storytold/terraform-aws-observability-accelerator

mirror of https://github.com/storytold/terraform-aws-observability-accelerator.git synced 2026-10-09 00:09:43 +00:00

Files

T

Ela AWS 5b52c7b8e1 GitOps support with Grafana Operator, External Secrets and FluxCD (#151 )

* Adding FluxCD and Grafana Operator Addons

* Adding Helm release for Grafana Operator

* Adding External Secrets

* removing spot options

* Fixing Documentation
---------

2023-04-14 10:20:24 +02:00

4.1 KiB

Raw Blame History

External Secrets Operator Kubernetes addon

This deploys an EKS Cluster with the External Secrets Operator. The cluster is populated with a ClusterSecretStore and ExternalSecret using Grafana API Key secret from AWS Secret Manager. A secret store for each AWS Secret Manager is created. Store use IRSA (IAM Roles For Service Account) to retrieve the secret values from AWS.

Requirements

Name	Version
terraform	>= 1.0.0
aws	>= 3.72
kubectl	>= 1.14
kubernetes	>= 2.10

Providers

Name	Version
aws	>= 3.72
kubectl	>= 1.14

Modules

Name	Source	Version
cluster_secretstore_role	github.com/aws-ia/terraform-aws-eks-blueprints//modules/irsa	v4.28.0
external_secrets	github.com/aws-ia/terraform-aws-eks-blueprints//modules/kubernetes-addons/external-secrets	v4.28.0

Resources

Name	Type
aws_iam_policy.cluster_secretstore	resource
aws_kms_key.secrets	resource
aws_secretsmanager_secret.secret	resource
aws_secretsmanager_secret_version.secret	resource
kubectl_manifest.cluster_secretstore	resource
kubectl_manifest.secret	resource
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
addon_context	Input configuration for the addon	object({ aws_caller_identity_account_id = string aws_caller_identity_arn = string aws_eks_cluster_endpoint = string aws_partition_id = string aws_region_name = string eks_cluster_id = string eks_oidc_issuer_url = string eks_oidc_provider_arn = string irsa_iam_role_path = string irsa_iam_permissions_boundary = string tags = map(string) })	n/a	yes
enable_external_secrets	Enable external-secrets	`bool`	`true`	no
grafana_api_key	Grafana API key for the Amazon Managed Grafana workspace	`string`	n/a	yes
helm_config	Helm provider config for external secrets	`any`	`{}`	no
target_secret_name	Name to store the secret for Grafana API Key	`string`	n/a	yes
target_secret_namespace	Namespace to store the secret for Grafana API Key	`string`	n/a	yes

Outputs

No outputs.

4.1 KiB Raw Blame History