locals { cluster_name = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" master_autoscaling_group_ids = [aws_autoscaling_group.master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] master_security_group_ids = [aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] masters_role_arn = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.arn masters_role_name = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.name node_autoscaling_group_ids = [aws_autoscaling_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] node_security_group_ids = [aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] node_subnet_ids = [aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] nodes_role_arn = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.arn nodes_role_name = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.name region = "us-test-1" route_table_public_id = aws_route_table.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id subnet_us-test-1a_id = aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id vpc_cidr_block = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.cidr_block vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id vpc_ipv6_cidr_block = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.ipv6_cidr_block vpc_ipv6_cidr_length = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0]) } output "cluster_name" { value = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" } output "master_autoscaling_group_ids" { value = [aws_autoscaling_group.master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } output "master_security_group_ids" { value = [aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } output "masters_role_arn" { value = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.arn } output "masters_role_name" { value = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.name } output "node_autoscaling_group_ids" { value = [aws_autoscaling_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } output "node_security_group_ids" { value = [aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } output "node_subnet_ids" { value = [aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } output "nodes_role_arn" { value = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.arn } output "nodes_role_name" { value = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.name } output "region" { value = "us-test-1" } output "route_table_public_id" { value = aws_route_table.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } output "subnet_us-test-1a_id" { value = aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } output "vpc_cidr_block" { value = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.cidr_block } output "vpc_id" { value = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } output "vpc_ipv6_cidr_block" { value = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.ipv6_cidr_block } output "vpc_ipv6_cidr_length" { value = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0]) } provider "aws" { region = "us-test-1" } provider "aws" { alias = "files" region = "us-test-1" } resource "aws_autoscaling_group" "master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"] launch_template { id = aws_launch_template.master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id version = aws_launch_template.master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.latest_version } max_instance_lifetime = 0 max_size = 1 metrics_granularity = "1Minute" min_size = 1 name = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" protect_from_scale_in = false tag { key = "KubernetesCluster" propagate_at_launch = true value = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" } tag { key = "Name" propagate_at_launch = true value = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" } tag { key = "aws-node-termination-handler/managed" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" propagate_at_launch = true value = "" } tag { key = "k8s.io/role/control-plane" propagate_at_launch = true value = "1" } tag { key = "k8s.io/role/master" propagate_at_launch = true value = "1" } tag { key = "kops.k8s.io/instancegroup" propagate_at_launch = true value = "master-us-test-1a" } tag { key = "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" propagate_at_launch = true value = "owned" } vpc_zone_identifier = [aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } resource "aws_autoscaling_group" "nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"] launch_template { id = aws_launch_template.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id version = aws_launch_template.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.latest_version } max_instance_lifetime = 0 max_size = 2 metrics_granularity = "1Minute" min_size = 2 name = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" protect_from_scale_in = false tag { key = "KubernetesCluster" propagate_at_launch = true value = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" } tag { key = "Name" propagate_at_launch = true value = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" } tag { key = "aws-node-termination-handler/managed" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" propagate_at_launch = true value = "" } tag { key = "k8s.io/role/node" propagate_at_launch = true value = "1" } tag { key = "kops.k8s.io/instancegroup" propagate_at_launch = true value = "nodes" } tag { key = "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" propagate_at_launch = true value = "owned" } vpc_zone_identifier = [aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } resource "aws_autoscaling_lifecycle_hook" "master-us-test-1a-NTHLifecycleHook" { autoscaling_group_name = aws_autoscaling_group.master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id default_result = "CONTINUE" heartbeat_timeout = 300 lifecycle_transition = "autoscaling:EC2_INSTANCE_TERMINATING" name = "master-us-test-1a-NTHLifecycleHook" } resource "aws_autoscaling_lifecycle_hook" "nodes-NTHLifecycleHook" { autoscaling_group_name = aws_autoscaling_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id default_result = "CONTINUE" heartbeat_timeout = 300 lifecycle_transition = "autoscaling:EC2_INSTANCE_TERMINATING" name = "nodes-NTHLifecycleHook" } resource "aws_cloudwatch_event_rule" "this-is-truly-a-really-really-lon-q0amkq-ASGLifecycle" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_this.is.truly.a.really.really.lon-q0amkq-ASGLifecycle_event_pattern") name = "this.is.truly.a.really.really.lon-q0amkq-ASGLifecycle" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.lon-q0amkq-ASGLifecycle" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "this-is-truly-a-really-really-lon-q0amkq-InstanceScheduledChange" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_this.is.truly.a.really.really.lon-q0amkq-InstanceScheduledChange_event_pattern") name = "this.is.truly.a.really.really.lon-q0amkq-InstanceScheduledChange" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.lon-q0amkq-InstanceScheduledChange" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "this-is-truly-a-really-really-lon-q0amkq-InstanceStateChange" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_this.is.truly.a.really.really.lon-q0amkq-InstanceStateChange_event_pattern") name = "this.is.truly.a.really.really.lon-q0amkq-InstanceStateChange" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.lon-q0amkq-InstanceStateChange" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "this-is-truly-a-really-really-lon-q0amkq-SpotInterruption" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_this.is.truly.a.really.really.lon-q0amkq-SpotInterruption_event_pattern") name = "this.is.truly.a.really.really.lon-q0amkq-SpotInterruption" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.lon-q0amkq-SpotInterruption" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_cloudwatch_event_target" "this-is-truly-a-really-really-lon-q0amkq-ASGLifecycle-Target" { arn = aws_sqs_queue.this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth.arn rule = aws_cloudwatch_event_rule.this-is-truly-a-really-really-lon-q0amkq-ASGLifecycle.id } resource "aws_cloudwatch_event_target" "this-is-truly-a-really-really-lon-q0amkq-InstanceScheduledChange-Target" { arn = aws_sqs_queue.this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth.arn rule = aws_cloudwatch_event_rule.this-is-truly-a-really-really-lon-q0amkq-InstanceScheduledChange.id } resource "aws_cloudwatch_event_target" "this-is-truly-a-really-really-lon-q0amkq-InstanceStateChange-Target" { arn = aws_sqs_queue.this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth.arn rule = aws_cloudwatch_event_rule.this-is-truly-a-really-really-lon-q0amkq-InstanceStateChange.id } resource "aws_cloudwatch_event_target" "this-is-truly-a-really-really-lon-q0amkq-SpotInterruption-Target" { arn = aws_sqs_queue.this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth.arn rule = aws_cloudwatch_event_rule.this-is-truly-a-really-really-lon-q0amkq-SpotInterruption.id } resource "aws_ebs_volume" "us-test-1a-etcd-events-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { availability_zone = "us-test-1a" encrypted = false iops = 3000 size = 20 tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "us-test-1a.etcd-events.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "k8s.io/etcd/events" = "us-test-1a/us-test-1a" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } throughput = 125 type = "gp3" } resource "aws_ebs_volume" "us-test-1a-etcd-main-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { availability_zone = "us-test-1a" encrypted = false iops = 3000 size = 20 tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "us-test-1a.etcd-main.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "k8s.io/etcd/main" = "us-test-1a/us-test-1a" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } throughput = 125 type = "gp3" } resource "aws_iam_instance_profile" "masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9" { name = "masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9" role = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.name tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_iam_instance_profile" "nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9" { name = "nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9" role = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.name tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_iam_role" "masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9" { assume_role_policy = file("${path.module}/data/aws_iam_role_masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9_policy") name = "masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_iam_role" "nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9" { assume_role_policy = file("${path.module}/data/aws_iam_role_nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9_policy") name = "nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_iam_role_policy" "masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9" { name = "masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9" policy = file("${path.module}/data/aws_iam_role_policy_masters.this.is.truly.a.really.really.long.cluster-name.m-kaamp9_policy") role = aws_iam_role.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.name } resource "aws_iam_role_policy" "nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9" { name = "nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9" policy = file("${path.module}/data/aws_iam_role_policy_nodes.this.is.truly.a.really.really.long.cluster-name.min-h1jir9_policy") role = aws_iam_role.