typhoon/digital-ocean/container-linux/kubernetes/bootkube.tf

# Self-hosted Kubernetes assets (kubeconfig, manifests)
module "bootkube" {
  source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=85571f6dae3522e2a7de01b7e0a3f7e3a9359641/"

  cluster_name          = "${var.cluster_name}"
  api_servers           = ["${format("%s.%s", var.cluster_name, var.dns_zone)}"]
  etcd_servers          = "${digitalocean_record.etcds.*.fqdn}"
  asset_dir             = "${var.asset_dir}"
  networking            = "flannel"
  network_mtu           = 1440
  pod_cidr              = "${var.pod_cidr}"
  service_cidr          = "${var.service_cidr}"
  cluster_domain_suffix = "${var.cluster_domain_suffix}"
  enable_reporting      = "${var.enable_reporting}"
  enable_aggregation    = "${var.enable_aggregation}"
}
Add dghubble/pegasus Digital Ocean Kubernetes Terraform module 2017-07-29 20:35:53 +02:00			`# Self-hosted Kubernetes assets (kubeconfig, manifests)`
			`module "bootkube" {`
Update Kubernetes from v1.14.1 to v1.14.2 * https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1142 2019-05-17 13:09:15 +02:00			`source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=85571f6dae3522e2a7de01b7e0a3f7e3a9359641/"`
Add dghubble/pegasus Digital Ocean Kubernetes Terraform module 2017-07-29 20:35:53 +02:00
Add optional cluster_domain_suffix variable * Allow kube-dns to respond to DNS queries with a custom suffix, instead of the default 'cluster.local' * Useful when multiple clusters exist on the same local network and wish to query services on one another 2017-12-09 22:36:59 +01:00			`cluster_name = "${var.cluster_name}"`
			`api_servers = ["${format("%s.%s", var.cluster_name, var.dns_zone)}"]`
			`etcd_servers = "${digitalocean_record.etcds.*.fqdn}"`
			`asset_dir = "${var.asset_dir}"`
Remove optional variable networking on Digital Ocean * Calico isn't viable on Digital Ocean because their firewalls do not support IP-IP protocol. Its not viable to run a cluster without firewalls just to use Calico. * Remove the caveat note. Don't allow users to shoot themselves in the foot 2018-03-26 06:48:08 +02:00			`networking = "flannel"`
Add optional cluster_domain_suffix variable * Allow kube-dns to respond to DNS queries with a custom suffix, instead of the default 'cluster.local' * Useful when multiple clusters exist on the same local network and wish to query services on one another 2017-12-09 22:36:59 +01:00			`network_mtu = 1440`
			`pod_cidr = "${var.pod_cidr}"`
			`service_cidr = "${var.service_cidr}"`
			`cluster_domain_suffix = "${var.cluster_domain_suffix}"`
Fix Calico Felix reporting usage data, require opt-in * Calico Felix has been reporting anonymous usage data about the version and cluster size, which violates Typhoon's privacy policy where analytics should be opt-in only * Add a variable enable_reporting (default: false) to allow opting in to reporting usage data to Calico (or future components) 2018-11-20 07:45:02 +01:00			`enable_reporting = "${var.enable_reporting}"`
Add enable_aggregation option (defaults to false) * Add an `enable_aggregation` variable to enable the kube-apiserver aggregation layer for adding extension apiservers to clusters * Aggregation is disabled by default. Typhoon recommends you not enable aggregation. Consider whether less invasive ways to achieve your goals are possible and whether those goals are well-founded * Enabling aggregation and extension apiservers increases the attack surface of a cluster and makes extensions a part of the control plane. Admins must scrutinize and trust any extension apiserver used. * Passing a v1.14 CNCF conformance test requires aggregation be enabled. Having an option for aggregation keeps compliance, but retains the stricter security posture on default clusters 2019-04-07 11:29:07 +02:00			`enable_aggregation = "${var.enable_aggregation}"`
Add dghubble/pegasus Digital Ocean Kubernetes Terraform module 2017-07-29 20:35:53 +02:00			`}`