2017-09-18 06:40:33 +02:00
|
|
|
variable "cluster_name" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "Unique cluster name (prepended to dns_zone)"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2018-03-26 06:36:10 +02:00
|
|
|
# AWS
|
|
|
|
|
2017-09-18 06:40:33 +02:00
|
|
|
variable "dns_zone" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "AWS Route53 DNS Zone (e.g. aws.example.com)"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
variable "dns_zone_id" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "AWS Route53 DNS Zone ID (e.g. Z3PAABBCFAKEC0)"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2018-03-26 06:36:10 +02:00
|
|
|
# instances
|
2017-09-18 06:40:33 +02:00
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "os_image" {
|
|
|
|
type = string
|
|
|
|
description = "AMI channel for a Container Linux derivative (flatcar-stable, flatcar-beta, flatcar-alpha)"
|
|
|
|
default = "flatcar-stable"
|
|
|
|
|
|
|
|
validation {
|
|
|
|
condition = contains(["flatcar-stable", "flatcar-beta", "flatcar-alpha"], var.os_image)
|
|
|
|
error_message = "The os_image must be flatcar-stable, flatcar-beta, or flatcar-alpha."
|
|
|
|
}
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "controller_count" {
|
2019-09-29 20:14:36 +02:00
|
|
|
type = number
|
2024-07-27 07:22:34 +02:00
|
|
|
description = "Number of controllers (i.e. masters)"
|
2019-09-29 20:14:36 +02:00
|
|
|
default = 1
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2018-03-26 06:36:10 +02:00
|
|
|
variable "controller_type" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "EC2 instance type for controllers"
|
2019-09-29 20:14:36 +02:00
|
|
|
default = "t3.small"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "controller_disk_size" {
|
|
|
|
type = number
|
|
|
|
description = "Size of the EBS volume in GB"
|
|
|
|
default = 30
|
|
|
|
}
|
|
|
|
|
|
|
|
variable "controller_disk_type" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2024-07-27 07:22:34 +02:00
|
|
|
description = "Type of the EBS volume (e.g. standard, gp2, gp3, io1)"
|
|
|
|
default = "gp3"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "controller_disk_iops" {
|
|
|
|
type = number
|
|
|
|
description = "IOPS of the EBS volume (e.g. 3000)"
|
|
|
|
default = 3000
|
|
|
|
}
|
|
|
|
|
|
|
|
variable "controller_cpu_credits" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2024-07-27 07:22:34 +02:00
|
|
|
description = "CPU credits mode (if using a burstable instance type)"
|
|
|
|
default = null
|
|
|
|
}
|
2020-11-17 20:30:01 +01:00
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "worker_count" {
|
|
|
|
type = number
|
|
|
|
description = "Number of workers"
|
|
|
|
default = 1
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "worker_type" {
|
|
|
|
type = string
|
|
|
|
description = "EC2 instance type for workers"
|
|
|
|
default = "t3.small"
|
|
|
|
}
|
|
|
|
|
|
|
|
variable "worker_disk_size" {
|
2019-09-29 20:14:36 +02:00
|
|
|
type = number
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "Size of the EBS volume in GB"
|
2021-04-26 20:04:30 +02:00
|
|
|
default = 30
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "worker_disk_type" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2021-07-04 19:41:53 +02:00
|
|
|
description = "Type of the EBS volume (e.g. standard, gp2, gp3, io1)"
|
|
|
