locals { bastion_autoscaling_group_ids = [aws_autoscaling_group.bastion-unmanaged-example-com.id] bastion_security_group_ids = [aws_security_group.bastion-unmanaged-example-com.id] bastions_role_arn = aws_iam_role.bastions-unmanaged-example-com.arn bastions_role_name = aws_iam_role.bastions-unmanaged-example-com.name cluster_name = "unmanaged.example.com" master_autoscaling_group_ids = [aws_autoscaling_group.master-us-test-1a-masters-unmanaged-example-com.id] master_security_group_ids = [aws_security_group.masters-unmanaged-example-com.id] masters_role_arn = aws_iam_role.masters-unmanaged-example-com.arn masters_role_name = aws_iam_role.masters-unmanaged-example-com.name node_autoscaling_group_ids = [aws_autoscaling_group.nodes-unmanaged-example-com.id] node_security_group_ids = [aws_security_group.nodes-unmanaged-example-com.id] node_subnet_ids = [aws_subnet.us-test-1a-unmanaged-example-com.id, aws_subnet.us-test-1b-unmanaged-example-com.id] nodes_role_arn = aws_iam_role.nodes-unmanaged-example-com.arn nodes_role_name = aws_iam_role.nodes-unmanaged-example-com.name region = "us-test-1" subnet_us-test-1a_id = aws_subnet.us-test-1a-unmanaged-example-com.id subnet_us-test-1b_id = aws_subnet.us-test-1b-unmanaged-example-com.id subnet_utility-us-test-1a_id = aws_subnet.utility-us-test-1a-unmanaged-example-com.id subnet_utility-us-test-1b_id = aws_subnet.utility-us-test-1b-unmanaged-example-com.id vpc_cidr_block = data.aws_vpc.unmanaged-example-com.cidr_block vpc_id = "vpc-12345678" vpc_ipv6_cidr_block = data.aws_vpc.unmanaged-example-com.ipv6_cidr_block vpc_ipv6_cidr_length = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0]) } output "bastion_autoscaling_group_ids" { value = [aws_autoscaling_group.bastion-unmanaged-example-com.id] } output "bastion_security_group_ids" { value = [aws_security_group.bastion-unmanaged-example-com.id] } output "bastions_role_arn" { value = aws_iam_role.bastions-unmanaged-example-com.arn } output "bastions_role_name" { value = aws_iam_role.bastions-unmanaged-example-com.name } output "cluster_name" { value = "unmanaged.example.com" } output "master_autoscaling_group_ids" { value = [aws_autoscaling_group.master-us-test-1a-masters-unmanaged-example-com.id] } output "master_security_group_ids" { value = [aws_security_group.masters-unmanaged-example-com.id] } output "masters_role_arn" { value = aws_iam_role.masters-unmanaged-example-com.arn } output "masters_role_name" { value = aws_iam_role.masters-unmanaged-example-com.name } output "node_autoscaling_group_ids" { value = [aws_autoscaling_group.nodes-unmanaged-example-com.id] } output "node_security_group_ids" { value = [aws_security_group.nodes-unmanaged-example-com.id] } output "node_subnet_ids" { value = [aws_subnet.us-test-1a-unmanaged-example-com.id, aws_subnet.us-test-1b-unmanaged-example-com.id] } output "nodes_role_arn" { value = aws_iam_role.nodes-unmanaged-example-com.arn } output "nodes_role_name" { value = aws_iam_role.nodes-unmanaged-example-com.name } output "region" { value = "us-test-1" } output "subnet_us-test-1a_id" { value = aws_subnet.us-test-1a-unmanaged-example-com.id } output "subnet_us-test-1b_id" { value = aws_subnet.us-test-1b-unmanaged-example-com.id } output "subnet_utility-us-test-1a_id" { value = aws_subnet.utility-us-test-1a-unmanaged-example-com.id } output "subnet_utility-us-test-1b_id" { value = aws_subnet.utility-us-test-1b-unmanaged-example-com.id } output "vpc_cidr_block" { value = data.aws_vpc.unmanaged-example-com.cidr_block } output "vpc_id" { value = "vpc-12345678" } output "vpc_ipv6_cidr_block" { value = data.aws_vpc.unmanaged-example-com.ipv6_cidr_block } output "vpc_ipv6_cidr_length" { value = local.vpc_ipv6_cidr_block == "" ? null : tonumber(regex(".