| allow_imdsv1 |
Whether to allow IMDSv1 access (insecure). |
bool |
false |
no |
| ami_owners |
The list of acceptable owners of AMIs to be used for worker nodes. |
list(string) |
[
"099720109477",
"679593333241",
"amazon",
"self"
] |
no |
| aws_ebs_csi_driver_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'aws-ebs-csi-driver' role using OpenID Connect. |
list(string) |
[] |
no |
| aws_load_balancer_controller_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'aws-load-balancer-controller' role using OpenID Connect. |
list(string) |
[] |
no |
| cert_manager_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'cert-manager' role using OpenID Connect. |
list(string) |
[] |
no |
| cluster_autoscaler_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'cluster-autoscaler' role using OpenID Connect. |
list(string) |
[] |
no |
| cluster_service_ipv4_cidr |
The CIDR block to assign Kubernetes service IP addresses from. |
string |
null |
no |
| control_plane_subnet_ids |
Can be used to override the list of subnet IDs to use for the EKS control-plane. If not defined, subnets tagged with 'eks-control-plane: true' will be used. |
list(string) |
[] |
no |
| disable_aws_vpc_cni_plugin |
Whether to disable the AWS VPC CNI plugin. Unless running in chaining mode, this should usually be 'true'. |
bool |
n/a |
yes |
| echo_server_instance_enabled |
Whether to create an EC2 instance outside the cluster that can act as 'echo-server'. |
bool |
false |
no |
| echo_server_instance_user_data |
The user data script to use for the 'echo-server' instance. |
string |
"" |
no |
| external_dns_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'external-dns' role using OpenID Connect. |
list(string) |
[] |
no |
| include_public_subnets |
Whether to include public subnets in the list of subnets usable by the EKS cluster. |
bool |
true |
no |
| kubernetes_version |
The version of Kubernetes/EKS to use. |
string |
n/a |
yes |
| log_shipping_bucket_name |
The name of the S3 bucket that will be used to store logs. |
string |
"" |
no |
| log_shipping_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'log-shipping' role using OpenID Connect. |
list(string) |
[] |
no |
| name |
The name of the EKS cluster. |
string |
n/a |
yes |
| phlare_bucket_name |
The name of the S3 bucket that will be used by Phlare |
string |
"" |
no |
| phlare_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'phlare' role using OpenID Connect. |
list(string) |
[] |
no |
| region |
The region in which to create the EKS cluster. |
string |
n/a |
yes |
| self_managed_node_groups |
A map describing the set of self-managed node groups to create. Other types of node groups besides self-managed are currently not supported. |
map(object({
ami_type = string
ami_name_filter = string
extra_tags = map(string)
instance_type = string
kubelet_extra_args = string
max_nodes = number
min_nodes = number
name = string
pre_bootstrap_user_data = string
post_bootstrap_user_data = string
root_volume_id = string
root_volume_size = number
root_volume_type = string
subnet_ids = list(string)
iam_role_additional_policies = map(string)
iam_role_use_name_prefix = optional(bool, true)
key_name = optional(string)
})) |
n/a |
yes |
| tags |
The set of tags to place on the EKS cluster. |
map(string) |
n/a |
yes |
| velero_bucket_name |
The name of the S3 bucket that will be used to upload Velero backups. |
string |
"" |
no |
| velero_oidc_fully_qualified_subjects |
The list of trusted resources which can assume the 'velero' role using OpenID Connect. |
list(string) |
[] |
no |
| vpc_id |
The ID of the VPC in which to create the EKS cluster. |
string |
n/a |
yes |
| worker_node_additional_policies |
A list of additional policies to add to worker nodes. |
list(string) |
[] |
no |