terraform-aws-observability-accelerator/modules/core/cert-manager

Cert Manager Deployment Guide

Introduction

Cert Manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.

Helm Chart

Instructions to use the Helm Chart

See the cert-manager documentation.

Docker Image for Cert Manager

cert-manager docker image is available at this repo:

https://quay.io/repository/jetstack/cert-manager-controller?tag=latest&tab=tags

Requirements

Name	Version
terraform	>= 1.0.0
aws	>= 4.10
helm	>= 2.4.1

Providers

Name	Version
aws	>= 4.10
helm	>= 2.4.1

Modules

Name	Source	Version
helm_addon	../helm-addon	n/a

Resources

Name	Type
aws_iam_policy.cert_manager	resource
helm_release.cert_manager_ca	resource
helm_release.cert_manager_letsencrypt	resource
aws_iam_policy_document.cert_manager_iam_policy_document	data source
aws_route53_zone.selected	data source

Inputs

Name	Description	Type	Default	Required
addon_context	Input configuration for the addon	object({ aws_caller_identity_account_id = string aws_caller_identity_arn = string aws_eks_cluster_endpoint = string aws_partition_id = string aws_region_name = string eks_cluster_id = string eks_oidc_issuer_url = string eks_oidc_provider_arn = string tags = map(string) irsa_iam_role_path = string })	n/a	yes
domain_names	Domain names of the Route53 hosted zone to use with cert-manager.	list(string)	[]	no
helm_config	cert-manager Helm chart configuration	any	{}	no
install_letsencrypt_issuers	Install Let's Encrypt Cluster Issuers.	bool	true	no
irsa_policies	Additional IAM policies used for the add-on service account.	list(string)	[]	no
letsencrypt_email	Email address for expiration emails from Let's Encrypt.	string	""	no
manage_via_gitops	Determines if the add-on should be managed via GitOps.	bool	false	no

Outputs

Name	Description
argocd_gitops_config	Configuration used for managing the add-on with ArgoCD
eks_cluster_id	Current AWS EKS Cluster ID