*/(\\d+)", local.vpc_ipv6_cidr_block)[0]) } provider "aws" { region = "us-test-1" } provider "aws" { alias = "files" region = "us-test-1" } resource "aws_autoscaling_group" "bastion-unmanaged-example-com" { enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"] launch_template { id = aws_launch_template.bastion-unmanaged-example-com.id version = aws_launch_template.bastion-unmanaged-example-com.latest_version } max_instance_lifetime = 0 max_size = 1 metrics_granularity = "1Minute" min_size = 1 name = "bastion.unmanaged.example.com" protect_from_scale_in = false tag { key = "KubernetesCluster" propagate_at_launch = true value = "unmanaged.example.com" } tag { key = "Name" propagate_at_launch = true value = "bastion.unmanaged.example.com" } tag { key = "aws-node-termination-handler/managed" propagate_at_launch = true value = "" } tag { key = "k8s.io/role/bastion" propagate_at_launch = true value = "1" } tag { key = "kops.k8s.io/instancegroup" propagate_at_launch = true value = "bastion" } tag { key = "kubernetes.io/cluster/unmanaged.example.com" propagate_at_launch = true value = "owned" } target_group_arns = [aws_lb_target_group.bastion-unmanaged-example-d7bn3d.id] vpc_zone_identifier = [aws_subnet.utility-us-test-1a-unmanaged-example-com.id] } resource "aws_autoscaling_group" "master-us-test-1a-masters-unmanaged-example-com" { enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"] launch_template { id = aws_launch_template.master-us-test-1a-masters-unmanaged-example-com.id version = aws_launch_template.master-us-test-1a-masters-unmanaged-example-com.latest_version } load_balancers = [aws_elb.api-unmanaged-example-com.id] max_instance_lifetime = 0 max_size = 1 metrics_granularity = "1Minute" min_size = 1 name = "master-us-test-1a.masters.unmanaged.example.com" protect_from_scale_in = false tag { key = "KubernetesCluster" propagate_at_launch = true value = "unmanaged.example.com" } tag { key = "Name" propagate_at_launch = true value = "master-us-test-1a.masters.unmanaged.example.com" } tag { key = "aws-node-termination-handler/managed" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" propagate_at_launch = true value = "" } tag { key = "k8s.io/role/control-plane" propagate_at_launch = true value = "1" } tag { key = "k8s.io/role/master" propagate_at_launch = true value = "1" } tag { key = "kops.k8s.io/instancegroup" propagate_at_launch = true value = "master-us-test-1a" } tag { key = "kubernetes.io/cluster/unmanaged.example.com" propagate_at_launch = true value = "owned" } vpc_zone_identifier = [aws_subnet.us-test-1a-unmanaged-example-com.id] } resource "aws_autoscaling_group" "nodes-unmanaged-example-com" { enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"] launch_template { id = aws_launch_template.nodes-unmanaged-example-com.id version = aws_launch_template.nodes-unmanaged-example-com.latest_version } max_instance_lifetime = 0 max_size = 2 metrics_granularity = "1Minute" min_size = 2 name = "nodes.unmanaged.example.com" protect_from_scale_in = false tag { key = "KubernetesCluster" propagate_at_launch = true value = "unmanaged.example.com" } tag { key = "Name" propagate_at_launch = true value = "nodes.unmanaged.example.com" } tag { key = "aws-node-termination-handler/managed" propagate_at_launch = true value = "" } tag { key = "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" propagate_at_launch = true value = "" } tag { key = "k8s.io/role/node" propagate_at_launch = true value = "1" } tag { key = "kops.k8s.io/instancegroup" propagate_at_launch = true value = "nodes" } tag { key = "kubernetes.io/cluster/unmanaged.example.com" propagate_at_launch = true value = "owned" } vpc_zone_identifier = [aws_subnet.us-test-1a-unmanaged-example-com.id, aws_subnet.us-test-1b-unmanaged-example-com.id] } resource "aws_autoscaling_lifecycle_hook" "bastion-NTHLifecycleHook" { autoscaling_group_name = aws_autoscaling_group.bastion-unmanaged-example-com.id default_result = "CONTINUE" heartbeat_timeout = 300 lifecycle_transition = "autoscaling:EC2_INSTANCE_TERMINATING" name = "bastion-NTHLifecycleHook" } resource "aws_autoscaling_lifecycle_hook" "master-us-test-1a-NTHLifecycleHook" { autoscaling_group_name = aws_autoscaling_group.master-us-test-1a-masters-unmanaged-example-com.id default_result = "CONTINUE" heartbeat_timeout = 300 lifecycle_transition = "autoscaling:EC2_INSTANCE_TERMINATING" name = "master-us-test-1a-NTHLifecycleHook" } resource "aws_autoscaling_lifecycle_hook" "nodes-NTHLifecycleHook" { autoscaling_group_name = aws_autoscaling_group.nodes-unmanaged-example-com.id default_result = "CONTINUE" heartbeat_timeout = 300 lifecycle_transition = "autoscaling:EC2_INSTANCE_TERMINATING" name = "nodes-NTHLifecycleHook" } resource "aws_cloudwatch_event_rule" "unmanaged-example-com-ASGLifecycle" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_unmanaged.example.com-ASGLifecycle_event_pattern") name = "unmanaged.example.com-ASGLifecycle" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged.example.com-ASGLifecycle" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "unmanaged-example-com-InstanceScheduledChange" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_unmanaged.example.com-InstanceScheduledChange_event_pattern") name = "unmanaged.example.com-InstanceScheduledChange" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged.example.com-InstanceScheduledChange" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "unmanaged-example-com-InstanceStateChange" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_unmanaged.example.com-InstanceStateChange_event_pattern") name = "unmanaged.example.com-InstanceStateChange" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged.example.com-InstanceStateChange" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_cloudwatch_event_rule" "unmanaged-example-com-SpotInterruption" { event_pattern = file("${path.module}/data/aws_cloudwatch_event_rule_unmanaged.example.com-SpotInterruption_event_pattern") name = "unmanaged.example.com-SpotInterruption" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged.example.com-SpotInterruption" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_cloudwatch_event_target" "unmanaged-example-com-ASGLifecycle-Target" { arn = aws_sqs_queue.unmanaged-example-com-nth.arn rule = aws_cloudwatch_event_rule.unmanaged-example-com-ASGLifecycle.id } resource "aws_cloudwatch_event_target" "unmanaged-example-com-InstanceScheduledChange-Target" { arn = aws_sqs_queue.unmanaged-example-com-nth.arn rule = aws_cloudwatch_event_rule.unmanaged-example-com-InstanceScheduledChange.id } resource "aws_cloudwatch_event_target" "unmanaged-example-com-InstanceStateChange-Target" { arn = aws_sqs_queue.unmanaged-example-com-nth.arn rule = aws_cloudwatch_event_rule.unmanaged-example-com-InstanceStateChange.id } resource "aws_cloudwatch_event_target" "unmanaged-example-com-SpotInterruption-Target" { arn = aws_sqs_queue.unmanaged-example-com-nth.arn rule = aws_cloudwatch_event_rule.unmanaged-example-com-SpotInterruption.id } resource "aws_ebs_volume" "us-test-1a-etcd-events-unmanaged-example-com" { availability_zone = "us-test-1a" encrypted = false iops = 3000 size = 20 tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "us-test-1a.etcd-events.unmanaged.example.com" "k8s.io/etcd/events" = "us-test-1a/us-test-1a" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } throughput = 125 type = "gp3" } resource "aws_ebs_volume" "us-test-1a-etcd-main-unmanaged-example-com" { availability_zone = "us-test-1a" encrypted = false iops = 3000 size = 20 tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "us-test-1a.etcd-main.unmanaged.example.com" "k8s.io/etcd/main" = "us-test-1a/us-test-1a" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } throughput = 125 type = "gp3" } resource "aws_elb" "api-unmanaged-example-com" { connection_draining = true connection_draining_timeout = 300 cross_zone_load_balancing = false health_check { healthy_threshold = 2 interval = 10 target = "SSL:443" timeout = 5 unhealthy_threshold = 2 } idle_timeout = 300 listener { instance_port = 443 instance_protocol = "TCP" lb_port = 443 lb_protocol = "TCP" } name = "api-unmanaged-example-com-t82m6f" security_groups = [aws_security_group.api-elb-unmanaged-example-com.id] subnets = [aws_subnet.utility-us-test-1a-unmanaged-example-com.id, aws_subnet.utility-us-test-1b-unmanaged-example-com.id] tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "api.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_instance_profile" "bastions-unmanaged-example-com" { name = "bastions.unmanaged.example.com" role = aws_iam_role.bastions-unmanaged-example-com.name tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastions.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_instance_profile" "masters-unmanaged-example-com" { name = "masters.unmanaged.example.com" role = aws_iam_role.masters-unmanaged-example-com.name tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "masters.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_instance_profile" "nodes-unmanaged-example-com" { name = "nodes.unmanaged.example.com" role = aws_iam_role.nodes-unmanaged-example-com.name tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_role" "bastions-unmanaged-example-com" { assume_role_policy = file("${path.module}/data/aws_iam_role_bastions.unmanaged.example.com_policy") name = "bastions.