|
@ -5,9 +5,9 @@ resource "aws_vpc" "cluster-vpc" { |
|
|
enable_dns_support = true |
|
|
enable_dns_support = true |
|
|
enable_dns_hostnames = true |
|
|
enable_dns_hostnames = true |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-vpc" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-vpc" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_eip" "cluster-nat-eip" { |
|
|
resource "aws_eip" "cluster-nat-eip" { |
|
@ -18,9 +18,9 @@ resource "aws_eip" "cluster-nat-eip" { |
|
|
resource "aws_internet_gateway" "cluster-vpc-internetgw" { |
|
|
resource "aws_internet_gateway" "cluster-vpc-internetgw" { |
|
|
vpc_id = aws_vpc.cluster-vpc.id |
|
|
vpc_id = aws_vpc.cluster-vpc.id |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-internetgw" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-internetgw" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_subnet" "cluster-vpc-subnets-public" { |
|
|
resource "aws_subnet" "cluster-vpc-subnets-public" { |
|
@ -29,10 +29,10 @@ resource "aws_subnet" "cluster-vpc-subnets-public" { |
|
|
availability_zone = element(var.aws_avail_zones, count.index) |
|
|
availability_zone = element(var.aws_avail_zones, count.index) |
|
|
cidr_block = element(var.aws_cidr_subnets_public, count.index) |
|
|
cidr_block = element(var.aws_cidr_subnets_public, count.index) |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-${element(var.aws_avail_zones, count.index)}-public", |
|
|
Name = "kubernetes-${var.aws_cluster_name}-${element(var.aws_avail_zones, count.index)}-public" |
|
|
"kubernetes.io/cluster/${var.aws_cluster_name}", "member" |
|
|
"kubernetes.io/cluster/${var.aws_cluster_name}" = "member" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_nat_gateway" "cluster-nat-gateway" { |
|
|
resource "aws_nat_gateway" "cluster-nat-gateway" { |
|
@ -47,9 +47,9 @@ resource "aws_subnet" "cluster-vpc-subnets-private" { |
|
|
availability_zone = element(var.aws_avail_zones, count.index) |
|
|
availability_zone = element(var.aws_avail_zones, count.index) |
|
|
cidr_block = element(var.aws_cidr_subnets_private, count.index) |
|
|
cidr_block = element(var.aws_cidr_subnets_private, count.index) |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-${element(var.aws_avail_zones, count.index)}-private" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-${element(var.aws_avail_zones, count.index)}-private" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
#Routing in VPC |
|
|
#Routing in VPC |
|
@ -64,9 +64,9 @@ resource "aws_route_table" "kubernetes-public" { |
|
|
gateway_id = aws_internet_gateway.cluster-vpc-internetgw.id |
|
|
gateway_id = aws_internet_gateway.cluster-vpc-internetgw.id |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-routetable-public" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-routetable-public" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_route_table" "kubernetes-private" { |
|
|
resource "aws_route_table" "kubernetes-private" { |
|
@ -78,9 +78,9 @@ resource "aws_route_table" "kubernetes-private" { |
|
|
nat_gateway_id = element(aws_nat_gateway.cluster-nat-gateway.*.id, count.index) |
|
|
nat_gateway_id = element(aws_nat_gateway.cluster-nat-gateway.*.id, count.index) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-routetable-private-${count.index}" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-routetable-private-${count.index}" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_route_table_association" "kubernetes-public" { |
|
|
resource "aws_route_table_association" "kubernetes-public" { |
|
@ -101,9 +101,9 @@ resource "aws_security_group" "kubernetes" { |
|
|
name = "kubernetes-${var.aws_cluster_name}-securitygroup" |
|
|
name = "kubernetes-${var.aws_cluster_name}-securitygroup" |
|
|
vpc_id = aws_vpc.cluster-vpc.id |
|
|
vpc_id = aws_vpc.cluster-vpc.id |
|
|
|
|
|
|
|
|
tags = merge(var.default_tags, map( |
|
|
tags = merge(var.default_tags, tomap({ |
|
|
">an class="s2">Name", "kubernetes-${var.aws_cluster_name}-securitygroup" |
|
|
Name = "kubernetes-${var.aws_cluster_name}-securitygroup" |
|
|
)) |
|
|
})) |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
resource "aws_security_group_rule" "allow-all-ingress" { |
|
|
resource "aws_security_group_rule" "allow-all-ingress" { |
|
|
xxxxxxxxxx