mirror of
https://github.com/storytold/terraform-aws-observability-accelerator.git
synced 2026-10-09 00:09:43 +00:00
Rodrigue Koffi
6f973b95f9
* Bump eks blueprint version * Default EKS cluster version to 1.25 * fixup! Bump eks blueprint version * Pre-commit docs
122 lines
3.8 KiB
Terraform
122 lines
3.8 KiB
Terraform
provider "aws" {
|
|
region = local.region
|
|
}
|
|
|
|
data "aws_eks_cluster_auth" "this" {
|
|
name = var.eks_cluster_id
|
|
}
|
|
|
|
data "aws_eks_cluster" "this" {
|
|
name = var.eks_cluster_id
|
|
}
|
|
|
|
provider "kubernetes" {
|
|
host = local.eks_cluster_endpoint
|
|
cluster_ca_certificate = base64decode(data.aws_eks_cluster.this.certificate_authority[0].data)
|
|
token = data.aws_eks_cluster_auth.this.token
|
|
}
|
|
|
|
provider "helm" {
|
|
kubernetes {
|
|
host = local.eks_cluster_endpoint
|
|
cluster_ca_certificate = base64decode(data.aws_eks_cluster.this.certificate_authority[0].data)
|
|
token = data.aws_eks_cluster_auth.this.token
|
|
}
|
|
}
|
|
|
|
locals {
|
|
region = var.aws_region
|
|
eks_cluster_endpoint = data.aws_eks_cluster.this.endpoint
|
|
create_new_workspace = var.managed_prometheus_workspace_id == "" ? true : false
|
|
tags = {
|
|
Source = "github.com/aws-observability/terraform-aws-observability-accelerator"
|
|
}
|
|
}
|
|
|
|
# deploys the base module
|
|
module "aws_observability_accelerator" {
|
|
source = "../../"
|
|
# source = "github.com/aws-observability/terraform-aws-observability-accelerator?ref=v2.0.0"
|
|
|
|
aws_region = var.aws_region
|
|
|
|
# creates a new Amazon Managed Prometheus workspace, defaults to true
|
|
enable_managed_prometheus = local.create_new_workspace
|
|
|
|
# reusing existing Amazon Managed Prometheus if specified
|
|
managed_prometheus_workspace_id = var.managed_prometheus_workspace_id
|
|
|
|
# sets up the Amazon Managed Prometheus alert manager at the workspace level
|
|
enable_alertmanager = true
|
|
|
|
# reusing existing Amazon Managed Grafana workspace
|
|
managed_grafana_workspace_id = var.managed_grafana_workspace_id
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "eks_blueprints_kubernetes_addons" {
|
|
source = "github.com/aws-ia/terraform-aws-eks-blueprints//modules/kubernetes-addons?ref=v4.32.1"
|
|
|
|
eks_cluster_id = var.eks_cluster_id
|
|
#eks_cluster_endpoint = module.eks_blueprints.eks_cluster_endpoint
|
|
#eks_oidc_provider = module.eks_blueprints.oidc_provider
|
|
#eks_cluster_version = module.eks_blueprints.eks_cluster_version
|
|
|
|
# EKS Managed Add-ons
|
|
#enable_amazon_eks_vpc_cni = true
|
|
#enable_amazon_eks_coredns = true
|
|
#enable_amazon_eks_kube_proxy = true
|
|
|
|
# Add-ons
|
|
enable_metrics_server = true
|
|
enable_cluster_autoscaler = true
|
|
|
|
# Tetrate Istio Add-on
|
|
enable_tetrate_istio = true
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "eks_monitoring" {
|
|
source = "../../modules/eks-monitoring"
|
|
# source = "github.com/aws-observability/terraform-aws-observability-accelerator//modules/eks-monitoring?ref=v2.0.0"
|
|
enable_istio = true
|
|
eks_cluster_id = var.eks_cluster_id
|
|
|
|
# deploys AWS Distro for OpenTelemetry operator into the cluster
|
|
enable_amazon_eks_adot = true
|
|
|
|
# reusing existing certificate manager? defaults to true
|
|
enable_cert_manager = true
|
|
|
|
# deploys external-secrets in to the cluster
|
|
enable_external_secrets = true
|
|
grafana_api_key = var.grafana_api_key
|
|
target_secret_name = "grafana-admin-credentials"
|
|
target_secret_namespace = "grafana-operator"
|
|
grafana_url = module.aws_observability_accelerator.managed_grafana_workspace_endpoint
|
|
|
|
# control the publishing of dashboards by specifying the boolean value for the variable 'enable_dashboards', default is 'true'
|
|
enable_dashboards = var.enable_dashboards
|
|
|
|
managed_prometheus_workspace_id = module.aws_observability_accelerator.managed_prometheus_workspace_id
|
|
|
|
managed_prometheus_workspace_endpoint = module.aws_observability_accelerator.managed_prometheus_workspace_endpoint
|
|
managed_prometheus_workspace_region = module.aws_observability_accelerator.managed_prometheus_workspace_region
|
|
|
|
# optional, defaults to 60s interval and 15s timeout
|
|
prometheus_config = {
|
|
global_scrape_interval = "60s"
|
|
global_scrape_timeout = "15s"
|
|
}
|
|
|
|
enable_logs = true
|
|
|
|
tags = local.tags
|
|
|
|
depends_on = [
|
|
module.aws_observability_accelerator
|
|
]
|
|
}
|