cert_manager

Enable Cert Manager add-on
bool
false
no


 enable_cluster_autoscaler

Enable Cluster autoscaler add-on
bool
false
no


 enable_crossplane

Enable Crossplane add-on
bool
false
no


 enable_fargate_fluentbit

Enable Fargate FluentBit add-on
bool
false
no


 enable_ingress_nginx

Enable Ingress Nginx add-on
bool
false
no


 enable_karpenter

Enable Karpenter autoscaler add-on
bool
false
no


 enable_keda

Enable KEDA Event-based autoscaler add-on
bool
false
no


 enable_kubernetes_dashboard

Enable Kubernetes Dashboard add-on
bool
false
no


 enable_metrics_server

Enable metrics server add-on
bool
false
no


 enable_prometheus

Enable Community Prometheus add-on
bool
false
no


 enable_spark_k8s_operator

Enable Spark on K8s Operator add-on
bool
false
no


 enable_traefik

Enable Traefik add-on
bool
false
no


 enable_vpa

Enable Vertical Pod Autoscaler add-on
bool
false
no


 enable_yunikorn

Enable Apache YuniKorn K8s scheduler add-on
bool
false
no


 fargate_fluentbit_addon_config

Fargate fluentbit add-on config
any
{}
no


 ingress_nginx_helm_config

Ingress Nginx Helm Chart config
any
{}
no


 karpenter_helm_config

Karpenter autoscaler add-on config
any
{}
no


 karpenter_irsa_policies

Additional IAM policies for a IAM role for service accounts
list(string)
[]
no


 karpenter_irsa_role_path

IAM role path
string
"/"
no


 karpenter_node_iam_instance_profile

Karpenter Node IAM Instance profile id
string
""
no


 keda_helm_config

KEDA Event-based autoscaler add-on config
any
{}
no


 keda_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 keda_irsa_policies

Additional IAM policies for a IAM role for service accounts
list(string)
[]
no


 keda_irsa_role_path

IAM role path
string
"/"
no


 kubernetes_dashboard_helm_config

Kubernetes Dashboard Helm Chart config
any
null
no


 metrics_server_helm_config

Metrics Server Helm Chart config
any
{}
no


 node_groups_iam_role_arn

Node Groups IAM role ARNs
list(string)
[]
no


 prometheus_helm_config

Community Prometheus Helm Chart config
any
{}
no


 spark_k8s_operator_helm_config

Spark on K8s Operator Helm Chart config
any
{}
no


 tags

Additional tags (e.g. map('BusinessUnit,XYZ)
map(string)
{}
no


 traefik_helm_config

Traefik Helm Chart config
any
{}
no


 vpa_helm_config

VPA Helm Chart config
any
null
no


 yunikorn_helm_config

Yunikorn Helm Chart config
any
null
no


 yunikorn_irsa_permissions_boundary

IAM Policy ARN for IRSA IAM role permissions boundary
string
""
no


 yunikorn_irsa_policies

IAM policy ARNs for Yunikorn IRSA
list(string)
[]
no


 yunikorn_irsa_role_path

IAM role path
string
"/"
no


Outputs
No outputs.