|
default = "gp3"
|
2018-03-29 09:24:07 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "worker_disk_iops" {
|
2019-09-29 20:14:36 +02:00
|
|
|
type = number
|
2021-12-08 01:52:55 +01:00
|
|
|
description = "IOPS of the EBS volume (e.g. 3000)"
|
|
|
|
default = 3000
|
2018-10-15 16:59:35 +02:00
|
|
|
}
|
|
|
|
|
2024-07-27 07:22:34 +02:00
|
|
|
variable "worker_cpu_credits" {
|
|
|
|
type = string
|
|
|
|
description = "CPU credits mode (if using a burstable instance type)"
|
|
|
|
default = null
|
|
|
|
}
|
|
|
|
|
2018-04-29 22:19:00 +02:00
|
|
|
variable "worker_price" {
|
2019-09-29 20:14:36 +02:00
|
|
|
type = number
|
|
|
|
description = "Spot price in USD for worker instances or 0 to use on-demand instances"
|
|
|
|
default = 0
|
2018-04-29 22:19:00 +02:00
|
|
|
}
|
|
|
|
|
2019-04-01 08:22:47 +02:00
|
|
|
variable "worker_target_groups" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = list(string)
|
2019-04-01 08:22:47 +02:00
|
|
|
description = "Additional target group ARNs to which worker instances should be added"
|
|
|
|
default = []
|
|
|
|
}
|
|
|
|
|
2020-03-29 20:46:22 +02:00
|
|
|
variable "controller_snippets" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = list(string)
|
2018-02-20 17:36:21 +01:00
|
|
|
description = "Controller Container Linux Config snippets"
|
|
|
|
default = []
|
|
|
|
}
|
|
|
|
|
2020-03-29 20:46:22 +02:00
|
|
|
variable "worker_snippets" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = list(string)
|
2018-02-20 17:36:21 +01:00
|
|
|
description = "Worker Container Linux Config snippets"
|
|
|
|
default = []
|
|
|
|
}
|
|
|
|
|
2018-03-26 06:36:10 +02:00
|
|
|
# configuration
|
|
|
|
|
|
|
|
variable "ssh_authorized_key" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2018-03-26 06:36:10 +02:00
|
|
|
description = "SSH public key for user 'core'"
|
|
|
|
}
|
2017-09-18 06:40:33 +02:00
|
|
|
|
|
|
|
variable "networking" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2022-02-07 16:44:09 +01:00
|
|
|
description = "Choice of networking provider (flannel, calico, or cilium)"
|
|
|
|
default = "cilium"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
variable "network_mtu" {
|
2019-09-29 20:14:36 +02:00
|
|
|
type = number
|
2017-09-18 06:40:33 +02:00
|
|
|
description = "CNI interface MTU (applies to calico only). Use 8981 if using instances types with Jumbo frames."
|
2019-09-29 20:14:36 +02:00
|
|
|
default = 1480
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
|
|
|
|
2018-03-26 06:36:10 +02:00
|
|
|
variable "host_cidr" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2019-09-29 20:14:36 +02:00
|
|
|
description = "CIDR IPv4 range to assign to EC2 nodes"
|
2018-03-26 06:36:10 +02:00
|
|
|
default = "10.0.0.0/16"
|
|
|
|
}
|
|
|
|
|
2017-09-18 06:40:33 +02:00
|
|
|
variable "pod_cidr" {
|
2019-05-28 05:42:48 +02:00
|
|
|
type = string
|
2019-09-29 20:14:36 +02:00
|
|
|
description = "CIDR IPv4 range to assign Kubernetes pods"
|
2017-09-18 06:40:33 +02:00
|
|
|
default = "10.2.0.0/16"
|
|
|
|
}
|
|
|
|
|
|
|
|
variable "service_cidr" {
|
2019-11-14 08:44:02 +01:00
|
|
|
type = string
|
2017-09-18 06:40:33 +02:00
|
|
|
description = <<EOD
|
|
|
|
CIDR IPv4 range to assign Kubernetes services.
|
2018-07-02 04:41:57 +02:00
|
|
|
The 1st IP will be reserved for kube_apiserver, the 10th IP will be reserved for coredns.
