deploy-self-hosted-github-runner-eks-using-terraform/main.tf at main · aws-samples/deploy-self-hosted-github-runner-eks-using-terraform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
################################################################################
# EKS Blueprints Addons
################################################################################
# module "eks_blueprints_addons" {
#   # source  = "aws-ia/eks-blueprints-addons/aws"
#   # version = "~> 1.0"
#   source = "github.com/aws-ia/terraform-aws-eks-blueprints//modules/kubernetes-addons?ref=v4.32.1"

#   cluster_name      = module.eks.cluster_name
#   cluster_endpoint  = module.eks.cluster_endpoint
#   cluster_version   = module.eks.cluster_version
#   oidc_provider_arn = module.eks.oidc_provider_arn

#   # Using GitOps Bridge (Skip Helm Install in Terraform)
#   create_kubernetes_resources = false

#   # EKS Blueprints Addons
#   enable_cert_manager                 = var.addons.enable_cert_manager
#   enable_aws_efs_csi_driver           = var.addons.enable_aws_efs_csi_driver
#   enable_aws_fsx_csi_driver           = var.addons.enable_aws_fsx_csi_driver
#   enable_aws_cloudwatch_metrics       = var.addons.enable_aws_cloudwatch_metrics
#   enable_aws_privateca_issuer         = var.addons.enable_aws_privateca_issuer
#   # enable_cluster_autoscaler           = var.addons.enable_cluster_autoscaler
#   enable_external_dns                 = var.addons.enable_external_dns
#   enable_external_secrets             = var.addons.enable_external_secrets
#   enable_aws_load_balancer_controller = var.addons.enable_aws_load_balancer_controller
#   # enable_fargate_fluentbit            = var.addons.enable_fargate_fluentbit
#   # enable_aws_for_fluentbit            = var.addons.enable_aws_for_fluentbit
#   # enable_aws_node_termination_handler = var.addons.enable_aws_node_termination_handler
#   enable_karpenter                    = var.addons.enable_karpenter
#   # enable_velero                       = var.addons.enable_velero
#   # enable_aws_gateway_api_controller   = var.addons.enable_aws_gateway_api_controller
#   enable_argocd = true
#   argocd_manage_add_ons = true # Indicates that ArgoCD is responsible for managing/deploying add-ons
#   # argocd_applications = {
#   #     addons = {
#   #       path               = "chart"
#   #       repo_url           = "https://github.com/aws-samples/eks-blueprints-add-ons.git"
#   #       add_on_application = true
#   #     }
#   #     workloads = {
#   #       path               = "envs/dev"
#   #       repo_url           = "https://github.com/aws-samples/eks-blueprints-workloads.git"
#   #       add_on_application = false
#   #     }
#   #   }
#   tags = local.tags

#   depends_on = [module.eks]
# }

# locals {

#   cluster_metadata = merge(
#     module.eks_blueprints_addons.gitops_metadata,
#     {
#       aws_cluster_name = module.eks.cluster_name
#       aws_region       = local.region
#       aws_account_id   = data.aws_caller_identity.current.account_id
#       aws_vpc_id       = module.vpc.vpc_id
#     },
#     {
#       addons_repo_url      = "${var.gitops_addons_org}/${var.gitops_addons_repo}"
#       addons_repo_basepath = var.gitops_addons_basepath
#       addons_repo_path     = var.gitops_addons_path
#       addons_repo_revision = var.gitops_addons_revision
#     },
#     {
#       workload_repo_url      = "${var.gitops_workload_org}/${var.gitops_workload_repo}"
#       workload_repo_basepath = var.gitops_workload_basepath
#       workload_repo_path     = var.gitops_workload_path
#       workload_repo_revision = var.gitops_workload_revision
#     }
#   )

#   cluster_labels = merge(
#     var.addons,
#     { environment = "dev" },
#     { kubernetes_version = var.kubernetes_version },
#     { aws_cluster_name = module.eks.cluster_name }
#   )

# }

# ################################################################################
# # GitOps Bridge: Bootstrap for In-Cluster
# ################################################################################
# module "gitops_bridge_bootstrap" {
#   source = "github.com/gitops-bridge-dev/gitops-bridge-argocd-bootstrap-terraform?ref=v2.0.0"

#   cluster = {
#     metadata = local.cluster_metadata
#     addons   = local.cluster_labels
#   }
#   #apps       = local.argocd_apps
#   argocd = {
#     create_namespace = false
#     set = [
#       {
#         name  = "server.service.type"
#         value = "LoadBalancer"
#       }
#     ]
#     set_sensitive = [
#       {
#         name  = "configs.secret.argocdServerAdminPassword"
#         value = bcrypt_hash.argo.id
#       }
#     ]
#   }
#   depends_on = [module.eks_blueprints_addons, kubernetes_namespace.argocd, kubernetes_secret.git_secrets]
# }

# ################################################################################
# # GitOps Bridge: Bootstrap for Apps
# ################################################################################
# module "argocd" {
#   source = "./modules/argocd-bootstrap"

#   count = var.enable_gitops_auto_bootstrap ? 1 : 0

#   addons = {
#     repo_url        = "${var.gitops_addons_org}/${var.gitops_addons_repo}"
#     path            = "${var.gitops_addons_basepath}${var.gitops_addons_path}"
#     target_revision = var.gitops_addons_revision
#   }
#   workloads = {
#     repo_url        = "${var.gitops_workload_org}/${var.gitops_workload_repo}"
#     path            = "${var.gitops_workload_basepath}bootstrap/workloads"
#     target_revision = var.gitops_addons_revision
#   }
#   depends_on = [module.gitops_bridge_bootstrap]
# }