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastions.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_role" "masters-unmanaged-example-com" { assume_role_policy = file("${path.module}/data/aws_iam_role_masters.unmanaged.example.com_policy") name = "masters.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "masters.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_role" "nodes-unmanaged-example-com" { assume_role_policy = file("${path.module}/data/aws_iam_role_nodes.unmanaged.example.com_policy") name = "nodes.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_iam_role_policy" "bastions-unmanaged-example-com" { name = "bastions.unmanaged.example.com" policy = file("${path.module}/data/aws_iam_role_policy_bastions.unmanaged.example.com_policy") role = aws_iam_role.bastions-unmanaged-example-com.name } resource "aws_iam_role_policy" "masters-unmanaged-example-com" { name = "masters.unmanaged.example.com" policy = file("${path.module}/data/aws_iam_role_policy_masters.unmanaged.example.com_policy") role = aws_iam_role.masters-unmanaged-example-com.name } resource "aws_iam_role_policy" "nodes-unmanaged-example-com" { name = "nodes.unmanaged.example.com" policy = file("${path.module}/data/aws_iam_role_policy_nodes.unmanaged.example.com_policy") role = aws_iam_role.nodes-unmanaged-example-com.name } resource "aws_key_pair" "kubernetes-unmanaged-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157" { key_name = "kubernetes.unmanaged.example.com-c4:a6:ed:9a:a8:89:b9:e2:c3:9c:d6:63:eb:9c:71:57" public_key = file("${path.module}/data/aws_key_pair_kubernetes.unmanaged.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key") tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_launch_template" "bastion-unmanaged-example-com" { block_device_mappings { device_name = "/dev/xvda" ebs { delete_on_termination = true encrypted = true iops = 3000 throughput = 125 volume_size = 32 volume_type = "gp3" } } iam_instance_profile { name = aws_iam_instance_profile.bastions-unmanaged-example-com.id } image_id = "ami-12345678" instance_type = "t2.micro" key_name = aws_key_pair.kubernetes-unmanaged-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id lifecycle { create_before_destroy = true } metadata_options { http_endpoint = "enabled" http_protocol_ipv6 = "disabled" http_put_response_hop_limit = 1 http_tokens = "required" } monitoring { enabled = false } name = "bastion.unmanaged.example.com" network_interfaces { associate_public_ip_address = true delete_on_termination = true ipv6_address_count = 0 security_groups = [aws_security_group.bastion-unmanaged-example-com.id] } tag_specifications { resource_type = "instance" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/role/bastion" = "1" "kops.k8s.io/instancegroup" = "bastion" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tag_specifications { resource_type = "volume" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/role/bastion" = "1" "kops.k8s.io/instancegroup" = "bastion" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/role/bastion" = "1" "kops.k8s.io/instancegroup" = "bastion" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_launch_template" "master-us-test-1a-masters-unmanaged-example-com" { block_device_mappings { device_name = "/dev/xvda" ebs { delete_on_termination = true encrypted = true iops = 3000 throughput = 125 volume_size = 64 volume_type = "gp3" } } block_device_mappings { device_name = "/dev/sdc" virtual_name = "ephemeral0" } iam_instance_profile { name = aws_iam_instance_profile.masters-unmanaged-example-com.id } image_id = "ami-12345678" instance_type = "m3.medium" key_name = aws_key_pair.kubernetes-unmanaged-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id lifecycle { create_before_destroy = true } metadata_options { http_endpoint = "enabled" http_protocol_ipv6 = "disabled" http_put_response_hop_limit = 1 http_tokens = "required" } monitoring { enabled = false } name = "master-us-test-1a.masters.unmanaged.example.com" network_interfaces { associate_public_ip_address = false delete_on_termination = true ipv6_address_count = 0 security_groups = [aws_security_group.masters-unmanaged-example-com.id] } tag_specifications { resource_type = "instance" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "master-us-test-1a.masters.