mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 08:29:34 +01:00
812a1adb49
* Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig
20 lines
642 B
HCL
20 lines
642 B
HCL
module "workers" {
|
|
source = "workers"
|
|
name = "${var.cluster_name}"
|
|
|
|
# AWS
|
|
vpc_id = "${aws_vpc.network.id}"
|
|
subnet_ids = ["${aws_subnet.public.*.id}"]
|
|
security_groups = ["${aws_security_group.worker.id}"]
|
|
count = "${var.worker_count}"
|
|
instance_type = "${var.worker_type}"
|
|
disk_size = "${var.disk_size}"
|
|
spot_price = "${var.worker_price}"
|
|
|
|
# configuration
|
|
kubeconfig = "${module.bootkube.kubeconfig-kubelet}"
|
|
ssh_authorized_key = "${var.ssh_authorized_key}"
|
|
service_cidr = "${var.service_cidr}"
|
|
cluster_domain_suffix = "${var.cluster_domain_suffix}"
|
|
}
|