You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+9-6Lines changed: 9 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ Read the [AWS docs on EKS to get connected to the k8s dashboard](https://docs.aw
15
15
* You want to create an EKS cluster and an autoscaling group of workers for the cluster.
16
16
* You want these resources to exist within security groups that allow communication and coordination. These can be user provided or created within the module.
17
17
* You've created a Virtual Private Cloud (VPC) and subnets where you intend to put the EKS resources.
18
-
* If using the default variable value (`true`) for `configure_kubectl_session`, it's required that both [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl) (>=1.10) and [`aws-iam-authenticator`](https://github.com/kubernetes-sigs/aws-iam-authenticator#4-set-up-kubectl-to-use-authentication-tokens-provided-by-aws-iam-authenticator-for-kubernetes) are installed and on your shell's PATH.
18
+
* If `manage_aws_auth = true`, it's required that both [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl) (>=1.10) and [`aws-iam-authenticator`](https://github.com/kubernetes-sigs/aws-iam-authenticator#4-set-up-kubectl-to-use-authentication-tokens-provided-by-aws-iam-authenticator-for-kubernetes) are installed and on your shell's PATH.
19
19
20
20
## Usage example
21
21
@@ -56,9 +56,12 @@ This module has been packaged with [awspec](https://github.com/k1LoW/awspec) tes
56
56
4. Test using `bundle exec kitchen test` from the root of the repo.
57
57
58
58
For now, connectivity to the kubernetes cluster is not tested but will be in the
59
-
future. If `configure_kubectl_session` is set`true`, once the test fixture has
60
-
converged, you can query the test cluster from that terminal session with
61
-
`kubectl get nodes --watch --kubeconfig kubeconfig`.
59
+
future. Once the test fixture has converged, you can query the test cluster from
@@ -103,7 +106,7 @@ MIT Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-a
103
106
| cluster_name | Name of the EKS cluster. Also used as a prefix in names of related resources. | string | - | yes |
104
107
| cluster_security_group_id | If provided, the EKS cluster will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the workers and provide API access to your current IP/32. | string | `` | no |
105
108
| cluster_version | Kubernetes version to use for the EKS cluster. | string | `1.10` | no |
106
-
| config_output_path | Determines where config files are placed if using configure_kubectl_session and you want config files to land outside the current working directory. Should end in a forward slash / . | string | `./` | no |
109
+
| config_output_path | Where to save the Kubectl config file (if `write_kubeconfig = true`). Should end in a forward slash `/` . | string | `./` | no |
107
110
| kubeconfig_aws_authenticator_additional_args | Any additional arguments to pass to the authenticator such as the role to assume. e.g. ["-r", "MyEksRole"]. | list | `<list>` | no |
108
111
| kubeconfig_aws_authenticator_command | Command to use to to fetch AWS EKS credentials. | string | `aws-iam-authenticator` | no |
109
112
| kubeconfig_aws_authenticator_env_variables | Environment variables that should be used when executing the authenticator. e.g. { AWS_PROFILE = "eks"}. | map | `<map>` | no |
@@ -121,7 +124,7 @@ MIT Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-a
121
124
| worker_security_group_id | If provided, all workers will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the EKS cluster. | string | `` | no |
122
125
| worker_sg_ingress_from_port | Minimum port number from which pods will accept communication. Must be changed to a lower value if some pods in your cluster will expose a port lower than 1025 (e.g. 22, 80, or 443). | string | `1025` | no |
123
126
| workers_group_defaults | Override default values for target groups. See workers_group_defaults_defaults in locals.tf for valid keys. | map | `<map>` | no |
124
-
| write_kubeconfig | Whether to write a kubeconfig file containing the cluster configuration. | string | `true` | no |
127
+
| write_kubeconfig | Whether to write a Kubectl config file containing the cluster configuration. Saved to `config_output_path`. | string | `true` | no |
Copy file name to clipboardExpand all lines: main.tf
+7-4Lines changed: 7 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@
16
16
** You want to create an EKS cluster and an autoscaling group of workers for the cluster.
17
17
** You want these resources to exist within security groups that allow communication and coordination. These can be user provided or created within the module.
18
18
** You've created a Virtual Private Cloud (VPC) and subnets where you intend to put the EKS resources.
19
-
** If using the default variable value (`true`) for `configure_kubectl_session`, it's required that both [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl) (>=1.10) and [`aws-iam-authenticator`](https://github.com/kubernetes-sigs/aws-iam-authenticator#4-set-up-kubectl-to-use-authentication-tokens-provided-by-aws-iam-authenticator-for-kubernetes) are installed and on your shell's PATH.
19
+
** If `manage_aws_auth = true`, it's required that both [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl) (>=1.10) and [`aws-iam-authenticator`](https://github.com/kubernetes-sigs/aws-iam-authenticator#4-set-up-kubectl-to-use-authentication-tokens-provided-by-aws-iam-authenticator-for-kubernetes) are installed and on your shell's PATH.
20
20
21
21
* ## Usage example
22
22
@@ -57,9 +57,12 @@
57
57
* 4. Test using `bundle exec kitchen test` from the root of the repo.
58
58
59
59
* For now, connectivity to the kubernetes cluster is not tested but will be in the
60
-
* future. If `configure_kubectl_session` is set `true`, once the test fixture has
61
-
* converged, you can query the test cluster from that terminal session with
62
-
* `kubectl get nodes --watch --kubeconfig kubeconfig`.
60
+
* future. Once the test fixture has converged, you can query the test cluster from
61
+
* that terminal session with
62
+
* ```bash
63
+
* kubectl get nodes --watch --kubeconfig kubeconfig
Copy file name to clipboardExpand all lines: variables.tf
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -13,12 +13,12 @@ variable "cluster_version" {
13
13
}
14
14
15
15
variable"config_output_path" {
16
-
description="Determines where config files are placed if using configure_kubectl_session and you want config files to land outside the current working directory. Should end in a forward slash / ."
16
+
description="Where to save the Kubectl config file (if `write_kubeconfig = true`). Should end in a forward slash `/` ."
17
17
default="./"
18
18
}
19
19
20
20
variable"write_kubeconfig" {
21
-
description="Whether to write a kubeconfig file containing the cluster configuration."
21
+
description="Whether to write a Kubectl config file containing the cluster configuration. Saved to `config_output_path`."
0 commit comments