This repository has been archived by the owner on Jan 31, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
00bd3e6
commit 6ed7fd8
Showing
7 changed files
with
258 additions
and
44 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -6,3 +6,6 @@ | |
| .terraform/ | ||
| .idea | ||
| *.iml | ||
|
|
||
| .build-harness | ||
| build-harness | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,10 @@ | ||
| SHELL := /bin/bash | ||
|
|
||
| # List of targets the `readme` target should call before generating the readme | ||
| export README_DEPS ?= docs/targets.md docs/terraform.md | ||
|
|
||
| -include $(shell curl -sSL -o .build-harness "https://git.io/build-harness"; echo .build-harness) | ||
|
|
||
| ## Lint terraform code | ||
| lint: | ||
| $(SELF) terraform/install terraform/get-modules terraform/get-plugins terraform/lint terraform/validate | ||
| $(SELF) terraform/install terraform/get-modules terraform/get-plugins terraform/lint terraform/validate |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,85 @@ | ||
| --- | ||
| # | ||
| # This is the canonical configuration for the `README.md` | ||
| # Run `make readme` to rebuild the `README.md` | ||
| # | ||
|
|
||
| # Name of this project | ||
| name: terraform-aws-kops-route53 | ||
|
|
||
| # Logo for this project | ||
| #logo: docs/logo.png | ||
|
|
||
| # License of this project | ||
| license: "APACHE2" | ||
|
|
||
| # Canonical GitHub repo | ||
| github_repo: cloudposse/terraform-aws-kops-route53 | ||
|
|
||
| # Badges to display | ||
| badges: | ||
| - name: "Build Status" | ||
| image: "https://travis-ci.org/cloudposse/terraform-aws-kops-route53.svg?branch=master" | ||
| url: "https://travis-ci.org/cloudposse/terraform-aws-kops-route53" | ||
| - name: "Latest Release" | ||
| image: "https://img.shields.io/github/release/cloudposse/terraform-aws-kops-route53.svg" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-route53/releases/latest" | ||
| - name: "Slack Community" | ||
| image: "https://slack.cloudposse.com/badge.svg" | ||
| url: "https://slack.cloudposse.com" | ||
|
|
||
| related: | ||
| - name: "terraform-aws-kops-metadata" | ||
| description: "Terraform module to lookup resources within a Kops cluster for easier integration with Terraform" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-metadata" | ||
| - name: "terraform-aws-kops-ecr" | ||
| description: "Terraform module to provision an ECR repository and grant users and kubernetes nodes access to it." | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-ecr" | ||
| - name: "terraform-aws-kops-state-backend" | ||
| description: "Easily bootstrap kops clusters (DNS & S3 Bucket)" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-state-backend" | ||
| - name: "terraform-aws-kops-vpc-peering" | ||
| description: "Terraform module to create a peering connection between a backing services VPC and a VPC created by Kops" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-vpc-peering" | ||
| - name: "terraform-aws-kops-external-dns" | ||
| description: "Terraform module to provision an IAM role for external-dns running in a Kops cluster, and attach an IAM policy to the role with permissions to modify Route53 record sets" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-external-dns" | ||
| - name: "terraform-aws-kops-vault-backend" | ||
| description: "Terraform module to provision an S3 bucket for HashiCorp Vault secrets storage, and an IAM role and policy with permissions for Kops nodes to access the bucket" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-vault-backend" | ||
| - name: "terraform-aws-kops-chart-repo" | ||
| description: "Terraform module to provision an S3 bucket for Helm chart repository, and an IAM role and policy with permissions for Kops nodes to access the bucket" | ||
| url: "https://github.com/cloudposse/terraform-aws-kops-chart-repo" | ||
|
|
||
| # Short description of this project | ||
| description: |- | ||
| Terraform module to lookup an IAM role associated with `kops` masters, and attach an IAM policy to the role with permissions to modify Route53 record sets. | ||
| It provides the IAM permissions needed by [route53-kubernetes](https://github.com/cloudposse/route53-kubernetes) for `kops`. | ||
| This is useful to make Kubernetes services discoverable via AWS DNS services. | ||
| # How to use this project | ||
| usage: |- | ||
| ```hcl | ||
| module "kops_route53" { | ||
| source = "git::https://github.com/cloudposse/terraform-aws-kops-route53.git?ref=master" | ||
| namespace = "cp" | ||
| stage = "prod" | ||
| name = "route53" | ||
| masters_name = "masters" | ||
| tags = { | ||
| Cluster = "k8s.domain.com" | ||
| } | ||
| } | ||
| ``` | ||
| include: | ||
| - "docs/targets.md" | ||
| - "docs/terraform.md" | ||
|
|
||
| # Contributors to this project | ||
| contributors: | ||
| - name: "Andriy Knysh" | ||
| github: "aknysh" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| ## Makefile Targets | ||
| ``` | ||
| Available targets: | ||
| help This help screen | ||
| help/all Display help for all targets | ||
| lint Lint terraform code | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
|
|
||
| ## Inputs | ||
|
|
||
| | Name | Description | Type | Default | Required | | ||
| |------|-------------|:----:|:-----:|:-----:| | ||
| | attributes | Additional attributes (e.g. `policy` or `role`) | list | `<list>` | no | | ||
| | delimiter | Delimiter to be used between `namespace`, `stage`, `name`, and `attributes` | string | `-` | no | | ||
| | masters_name | K8s masters subdomain name in the Kops DNS zone | string | `masters` | no | | ||
| | name | Name (e.g. `route53`) | string | - | yes | | ||
| | namespace | Namespace (e.g. `cp` or `cloudposse`) | string | - | yes | | ||
| | stage | Stage (e.g. `prod`, `dev`, `staging`) | string | - | yes | | ||
| | tags | Additional tags (e.g. map(`Cluster`,`k8s.domain.com`) | map | `<map>` | no | | ||
|
|
||
| ## Outputs | ||
|
|
||
| | Name | Description | | ||
| |------|-------------| | ||
| | policy_arn | Policy ARN | | ||
| | policy_id | Policy ID | | ||
| | policy_name | Policy name | | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,11 +1,14 @@ | ||
| output "policy_id" { | ||
| value = "${aws_iam_policy.default.id}" | ||
| value = "${aws_iam_policy.default.id}" | ||
| description = "Policy ID" | ||
| } | ||
|
|
||
| output "policy_name" { | ||
| value = "${aws_iam_policy.default.name}" | ||
| value = "${aws_iam_policy.default.name}" | ||
| description = "Policy name" | ||
| } | ||
|
|
||
| output "policy_arn" { | ||
| value = "${aws_iam_policy.default.arn}" | ||
| value = "${aws_iam_policy.default.arn}" | ||
| description = "Policy ARN" | ||
| } |