terraform-kubernetes-addons
Main components
| Name | Description | Generic | AWS | Scaleway | GCP | Azure |
|---|---|---|---|---|---|---|
| admiralty | A system of Kubernetes controllers that intelligently schedules workloads across clusters | |||||
| aws-ebs-csi-driver | Enable new feature and the use of gp3 volumes |
N/A | N/A | N/A | N/A | |
| aws-efs-csi-driver | Enable EFS Support | N/A | N/A | N/A | N/A | |
| aws-for-fluent-bit | Cloudwatch logging with fluent bit instead of fluentd | N/A | N/A | N/A | N/A | |
| aws-load-balancer-controller | Use AWS ALB/NLB for ingress and services | N/A | N/A | N/A | N/A | |
| aws-node-termination-handler | Manage spot instance lifecyle | N/A | N/A | N/A | N/A | |
| aws-calico | Use calico for network policy | N/A | N/A | N/A | N/A | |
| secrets-store-csi-driver-provider-aws | AWS Secret Store and Parameter store driver for secret store CSI driver | N/A | N/A | N/A | N/A | |
| cert-manager | automatically generate TLS certificates, supports ACME v2 | N/A | ||||
| cluster-autoscaler | scale worker nodes based on workload | N/A | Included | Included | Included | |
| cni-metrics-helper | Provides cloudwatch metrics for VPC CNI plugins | N/A | N/A | N/A | N/A | |
| external-dns | sync ingress and service records in route53 | |||||
| flux2 | Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit | |||||
| ingress-nginx | processes Ingress object and acts as a HTTP/HTTPS proxy (compatible with cert-manager) |
|||||
| k8gb | A cloud native Kubernetes Global Balancer | |||||
| karma | An alertmanager dashboard | |||||
| keda | Kubernetes Event-driven Autoscaling | |||||
| kong | API Gateway ingress controller | |||||
| kube-prometheus-stack | Monitoring / Alerting / Dashboards | |||||
| loki-stack | Grafana Loki logging stack | |||||
| promtail | Ship log to loki from other cluster (eg. mTLS) | |||||
| prometheus-adapter | Prometheus metrics for use with the autoscaling/v2 Horizontal Pod Autoscaler in Kubernetes 1.6+ | |||||
| prometheus-cloudwatch-exporter | An exporter for Amazon CloudWatch, for Prometheus. | |||||
| prometheus-blackbox-exporter | The blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. | |||||
| rabbitmq-cluster-operator | The RabbitMQ Cluster Operator automates provisioning, management of RabbitMQ clusters. | |||||
| metrics-server | enable metrics API and horizontal pod scaling (HPA) | Included | Included | Included | ||
| node-problem-detector | Forwards node problems to Kubernetes events | Included | Included | Included | ||
| secrets-store-csi-driver | Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume. | |||||
| sealed-secrets | Technology agnostic, store secrets on git | |||||
| thanos | Open source, highly available Prometheus setup with long term storage capabilities | |||||
| thanos-memcached | Open source, highly available Prometheus setup with long term storage capabilities | |||||
| thanos-storegateway | Additional storegateway to query multiple object stores | |||||
| thanos-tls-querier | Thanos TLS querier for cross cluster collection |
Submodules
Submodules are used for specific cloud provider configuration such as IAM role for AWS. For a Kubernetes vanilla cluster, generic addons should be used.
Any contribution supporting a new cloud provider is welcomed.
Doc generation
Code formatting and documentation for variables and outputs is generated using pre-commit-terraform hooks which uses terraform-docs.
Follow these instructions to install pre-commit locally.
And install terraform-docs with go get github.com/segmentio/terraform-docs
or brew install terraform-docs.
Contributing
Report issues/questions/feature requests on in the issues section.
Full contributing guidelines are covered here.
Requirements
| Name | Version |
|---|---|
| terraform | >= 1.0 |
| flux | 1.0.0-rc.5 |
| github | ~> 5.0 |
| helm | ~> 2.0 |
| http | >= 3 |
| kubectl | ~> 1.0 |
| kubernetes | ~> 2.0, != 2.12 |
| tls | ~> 4.0 |
Providers
| Name | Version |
|---|---|
| flux | 1.0.0-rc.5 |
| github | ~> 5.0 |
| helm | ~> 2.0 |
| http | >= 3 |
| kubectl | ~> 1.0 |
| kubernetes | ~> 2.0, != 2.12 |
| random | n/a |
| time | n/a |
| tls | ~> 4.0 |
Modules
No modules.