|
2017-09-18 06:40:33 +02:00
|
|
|
EOD
|
2019-11-14 08:44:02 +01:00
|
|
|
default = "10.3.0.0/16"
|
2017-09-18 06:40:33 +02:00
|
|
|
}
|
2017-12-09 22:36:59 +01:00
|
|
|
|
2018-11-20 07:45:02 +01:00
|
|
|
variable "enable_reporting" {
|
2019-11-14 08:44:02 +01:00
|
|
|
type = bool
|
2018-11-20 07:45:02 +01:00
|
|
|
description = "Enable usage or analytics reporting to upstreams (Calico)"
|
2019-11-14 08:44:02 +01:00
|
|
|
default = false
|
2018-11-20 07:45:02 +01:00
|
|
|
}
|
2019-04-07 11:29:07 +02:00
|
|
|
|
|
|
|
variable "enable_aggregation" {
|
2019-11-14 08:44:02 +01:00
|
|
|
type = bool
|
2021-12-10 02:25:35 +01:00
|
|
|
description = "Enable the Kubernetes Aggregation Layer"
|
|
|
|
default = true
|
2019-04-07 11:29:07 +02:00
|
|
|
}
|
2019-05-28 05:42:48 +02:00
|
|
|
|
2019-09-28 23:59:24 +02:00
|
|
|
variable "worker_node_labels" {
|
2019-11-14 08:44:02 +01:00
|
|
|
type = list(string)
|
2019-09-29 00:01:14 +02:00
|
|
|
description = "List of initial worker node labels"
|
2019-11-14 08:44:02 +01:00
|
|
|
default = []
|
2019-09-28 23:59:24 +02:00
|
|
|
}
|
|
|
|
|
2019-09-29 20:14:36 +02:00
|
|
|
# unofficial, undocumented, unsupported
|
|
|
|
|
|
|
|
variable "cluster_domain_suffix" {
|
2019-11-14 08:44:02 +01:00
|
|
|
type = string
|
2019-09-29 20:14:36 +02:00
|
|
|
description = "Queries for domains with the suffix will be answered by CoreDNS. Default is cluster.local (e.g. foo.default.svc.cluster.local)"
|
2019-11-14 08:44:02 +01:00
|
|
|
default = "cluster.local"
|
2019-09-29 20:14:36 +02:00
|
|
|
}
|
|
|
|
|
2022-01-14 18:59:11 +01:00
|
|
|
variable "arch" {
|
|
|
|
type = string
|
|
|
|
description = "Container architecture (amd64 or arm64)"
|
|
|
|
default = "amd64"
|
|
|
|
|
|
|
|
validation {
|
|
|
|
condition = var.arch == "amd64" || var.arch == "arm64"
|
|
|
|
error_message = "The arch must be amd64 or arm64."
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2021-04-11 21:08:56 +02:00
|
|
|
variable "daemonset_tolerations" {
|
|
|
|
type = list(string)
|
|
|
|
description = "List of additional taint keys kube-system DaemonSets should tolerate (e.g. ['custom-role', 'gpu-role'])"
|
|
|
|
default = []
|
|
|
|
}
|
2024-05-13 06:03:40 +02:00
|
|
|
|
|
|
|
variable "components" {
|
|
|
|
description = "Configure pre-installed cluster components"
|
|
|
|
# Component configs are passed through to terraform-render-bootstrap,
|
|
|
|
# which handles type enforcement and defines defaults
|
|
|
|
# https://github.com/poseidon/terraform-render-bootstrap/blob/main/variables.tf#L95
|
|
|
|
type = object({
|
|
|
|
enable = optional(bool)
|
|
|
|
coredns = optional(map(any))
|
|
|
|
kube_proxy = optional(map(any))
|
Introduce the component system for managing pre-installed addons
* Previously: Typhoon provisions clusters with kube-system components
like CoreDNS, kube-proxy, and a chosen CNI provider (among flannel,
Calico, or Cilium) pre-installed. This is convenient since clusters
come with "batteries included". But it also means upgrading these
components is generally done in lock-step, by upgrading to a new
Typhoon / Kubernetes release
* It can be valuable to manage these components with a separate
plan/apply process or through automations and deploy systems. For
example, this allows managing CoreDNS separately from the cluster's
lifecycle.
* These "components" will continue to be pre-installed by default,
but a new `components` variable allows them to be disabled and
managed as "addons", components you apply after cluster creation
and manage on a rolling basis. For some of these, we may provide
Terraform modules to aide in managing these components.
```
module "cluster" {
# defaults
components = {
enable = true
coredns = {
enable = true
}
kube_proxy = {
enable = true
}
# Only the CNI set in var.networking will be installed
flannel = {
enable = true
}
calico = {
enable = true
}
cilium = {
enable = true
}
}
}
```
An earlier variable `install_container_networking = true/false` has
been removed, since it can now be achieved with this more extensible
and general components mechanism by setting the chosen networking
provider enable field to false.
2024-05-19 00:05:33 +02:00
|
|
|
flannel = optional(map(any))
|
|
|
|
calico = optional(map(any))
|
|
|
|
cilium = optional(map(any))
|
2024-05-13 06:03:40 +02:00
|
|
|
})
|
|
|
|
default = null
|
|
|
|
}
|