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tag_specifications { resource_type = "volume" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "master-us-test-1a.masters.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "master-us-test-1a.masters.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/kops.k8s.io/kops-controller-pki" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/control-plane" = "" "k8s.io/cluster-autoscaler/node-template/label/node.kubernetes.io/exclude-from-external-load-balancers" = "" "k8s.io/role/control-plane" = "1" "k8s.io/role/master" = "1" "kops.k8s.io/instancegroup" = "master-us-test-1a" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } user_data = filebase64("${path.module}/data/aws_launch_template_master-us-test-1a.masters.unmanaged.example.com_user_data") } resource "aws_launch_template" "nodes-unmanaged-example-com" { block_device_mappings { device_name = "/dev/xvda" ebs { delete_on_termination = true encrypted = true iops = 3000 throughput = 125 volume_size = 128 volume_type = "gp3" } } iam_instance_profile { name = aws_iam_instance_profile.nodes-unmanaged-example-com.id } image_id = "ami-12345678" instance_type = "t2.medium" key_name = aws_key_pair.kubernetes-unmanaged-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id lifecycle { create_before_destroy = true } metadata_options { http_endpoint = "enabled" http_protocol_ipv6 = "disabled" http_put_response_hop_limit = 1 http_tokens = "required" } monitoring { enabled = false } name = "nodes.unmanaged.example.com" network_interfaces { associate_public_ip_address = false delete_on_termination = true ipv6_address_count = 0 security_groups = [aws_security_group.nodes-unmanaged-example-com.id] } tag_specifications { resource_type = "instance" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tag_specifications { resource_type = "volume" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "aws-node-termination-handler/managed" = "" "k8s.io/cluster-autoscaler/node-template/label/node-role.kubernetes.io/node" = "" "k8s.io/role/node" = "1" "kops.k8s.io/instancegroup" = "nodes" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } user_data = filebase64("${path.module}/data/aws_launch_template_nodes.unmanaged.example.com_user_data") } resource "aws_lb" "bastion-unmanaged-example-com" { enable_cross_zone_load_balancing = false internal = false load_balancer_type = "network" name = "bastion-unmanaged-example-d7bn3d" security_groups = [aws_security_group.bastion-elb-unmanaged-example-com.id] subnet_mapping { subnet_id = aws_subnet.utility-us-test-1a-unmanaged-example-com.id } subnet_mapping { subnet_id = aws_subnet.utility-us-test-1b-unmanaged-example-com.id } tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_lb_listener" "bastion-unmanaged-example-com-22" { default_action { target_group_arn = aws_lb_target_group.bastion-unmanaged-example-d7bn3d.id type = "forward" } load_balancer_arn = aws_lb.bastion-unmanaged-example-com.id port = 22 protocol = "TCP" } resource "aws_lb_target_group" "bastion-unmanaged-example-d7bn3d" { connection_termination = "true" deregistration_delay = "30" health_check { healthy_threshold = 2 interval = 10 protocol = "TCP" unhealthy_threshold = 2 } name = "bastion-unmanaged-example-d7bn3d" port = 22 protocol = "TCP" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion-unmanaged-example-d7bn3d" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_route53_record" "api-unmanaged-example-com" { alias { evaluate_target_health = false name = aws_elb.api-unmanaged-example-com.dns_name zone_id = aws_elb.api-unmanaged-example-com.zone_id } name = "api.unmanaged.example.com" type = "A" zone_id = "/hostedzone/Z1AFAKE1ZON3YO" } resource "aws_route53_record" "api-unmanaged-example-com-AAAA" { alias { evaluate_target_health = false name = aws_elb.api-unmanaged-example-com.dns_name zone_id = aws_elb.api-unmanaged-example-com.zone_id } name = "api.unmanaged.example.com" type = "AAAA" zone_id = "/hostedzone/Z1AFAKE1ZON3YO" } resource "aws_s3_object" "cluster-completed-spec" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_cluster-completed.spec_content") key = "clusters.example.com/unmanaged.example.com/cluster-completed.spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "etcd-cluster-spec-events" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-events_content") key = "clusters.example.com/unmanaged.example.com/backups/etcd/events/control/etcd-cluster-spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "etcd-cluster-spec-main" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_etcd-cluster-spec-main_content") key = "clusters.example.com/unmanaged.example.com/backups/etcd/main/control/etcd-cluster-spec" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "kops-version-txt" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_kops-version.txt_content") key = "clusters.example.com/unmanaged.example.com/kops-version.txt" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-etcdmanager-events-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-events-master-us-test-1a_content") key = "clusters.example.com/unmanaged.example.com/manifests/etcd/events-master-us-test-1a.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-etcdmanager-main-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-etcdmanager-main-master-us-test-1a_content") key = "clusters.example.com/unmanaged.example.com/manifests/etcd/main-master-us-test-1a.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "manifests-static-kube-apiserver-healthcheck" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_manifests-static-kube-apiserver-healthcheck_content") key = "clusters.example.com/unmanaged.example.com/manifests/static/kube-apiserver-healthcheck.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "nodeupconfig-master-us-test-1a" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_nodeupconfig-master-us-test-1a_content") key = "clusters.example.com/unmanaged.example.com/igconfig/control-plane/master-us-test-1a/nodeupconfig.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "nodeupconfig-nodes" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_nodeupconfig-nodes_content") key = "clusters.example.com/unmanaged.example.com/igconfig/node/nodes/nodeupconfig.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-aws-cloud-controller-addons-k8s-io-k8s-1-18" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-aws-cloud-controller.addons.k8s.io-k8s-1.18_content") key = "clusters.example.com/unmanaged.example.com/addons/aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-aws-ebs-csi-driver-addons-k8s-io-k8s-1-17" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content") key = "clusters.example.com/unmanaged.example.com/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-bootstrap" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content") key = "clusters.example.com/unmanaged.example.com/addons/bootstrap-channel.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-coredns-addons-k8s-io-k8s-1-12" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-coredns.addons.k8s.io-k8s-1.12_content") key = "clusters.example.com/unmanaged.example.com/addons/coredns.addons.k8s.io/k8s-1.12.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-dns-controller-addons-k8s-io-k8s-1-12" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-dns-controller.addons.k8s.io-k8s-1.12_content") key = "clusters.example.com/unmanaged.example.com/addons/dns-controller.addons.k8s.io/k8s-1.12.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-kops-controller-addons-k8s-io-k8s-1-16" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-kops-controller.addons.k8s.io-k8s-1.16_content") key = "clusters.example.com/unmanaged.example.com/addons/kops-controller.addons.k8s.io/k8s-1.16.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-kubelet-api-rbac-addons-k8s-io-k8s-1-9" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-kubelet-api.rbac.addons.k8s.io-k8s-1.9_content") key = "clusters.example.com/unmanaged.example.com/addons/kubelet-api.rbac.addons.k8s.io/k8s-1.9.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-limit-range-addons-k8s-io" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-limit-range.addons.k8s.io_content") key = "clusters.example.com/unmanaged.example.com/addons/limit-range.addons.k8s.io/v1.5.0.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-node-termination-handler-aws-k8s-1-11" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-node-termination-handler.aws-k8s-1.11_content") key = "clusters.example.com/unmanaged.example.com/addons/node-termination-handler.aws/k8s-1.11.