-
-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* scaffold refactored k8s modules * create an admin domain * documentation * documentation * update actions for github, aws, tutor * bump terraform versions * restore ci_actions_amazon_ecr_login_version * restore ci_deploy_tutor_plugin_credentials_version * restore and update ci_actions_setup_build_action_version * revert to enabling mfe with tutor from command line * add root_domain * consolidate to stack_namespace * consolidate to stack_namespace * consolidate to stack_namespace * add mock outputs * consolidate to stack_namespace * consolidate to stack_namespace * documentation * revert to fork * should use namespace instead of environment_namespace * disable all mfe's by default. set ENABLE_WEB_PROXY=false * parameterize the aws account_id * add environment_domain * parameterize and standardize cert issuer manifests * fix local initializations * parameterize the admin hosted zone * standardize secret names * standardize the cert used for all admin subdomains * standardize the cert used for all admin subdomains * refactor cluster-issuer manifest into a template * move environment certs and ingresses to stack * lint namespace * lint namespace * lint namespace * lint namespace * lint namespace * add kubectl provider * a * fix namespace * add k8s dns records * refactor cert-manager and bump to v1.10 * lint cert-manager * testing * documentation * move nginx controller to kubernetes_ingress_clb * move all vpa resources to kubernetes_monitoring * add cert_manager_namespace * lint * refactor cert-manager into its own module * rename to stack-ingress-nginx-controller * rename to common-ingress-nginx-controller * add mock outputs * testing * add namespace * add namespace * add namespace * add data.aws_route53_zone.admin_domain * add stack_namespace * rename to common-ingress-nginx-controller * add admin_domain * testing * documentation * refactor karpenter into its own module * lint * parameterize whether to install karpenter, kubeapps, prometheus, dashboard * refactor rm_directory() * refactor post_gen_project.py * refactor post_gen_project.py * documentation
- Loading branch information
Showing
23 changed files
with
375 additions
and
75 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes.
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
33 changes: 33 additions & 0 deletions
33
...hub_repo_name}}/terraform/stacks/modules/kubernetes_cert_manager/verticalpodautoscaler.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| data "template_file" "vpa-cert-manager-cainjector" { | ||
| template = file("${path.module}/manifests/verticalpodautoscalers/vpa-openedx-cert-manager-cainjector.yaml.tpl") | ||
| vars = { | ||
| environment_namespace = var.namespace | ||
| } | ||
| } | ||
|
|
||
| data "template_file" "vpa-cert-manager-webhook" { | ||
| template = file("${path.module}/manifests/verticalpodautoscalers/vpa-openedx-cert-manager-webhook.yaml.tpl") | ||
| vars = { | ||
| environment_namespace = var.namespace | ||
| } | ||
| } | ||
|
|
||
| data "template_file" "vpa-cert-manager" { | ||
| template = file("${path.module}/manifests/verticalpodautoscalers/vpa-openedx-cert-manager.yaml.tpl") | ||
| vars = { | ||
| environment_namespace = var.namespace | ||
| } | ||
| } | ||
|
|
||
|
|
||
| resource "kubectl_manifest" "vpa-cert-manager" { | ||
| yaml_body = data.template_file.vpa-cert-manager.rendered | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "vpa-cert-manager-cainjector" { | ||
| yaml_body = data.template_file.vpa-cert-manager-cainjector.rendered | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "vpa-cert-manager-webhook" { | ||
| yaml_body = data.template_file.vpa-cert-manager-webhook.rendered | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
8 changes: 8 additions & 0 deletions
8
{{cookiecutter.github_repo_name}}/terraform/stacks/modules/kubernetes_karpenter/outputs.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| #------------------------------------------------------------------------------ | ||
| # written by: Lawrence McDaniel | ||
| # https://lawrencemcdaniel.com/ | ||
| # | ||
| # date: Mar-2022 | ||
| # | ||
| # usage: create an EKS cluster | ||
| #------------------------------------------------------------------------------ |
42 changes: 42 additions & 0 deletions
