terraform-aws-observability-accelerator/modules/eks-monitoring/add-ons/external-secrets

External Secrets Operator Kubernetes addon

This deploys an EKS Cluster with the External Secrets Operator. The cluster is populated with a ClusterSecretStore and ExternalSecret using Grafana API Key secret from AWS SSM Parameter Store. A secret store for each AWS SSM Parameter Store is created. Store use IRSA (IAM Roles For Service Account) to retrieve the secret values from AWS.

Requirements

Name	Version
terraform	>= 1.0.0
aws	>= 3.72
kubectl	>= 1.14
kubernetes	>= 2.10

Providers

Name	Version
aws	>= 3.72
kubectl	>= 1.14

Modules

Name	Source	Version
cluster_secretstore_role	github.com/aws-ia/terraform-aws-eks-blueprints//modules/irsa	v4.32.0
external_secrets	github.com/aws-ia/terraform-aws-eks-blueprints//modules/kubernetes-addons/external-secrets	v4.32.0

Resources

Name	Type
aws_iam_policy.cluster_secretstore	resource
aws_kms_key.secrets	resource
aws_ssm_parameter.secret	resource
kubectl_manifest.cluster_secretstore	resource
kubectl_manifest.secret	resource
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
addon_context	Input configuration for the addon	object({ aws_caller_identity_account_id = string aws_caller_identity_arn = string aws_eks_cluster_endpoint = string aws_partition_id = string aws_region_name = string eks_cluster_id = string eks_oidc_issuer_url = string eks_oidc_provider_arn = string irsa_iam_role_path = string irsa_iam_permissions_boundary = string tags = map(string) })	n/a	yes
enable_external_secrets	Enable external-secrets	bool	true	no
grafana_api_key	Grafana API key for the Amazon Managed Grafana workspace	string	n/a	yes
helm_config	Helm provider config for external secrets	any	{}	no
target_secret_name	Name to store the secret for Grafana API Key	string	n/a	yes
target_secret_namespace	Namespace to store the secret for Grafana API Key	string	n/a	yes

Outputs

No outputs.