3c6b1480b8
Rewrote AWS Terraform deployment for AWS Kargo. It supports now multiple Availability Zones, AWS Loadbalancer for Kubernetes API, Bastion Host, ... For more information see README
51 lines
1.2 KiB
HCL
51 lines
1.2 KiB
HCL
resource "aws_security_group" "aws-elb" {
|
|
name = "kubernetes-${var.aws_cluster_name}-securitygroup-elb"
|
|
vpc_id = "${var.aws_vpc_id}"
|
|
|
|
tags {
|
|
Name = "kubernetes-${var.aws_cluster_name}-securitygroup-elb"
|
|
}
|
|
}
|
|
|
|
|
|
resource "aws_security_group_rule" "aws-allow-api-access" {
|
|
type = "ingress"
|
|
from_port = "${var.aws_elb_api_port}"
|
|
to_port = "${var.k8s_secure_api_port}"
|
|
protocol = "TCP"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
security_group_id = "${aws_security_group.aws-elb.id}"
|
|
}
|
|
|
|
|
|
# Create a new AWS ELB for K8S API
|
|
resource "aws_elb" "aws-elb-api" {
|
|
name = "kubernetes-elb-${var.aws_cluster_name}"
|
|
subnets = ["${var.aws_subnet_ids_public}"]
|
|
security_groups = ["${aws_security_group.aws-elb.id}"]
|
|
|
|
listener {
|
|
instance_port = "${var.k8s_secure_api_port}"
|
|
instance_protocol = "tcp"
|
|
lb_port = "${var.aws_elb_api_port}"
|
|
lb_protocol = "tcp"
|
|
}
|
|
|
|
health_check {
|
|
healthy_threshold = 2
|
|
unhealthy_threshold = 2
|
|
timeout = 3
|
|
target = "HTTP:8080/"
|
|
interval = 30
|
|
}
|
|
|
|
cross_zone_load_balancing = true
|
|
idle_timeout = 400
|
|
connection_draining = true
|
|
connection_draining_timeout = 400
|
|
|
|
tags {
|
|
Name = "kubernetes-${var.aws_cluster_name}-elb-api"
|
|
}
|
|
}
|