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.name } resource "aws_internet_gateway" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_key_pair" "kubernetes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157" { key_name = "kubernetes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com-c4:a6:ed:9a:a8:89:b9:e2:c3:9c:d6:63:eb:9c:71:57" public_key = file("${path.module}/data/aws_key_pair_kubernetes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key") tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_launch_template" "master-us-test-1a-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { block_device_mappings { device_name = "/dev/xvda" ebs { delete_on_termination = true encrypted = true iops = 3000 throughput = 125 volume_size = 64 volume_type = "gp3" } } block_device_mappings { device_name = "/dev/sdc" virtual_name = "ephemeral0" } iam_instance_profile { name = aws_iam_instance_profile.masters-this-is-truly-a-really-really-long-cluster-name-m-kaamp9.id } image_id = "ami-12345678" instance_type = "m3.medium" key_name = aws_key_pair.kubernetes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id lifecycle { create_before_destroy = true } metadata_options { http_endpoint = "enabled" http_protocol_ipv6 = "disabled" http_put_response_hop_limit = 1 http_tokens = "required" } monitoring { enabled = false } name = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" network_interfaces { associate_public_ip_address = true delete_on_termination = true ipv6_address_count = 0 security_groups = [aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } tag_specifications { resource_type = "instance" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } tag_specifications { resource_type = "volume" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } user_data = filebase64("${path.module}/data/aws_launch_template_master-us-test-1a.masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com_user_data") } resource "aws_launch_template" "nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { block_device_mappings { device_name = "/dev/xvda" ebs { delete_on_termination = true encrypted = true iops = 3000 throughput = 125 volume_size = 128 volume_type = "gp3" } } iam_instance_profile { name = aws_iam_instance_profile.nodes-this-is-truly-a-really-really-long-cluster-name-min-h1jir9.id } image_id = "ami-12345678" instance_type = "t2.medium" key_name = aws_key_pair.kubernetes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id lifecycle { create_before_destroy = true } metadata_options { http_endpoint = "enabled" http_protocol_ipv6 = "disabled" http_put_response_hop_limit = 1 http_tokens = "required" } monitoring { enabled = false } name = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" network_interfaces { associate_public_ip_address = true delete_on_termination = true ipv6_address_count = 0 security_groups = [aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id] } tag_specifications { resource_type = "instance" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } tag_specifications { resource_type = "volume" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } user_data = filebase64("${path.module}/data/aws_launch_template_nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com_user_data") } resource "aws_route" "route-0-0-0-0--0" { destination_cidr_block = "0.0.0.0/0" gateway_id = aws_internet_gateway.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id route_table_id = aws_route_table.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_route" "route-__--0" { destination_ipv6_cidr_block = "::/0" gateway_id = aws_internet_gateway.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id route_table_id = aws_route_table.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_route_table" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" "kubernetes.io/kops/role" = "public" } vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_route_table_association" "us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { route_table_id = aws_route_table.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id subnet_id = aws_subnet.us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_s3_object" "cluster-completed-spec" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_cluster-completed.spec_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/cluster-completed.spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "etcd-cluster-spec-events" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-events_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/backups/etcd/events/control/etcd-cluster-spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "etcd-cluster-spec-main" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-main_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/backups/etcd/main/control/etcd-cluster-spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "kops-version-txt" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_kops-version.txt_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/kops-version.txt" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-etcdmanager-events-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/manifests/etcd/events-master-us-test-1a.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-etcdmanager-main-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/manifests/etcd/main-master-us-test-1a.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-static-kube-apiserver-healthcheck" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/manifests/static/kube-apiserver-healthcheck.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "nodeupconfig-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_nodeupconfig-master-us-test-1a_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/igconfig/control-plane/master-us-test-1a/nodeupconfig.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "nodeupconfig-nodes" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_nodeupconfig-nodes_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/igconfig/node/nodes/nodeupconfig.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-aws-cloud-controller-addons-k8s-io-k8s-1-18" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-aws-ebs-csi-driver-addons-k8s-io-k8s-1-17" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-bootstrap" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/bootstrap-channel.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-coredns-addons-k8s-io-k8s-1-12" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/coredns.addons.k8s.io/k8s-1.12.