terraform-aws-modules/terraform-aws-eks
4,973 Stars·4,400 Forks·HCL·Apache-2.0·6 Aufruferegistry.terraform.io/modules/terraform-aws-modules/eks/aws↗
Terraform Aws Eks
Dies ist ein Terraform-Modul für Infrastructure-as-Code, das für die Bereitstellung und Verwaltung von Amazon Elastic Kubernetes Service-Clustern und Worker-Nodes entwickelt wurde. Es fungiert als Kubernetes-Cluster-Provisioner, der das Deployment verwalteter Container-Orchestrierungsumgebungen handhabt, einschließlich der Control Plane und zugehöriger Node-Gruppen.
Das Projekt bietet einen Cloud-Node-Security-Manager, um Netzwerkregeln und Security-Groups sowohl auf verwaltete als auch auf selbstverwaltete Node-Cluster anzuwenden. Es automatisiert die Einrichtung dieser Umgebungen weiter durch benutzerdefinierte Bootstrap-Skripte und Konfigurationsdateien, die während des Node-Startprozesses injiziert werden.
Das Modul deckt breitere Funktionen in der AWS-Infrastrukturautomatisierung und dem regionalen Ressourcen-Deployment ab, was die Erstellung von Cloud-Ressourcen über verschiedene geografische Regionen hinweg ermöglicht. Es verwaltet zudem die Kubernetes-Netzwerksicherheit durch die Implementierung dedizierter Security-Group-Regeln, um den Cluster-Traffic zu isolieren und zu schützen.
Features
- Managed Kubernetes Provisioning - Automates the setup of managed Kubernetes clusters on AWS, including the control plane and worker node groups.
- Terraform Provisioning - Uses declarative Terraform configuration to provision and manage Amazon EKS clusters and worker nodes.
- AWS Provisioners - Provides automated deployment and management of comprehensive AWS infrastructure using Terraform.
- Kubernetes Cluster Provisioners - Automates the creation and configuration of managed Kubernetes clusters and their associated cloud infrastructure.
- Kubernetes Cluster Provisioning - Handles the automated deployment and lifecycle management of production-grade Amazon EKS clusters.
- Reusable Infrastructure Modules - Provides a reusable set of Terraform configurations to standardize the deployment of AWS cloud resources.
- Composite Resource Interfaces - Aggregates multiple AWS resource declarations into a single reusable module to standardize Kubernetes cluster deployments.
- Cluster Network Security Managers - Provides a mechanism to apply specific network rules and security groups to managed and self-managed node clusters.
- Cluster Node Management - Simplifies the configuration and management of Kubernetes node groups through high-level input parameters.
- Regional Resource Selection - Allows for the selection and deployment of cloud resources across multiple specific AWS geographic regions.
- Infrastructure Layer Deployments - Implements a tiered provisioning approach that separates the cluster control plane from worker node group deployment.
- Kubernetes Node Provisioning - Configures and deploys secure host nodes that integrate with the kubelet to join the EKS cluster.
- Node Configuration Files - Injects custom configuration files and bootstrap scripts into cluster nodes during the provisioning process.
- Kubernetes Security - Implements network isolation and protection for cluster traffic through dedicated security group rules.
- Cloud Security Group Rules - Defines inbound and outbound traffic permissions for EKS node groups using dedicated cloud security group rules.
- EC2 User Data Scripts - Injects custom shell scripts into EC2 launch templates to automate node registration with the Kubernetes API.
- Infrastructure Modules - Deploys and manages AWS Elastic Kubernetes Service clusters.