Resources
Inputs
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| admiralty | Customize admiralty chart, see admiralty.tf for supported values |
any |
{} |
no |
| cert-manager | Customize cert-manager chart, see cert-manager.tf for supported values |
any |
{} |
no |
| cert-manager-csi-driver | Customize cert-manager-csi-driver chart, see cert-manager.tf for supported values |
any |
{} |
no |
| cluster-autoscaler | Customize cluster-autoscaler chart, see cluster-autoscaler.tf for supported values |
any |
{} |
no |
| cluster-name | Name of the Kubernetes cluster | string |
"sample-cluster" |
no |
| csi-external-snapshotter | Customize csi-external-snapshotter, see csi-external-snapshotter.tf for supported values |
any |
{} |
no |
| external-dns | Map of map for external-dns configuration: see external_dns.tf for supported values |
any |
{} |
no |
| flux2 | Customize Flux chart, see flux2.tf for supported values |
any |
{} |
no |
| helm_defaults | Customize default Helm behavior | any |
{} |
no |
| ingress-nginx | Customize ingress-nginx chart, see nginx-ingress.tf for supported values |
any |
{} |
no |
| k8gb | Customize k8gb chart, see k8gb.tf for supported values |
any |
{} |
no |
| karma | Customize karma chart, see karma.tf for supported values |
any |
{} |
no |
| keda | Customize keda chart, see keda.tf for supported values |
any |
{} |
no |
| kong | Customize kong-ingress chart, see kong.tf for supported values |
any |
{} |
no |
| kube-prometheus-stack | Customize kube-prometheus-stack chart, see kube-prometheus-stack.tf for supported values |
any |
{} |
no |
| labels_prefix | Custom label prefix used for network policy namespace matching | string |
"particule.io" |
no |
| linkerd | Customize linkerd chart, see linkerd.tf for supported values |
any |
{} |
no |
| linkerd-viz | Customize linkerd-viz chart, see linkerd-viz.tf for supported values |
any |
{} |
no |
| linkerd2 | Customize linkerd2 chart, see linkerd2.tf for supported values |
any |
{} |
no |
| linkerd2-cni | Customize linkerd2-cni chart, see linkerd2-cni.tf for supported values |
any |
{} |
no |
| loki-stack | Customize loki-stack chart, see loki-stack.tf for supported values |
any |
{} |
no |
| metrics-server | Customize metrics-server chart, see metrics_server.tf for supported values |
any |
{} |
no |
| npd | Customize node-problem-detector chart, see npd.tf for supported values |
any |
{} |
no |
| priority-class | Customize a priority class for addons | any |
{} |
no |
| priority-class-ds | Customize a priority class for addons daemonsets | any |
{} |
no |
| prometheus-adapter | Customize prometheus-adapter chart, see prometheus-adapter.tf for supported values |
any |
{} |
no |
| prometheus-blackbox-exporter | Customize prometheus-blackbox-exporter chart, see prometheus-blackbox-exporter.tf for supported values |
any |
{} |
no |
| promtail | Customize promtail chart, see loki-stack.tf for supported values |
any |
{} |
no |
| sealed-secrets | Customize sealed-secrets chart, see sealed-secrets.tf for supported values |
any |
{} |
no |
| secrets-store-csi-driver | Customize secrets-store-csi-driver chart, see secrets-store-csi-driver.tf for supported values |
any |
{} |
no |
| thanos | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-memcached | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-storegateway | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-tls-querier | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| tigera-operator | Customize tigera-operator chart, see tigera-operator.tf for supported values |
any |
{} |
no |
| traefik | Customize traefik chart, see traefik.tf for supported values |
any |
{} |
no |
| victoria-metrics-k8s-stack | Customize Victoria Metrics chart, see victoria-metrics-k8s-stack.tf for supported values |
any |
{} |
no |
Outputs
| Name | Description |
|---|---|
| grafana_password | n/a |
| loki-stack-ca | n/a |
| promtail-cert | n/a |
| promtail-key | n/a |