Skip to content

Latest commit

 

History

History
93 lines (70 loc) · 4.88 KB

README.md

File metadata and controls

93 lines (70 loc) · 4.88 KB

Introduction

Kubernetes Cluster module can deploy these resources:

  • azurerm_kubernetes_cluster (required)
  • azurerm_kubernetes_cluster_node_pool (optional)
  • azurerm_monitor_diagnostic_setting (optional)

Example variables structure is located in variables.md.

Example use case is located in test-case/locals.tf.

You can also see changelog.

Terraform documentation:

https://registry.terraform.io/providers/hashicorp/azurerm/4.14.0/docs/resources/kubernetes_cluster

https://registry.terraform.io/providers/hashicorp/azurerm/4.14.0/docs/resources/kubernetes_cluster_node_pool

https://registry.terraform.io/providers/hashicorp/azurerm/4.14.0/docs/resources/monitor_diagnostic_setting

 

WARNING: AzureRM provider had been updated to a new major version. Many breaking changes were implemented. See the providers guide for more information.

Terraform Import

There are a few things you need to do to import resources into .tfstate. In the example below there are resources which can be imported within the module. You may need to modify these commands to the OS on which they will be running (Refer to the documentation for additional details).

Kubernetes Cluster

  • terraform import '<path-to-module>.azurerm_kubernetes_cluster.kubernetes_cluster["<kubernetes-cluster-name>"]' '/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.ContainerService/managedClusters/<kubernetes-cluster-name>'

Kubernetes Cluster Node Pool

  • terraform import '<path-to-module>.azurerm_kubernetes_cluster_node_pool.kubernetes_cluster_node_pool["<kubernetes-cluster-name>_<node-pool-name>"]' '/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.ContainerService/managedClusters/<kubernetes-cluster-name>/agentPools/<node-pool-name>'

Diagnostic Setting

  • terraform import '<path-to-module>.azurerm_monitor_diagnostic_setting.diagnostic_setting["<kubernetes-cluster-name>_<diag-name>"]' '/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.ContainerService/managedClusters/<kubernetes-cluster-name>|<diag-name>'

NOTE: <path-to-module> is terraform logical path from root. e.g. module.kubernetes_cluster

 

Outputs

Structure

Output Name Value Comment
outputs name
id
principal_id principal_id (object_id) of system assigned identity
node_resource_group auto-generated RG containing resources for this AKS
oms_agent_uai object_id of oms agent identity
agent_pool_uai object_id of kubelet identity
keyvault_secret_provider_uai object_id of key vault secrets provider secret identity
fqdn FQDN of the Azure Kubernetes Managed Cluster
private_fqdn FQDN for the AKS when private link has been enabled
oidc_issuer_url OIDC issuer URL associated with the cluster

Example usage of outputs

In the example below, outputted id of the deployed Kubernetes Cluster module is used as a value for the scope variable in Role Assignment resource.

module "aks" {
    source = "[email protected]:Seyfor-CSC/mit.kubernetes-cluster.git?ref=v1.0.0"
    config = [
        {
            name                = "SEY-TERRAFORM-NE-AKS01"
            location            = "northeurope"
            resource_group_name = "SEY-TERRAFORM-NE-RG01"
            dns_prefix          = "SEY-TERRAFORM-NE-AKS01"

            default_node_pool {
                name    = "systemnp"
                vm_size = "Standard_D2_v2"
            }
        }
    ]
}

data "azurerm_client_config" "azurerm_client_config" {
}

resource "azurerm_role_assignment" "role_assignment" {
    scope                = module.aks.outputs.sey-terraform-ne-aks01.id # This is how to use output values
    role_definition_name = "Contributor"
    principal_id         = data.azurerm_client_config.azurerm_client_config.object_id
}

 

Module Features

No special features in module.

 

Known Issues

We currently log no issues in this module.