terraform-aws-eks-external-secrets

Terraform module for deploying kubernetes-external-secrets, this enables to use AWS Secrets Manager and SSM Parameters inside a pre-existing EKS cluster.

Usage

module "external_secrets" {
  source = "git::https://github.com/DNXLabs/terraform-aws-eks-external-secrets.git"

  enabled = true

  cluster_name                     = module.eks_cluster.cluster_id
  cluster_identity_oidc_issuer     = module.eks_cluster.cluster_oidc_issuer_url
  cluster_identity_oidc_issuer_arn = module.eks_cluster.oidc_provider_arn
  secrets_aws_region               = data.aws_region.current.name
}

Requirements

Name	Version
terraform	>= 0.13
aws	>= 3.13, < 4.0
helm	>= 1.0, < 1.4.0
kubernetes	>= 1.10.0

Providers

Name	Version
aws	>= 3.13, < 4.0
helm	>= 1.0, < 1.4.0
kubernetes	>= 1.10.0

Inputs

Name	Description	Type	Default	Required
cluster_identity_oidc_issuer	The OIDC Identity issuer for the cluster.	string	n/a	yes
cluster_identity_oidc_issuer_arn	The OIDC Identity issuer ARN for the cluster that can be used to associate IAM roles with a service account.	string	n/a	yes
cluster_name	The name of the cluster	string	n/a	yes
create_namespace	Whether to create k8s namespace with name defined by namespace	bool	true	no
enabled	n/a	bool	true	no
helm_chart_name	External Secrets chart name.	string	"kubernetes-external-secrets"	no
helm_chart_release_name	External Secrets release name.	string	"kubernetes-external-secrets"	no
helm_chart_repo	External Secrets repository name.	string	"https://external-secrets.github.io/kubernetes-external-secrets/"	no
helm_chart_version	External Secrets chart version.	string	"6.1.0"	no
mod_dependency	Dependence variable binds all AWS resources allocated by this module, dependent modules reference this variable	any	null	no
namespace	Kubernetes namespace to deploy EKS Spot termination handler Helm chart.	string	"kube-external-secrets"	no
secrets_aws_region	AWS region where secrets are stored.	string	n/a	yes
service_account_name	External Secrets service account name	string	"external-secrets"	no
settings	Additional settings which will be passed to the Helm chart values, see https://github.com/external-secrets/kubernetes-external-secrets/tree/master/charts/kubernetes-external-secrets	map(any)	{}	no

Outputs

No output.

Authors

Module managed by DNX Solutions.

License

Apache 2 Licensed. See LICENSE for full details.