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-dns-controller-addons-k8s-io-k8s-1-12" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/dns-controller.addons.k8s.io/k8s-1.12.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-kops-controller-addons-k8s-io-k8s-1-16" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/kops-controller.addons.k8s.io/k8s-1.16.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-kubelet-api-rbac-addons-k8s-io-k8s-1-9" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/kubelet-api.rbac.addons.k8s.io/k8s-1.9.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-limit-range-addons-k8s-io" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-limit-range.addons.k8s.io_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/limit-range.addons.k8s.io/v1.5.0.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-node-termination-handler-aws-k8s-1-11" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-node-termination-handler.aws-k8s-1.11_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/node-termination-handler.aws/k8s-1.11.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-addons-storage-aws-addons-k8s-io-v1-15-0" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content") key = "clusters.example.com/this.is.truly.a.really.really.long.cluster-name.minimal.example.com/addons/storage-aws.addons.k8s.io/v1.15.0.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_security_group" "masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { description = "Security group for masters" name = "masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "masters.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_security_group" "nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { description = "Security group for nodes" name = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "nodes.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-22to22-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { cidr_blocks = ["0.0.0.0/0"] from_port = 22 protocol = "tcp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-22to22-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { cidr_blocks = ["0.0.0.0/0"] from_port = 22 protocol = "tcp" security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-443to443-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { cidr_blocks = ["0.0.0.0/0"] from_port = 443 protocol = "tcp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 443 type = "ingress" } resource "aws_security_group_rule" "from-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-all-0to0-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-all-0to0-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-all-0to0-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-tcp-1to2379-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 1 protocol = "tcp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 2379 type = "ingress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-tcp-2382to4000-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 2382 protocol = "tcp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 4000 type = "ingress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-tcp-4003to65535-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 4003 protocol = "tcp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 65535 type = "ingress" } resource "aws_security_group_rule" "from-nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com-ingress-udp-1to65535-masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { from_port = 1 protocol = "udp" security_group_id = aws_security_group.masters-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id source_security_group_id = aws_security_group.nodes-this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id to_port = 65535 type = "ingress" } resource "aws_sqs_queue" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth" { message_retention_seconds = 300 name = "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth" policy = file("${path.module}/data/aws_sqs_queue_this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth_policy") tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this-is-truly-a-really-really-long-cluster-name-minimal-example-com-nth" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_subnet" "us-test-1a-this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { availability_zone = "us-test-1a" cidr_block = "172.20.32.0/19" enable_resource_name_dns_a_record_on_launch = true private_dns_hostname_type_on_launch = "resource-name" tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "us-test-1a.this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "SubnetType" = "Public" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" "kubernetes.io/role/elb" = "1" "kubernetes.io/role/internal-elb" = "1" } vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } resource "aws_vpc" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { assign_generated_ipv6_cidr_block = true cidr_block = "172.20.0.0/16" enable_dns_hostnames = true enable_dns_support = true tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_vpc_dhcp_options" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { domain_name = "us-test-1.compute.internal" domain_name_servers = ["AmazonProvidedDNS"] tags = { "KubernetesCluster" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "Name" = "this.is.truly.a.really.really.long.cluster-name.minimal.example.com" "kubernetes.io/cluster/this.is.truly.a.really.really.long.cluster-name.minimal.example.com" = "owned" } } resource "aws_vpc_dhcp_options_association" "this-is-truly-a-really-really-long-cluster-name-minimal-example-com" { dhcp_options_id = aws_vpc_dhcp_options.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id vpc_id = aws_vpc.this-is-truly-a-really-really-long-cluster-name-minimal-example-com.id } terraform { required_version = ">= 0.15.0" required_providers { aws = { "configuration_aliases" = [aws.files] "source" = "hashicorp/aws" "version" = ">= 5.0.0" } } }