07_eks_nodes.tf

07_eks_nodes.tf

module "eks_cluster_node" {
  source                           = "git.url/repo?ref=en2.6"
  cluster_name                     = var.cluster_name
  cluster_version                  = module.eks_cluster.eks_cluster_version
  environment                      = module.eks_cluster.eks_cluster_environment
  vpc_id                           = module.eks_cluster.eks_cluster_vpc_id
  vpc_zone_identifier              = module.subnets_from_list.eks_subnet_ids
  instance_type                    = var.instance_type
  eks_master_sg_id                 = module.eks_cluster.eks_master_sg
  eks_master_endpoint              = module.eks_cluster.eks_cluster_endpoint
  eks_master_certificate_authority = module.eks_cluster.eks_cluster_certificate_authority
  node_associated_policies = [
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
    "${aws_iam_policy.eks_node_access_kms.arn}",
    "${aws_iam_policy.eks_node_access_secrets_manager_policy.arn}",
    "${aws_iam_policy.eks_node_access_opsworks.arn}",
    "${aws_iam_policy.eks_node_access_elb.arn}",
    "${aws_iam_policy.eks_node_access_cloudwatch.arn}"
  ]
  allowed_sgs_nodes      = var.allowed_sgs_nodes
  allowed_sgs_cidrs      = var.allowed_sgs_cidrs
  additional_node_sgs    = var.additional_node_sgs
  ssh_public_key         = var.ssh_public_key
  volume_size            = var.volume_size
  nodes_desired_capacity = var.nodes_desired_capacity
  nodes_max_size         = var.nodes_max_size
  nodes_min_size         = var.nodes_min_size
  lambda_role_arn        = var.lambda_role_arn
  supreme_role_arn       = var.supreme_role_arn
  tags                   = local.tags
  logrotate_s3_bucket    = var.logrotate_s3_bucket
  eks_ami_account_id     = var.eks_ami_account_id
  golden_ami_name        = var.golden_ami_name
}