mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 07:29:32 +01:00
812a1adb49
* Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig
24 lines
873 B
HCL
24 lines
873 B
HCL
module "workers" {
|
|
source = "workers"
|
|
name = "${var.cluster_name}"
|
|
|
|
# Azure
|
|
resource_group_name = "${azurerm_resource_group.cluster.name}"
|
|
region = "${azurerm_resource_group.cluster.location}"
|
|
subnet_id = "${azurerm_subnet.worker.id}"
|
|
security_group_id = "${azurerm_network_security_group.worker.id}"
|
|
backend_address_pool_id = "${azurerm_lb_backend_address_pool.worker.id}"
|
|
|
|
count = "${var.worker_count}"
|
|
vm_type = "${var.worker_type}"
|
|
os_image = "${var.os_image}"
|
|
priority = "${var.worker_priority}"
|
|
|
|
# configuration
|
|
kubeconfig = "${module.bootkube.kubeconfig-kubelet}"
|
|
ssh_authorized_key = "${var.ssh_authorized_key}"
|
|
service_cidr = "${var.service_cidr}"
|
|
cluster_domain_suffix = "${var.cluster_domain_suffix}"
|
|
clc_snippets = "${var.worker_clc_snippets}"
|
|
}
|