42
{{cookiecutter.github_repo_name}}/terraform/stacks/modules/kubernetes_karpenter/providers.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,42 @@ | ||
| #------------------------------------------------------------------------------ | ||
| # written by: Lawrence McDaniel | ||
| # https://lawrencemcdaniel.com/ | ||
| # | ||
| # date: Aug-2022 | ||
| # | ||
| # usage: all providers for Kubernetes and its sub-systems. The general strategy | ||
| # is to manage authentications via aws cli where possible, simply to limit | ||
| # the environment requirements in order to get this module to work. | ||
| # | ||
| # another alternative for each of the providers would be to rely on | ||
| # the local kubeconfig file. | ||
| #------------------------------------------------------------------------------ | ||
|
|
||
| data "aws_eks_cluster" "eks" { | ||
| name = var.stack_namespace | ||
| } | ||
|
|
||
| data "aws_eks_cluster_auth" "eks" { | ||
| name = var.stack_namespace | ||
| } | ||
|
|
||
| provider "kubernetes" { | ||
| host = data.aws_eks_cluster.eks.endpoint | ||
| cluster_ca_certificate = base64decode(data.aws_eks_cluster.eks.certificate_authority[0].data) | ||
| token = data.aws_eks_cluster_auth.eks.token | ||
| } | ||
|
|
||
| provider "kubectl" { | ||
| host = data.aws_eks_cluster.eks.endpoint | ||
| cluster_ca_certificate = base64decode(data.aws_eks_cluster.eks.certificate_authority.0.data) | ||
| token = data.aws_eks_cluster_auth.eks.token | ||
| } | ||
|
|
||
|
|
||
| provider "helm" { | ||
| kubernetes { | ||
| host = data.aws_eks_cluster.eks.endpoint | ||
| cluster_ca_certificate = base64decode(data.aws_eks_cluster.eks.certificate_authority.0.data) | ||
| token = data.aws_eks_cluster_auth.eks.token | ||
| } | ||
| } |
29 changes: 29 additions & 0 deletions
29
{{cookiecutter.github_repo_name}}/terraform/stacks/modules/kubernetes_karpenter/variables.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| #------------------------------------------------------------------------------ | ||
| # written by: Lawrence McDaniel | ||
| # https://lawrencemcdaniel.com/ | ||
| # | ||
| # date: Mar-2022 | ||
| # | ||
| # usage: create an EKS cluster | ||
| #------------------------------------------------------------------------------ | ||
| variable "stack_namespace" { | ||
| type = string | ||
| } | ||
|
|
||
| variable "karpenter_node_group_iam_role_name" { | ||
| type = string | ||
| } | ||
|
|
||
| variable "karpenter_node_group_iam_role_arn" { | ||
| type = string | ||
| } | ||
|
|
||
| variable "oidc_provider_arn" { | ||
| type = string | ||
| } | ||
|
|
||
| variable "tags" { | ||
| description = "A map of tags to add to all resources. Tags added to launch configuration or templates override these values for ASG Tags only." | ||
| type = map(string) | ||
| default = {} | ||
| } |
36 changes: 36 additions & 0 deletions
36
{{cookiecutter.github_repo_name}}/terraform/stacks/modules/kubernetes_karpenter/versions.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| #------------------------------------------------------------------------------ | ||
| # written by: Lawrence McDaniel | ||
| # https://lawrencemcdaniel.com/ | ||
| # | ||
| # date: Mar-2022 | ||
| # | ||
| # usage: create an EKS cluster | ||
| #------------------------------------------------------------------------------ | ||
| terraform { | ||
| required_version = "{{ cookiecutter.terraform_required_version }}" | ||
|
|
||
| required_providers { | ||
| local = "{{ cookiecutter.terraform_provider_hashicorp_local_version }}" | ||
| random = { | ||
| source = "hashicorp/random" | ||
| version = "{{ cookiecutter.terraform_provider_hashicorp_random_version }}" | ||
| } | ||
|
|
||
| aws = { | ||
| source = "hashicorp/aws" | ||
| version = "{{ cookiecutter.terraform_provider_hashicorp_aws_version }}" | ||
| } | ||
| kubectl = { | ||
| source = "gavinbunney/kubectl" | ||
| version = "{{ cookiecutter.terraform_provider_hashicorp_kubectl_version }}" | ||
| } | ||
| helm = { | ||
| source = "hashicorp/helm" | ||
| version = "{{ cookiecutter.terraform_provider_hashicorp_helm_version }}" | ||
| } | ||
| kubernetes = { | ||
| source = "hashicorp/kubernetes" | ||
| version = "{{ cookiecutter.terraform_provider_kubernetes_version }}" | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.