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_s3_object" "unmanaged-example-com-addons-storage-aws-addons-k8s-io-v1-15-0" { bucket = "testingBucket" content = file("${path.module}/data/aws_s3_object_unmanaged.example.com-addons-storage-aws.addons.k8s.io-v1.15.0_content") key = "clusters.example.com/unmanaged.example.com/addons/storage-aws.addons.k8s.io/v1.15.0.yaml" provider = aws.files server_side_encryption = "AES256" } resource "aws_security_group" "api-elb-unmanaged-example-com" { description = "Security group for api ELB" name = "api-elb.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "api-elb.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_security_group" "bastion-elb-unmanaged-example-com" { description = "Security group for bastion ELB" name = "bastion-elb.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion-elb.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_security_group" "bastion-unmanaged-example-com" { description = "Security group for bastion" name = "bastion.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "bastion.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_security_group" "masters-unmanaged-example-com" { description = "Security group for masters" name = "masters.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "masters.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_security_group" "nodes-unmanaged-example-com" { description = "Security group for nodes" name = "nodes.unmanaged.example.com" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "nodes.unmanaged.example.com" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } vpc_id = "vpc-12345678" } resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-22to22-bastion-elb-unmanaged-example-com" { cidr_blocks = ["0.0.0.0/0"] from_port = 22 protocol = "tcp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-0-0-0-0--0-ingress-tcp-443to443-api-elb-unmanaged-example-com" { cidr_blocks = ["0.0.0.0/0"] from_port = 443 protocol = "tcp" security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 443 type = "ingress" } resource "aws_security_group_rule" "from-172-20-4-0--22-ingress-tcp-22to22-bastion-elb-unmanaged-example-com" { cidr_blocks = ["172.20.4.0/22"] from_port = 22 protocol = "tcp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-172-20-8-0--22-ingress-tcp-22to22-bastion-elb-unmanaged-example-com" { cidr_blocks = ["172.20.8.0/22"] from_port = 22 protocol = "tcp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-api-elb-unmanaged-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-api-elb-unmanaged-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-bastion-elb-unmanaged-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-bastion-elb-unmanaged-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-bastion-elb-unmanaged-example-com-ingress-icmp-3to4-bastion-unmanaged-example-com" { from_port = 3 protocol = "icmp" security_group_id = aws_security_group.bastion-unmanaged-example-com.id source_security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "from-bastion-elb-unmanaged-example-com-ingress-tcp-22to22-bastion-unmanaged-example-com" { from_port = 22 protocol = "tcp" security_group_id = aws_security_group.bastion-unmanaged-example-com.id source_security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-bastion-unmanaged-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.bastion-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-bastion-unmanaged-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.bastion-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-bastion-unmanaged-example-com-ingress-icmp-3to4-bastion-elb-unmanaged-example-com" { from_port = 3 protocol = "icmp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id source_security_group_id = aws_security_group.bastion-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "from-bastion-unmanaged-example-com-ingress-tcp-22to22-masters-unmanaged-example-com" { from_port = 22 protocol = "tcp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.bastion-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-bastion-unmanaged-example-com-ingress-tcp-22to22-nodes-unmanaged-example-com" { from_port = 22 protocol = "tcp" security_group_id = aws_security_group.nodes-unmanaged-example-com.id source_security_group_id = aws_security_group.bastion-unmanaged-example-com.id to_port = 22 type = "ingress" } resource "aws_security_group_rule" "from-masters-unmanaged-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.masters-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-masters-unmanaged-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.masters-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-masters-unmanaged-example-com-ingress-all-0to0-masters-unmanaged-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.masters-unmanaged-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-masters-unmanaged-example-com-ingress-all-0to0-nodes-unmanaged-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-unmanaged-example-com.id source_security_group_id = aws_security_group.masters-unmanaged-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-egress-all-0to0-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-egress-all-0to0-__--0" { from_port = 0 ipv6_cidr_blocks = ["::/0"] protocol = "-1" security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 0 type = "egress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-ingress-all-0to0-nodes-unmanaged-example-com" { from_port = 0 protocol = "-1" security_group_id = aws_security_group.nodes-unmanaged-example-com.id source_security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 0 type = "ingress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-ingress-tcp-1to2379-masters-unmanaged-example-com" { from_port = 1 protocol = "tcp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 2379 type = "ingress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-ingress-tcp-2382to4000-masters-unmanaged-example-com" { from_port = 2382 protocol = "tcp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 4000 type = "ingress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-ingress-tcp-4003to65535-masters-unmanaged-example-com" { from_port = 4003 protocol = "tcp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 65535 type = "ingress" } resource "aws_security_group_rule" "from-nodes-unmanaged-example-com-ingress-udp-1to65535-masters-unmanaged-example-com" { from_port = 1 protocol = "udp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.nodes-unmanaged-example-com.id to_port = 65535 type = "ingress" } resource "aws_security_group_rule" "https-elb-to-master" { from_port = 443 protocol = "tcp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 443 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-api-elb-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 3 protocol = "icmp" security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-cp-to-elb" { from_port = 3 protocol = "icmp" security_group_id = aws_security_group.api-elb-unmanaged-example-com.id source_security_group_id = aws_security_group.masters-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-elb-to-cp" { from_port = 3 protocol = "icmp" security_group_id = aws_security_group.masters-unmanaged-example-com.id source_security_group_id = aws_security_group.api-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-ssh-nlb-0-0-0-0--0" { cidr_blocks = ["0.0.0.0/0"] from_port = 3 protocol = "icmp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-ssh-nlb-172-20-4-0--22" { cidr_blocks = ["172.20.4.0/22"] from_port = 3 protocol = "icmp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_security_group_rule" "icmp-pmtu-ssh-nlb-172-20-8-0--22" { cidr_blocks = ["172.20.8.0/22"] from_port = 3 protocol = "icmp" security_group_id = aws_security_group.bastion-elb-unmanaged-example-com.id to_port = 4 type = "ingress" } resource "aws_sqs_queue" "unmanaged-example-com-nth" { message_retention_seconds = 300 name = "unmanaged-example-com-nth" policy = file("${path.module}/data/aws_sqs_queue_unmanaged-example-com-nth_policy") tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "unmanaged-example-com-nth" "kubernetes.io/cluster/unmanaged.example.com" = "owned" } } resource "aws_subnet" "us-test-1a-unmanaged-example-com" { availability_zone = "us-test-1a" cidr_block = "172.20.32.0/19" enable_resource_name_dns_a_record_on_launch = true private_dns_hostname_type_on_launch = "resource-name" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "us-test-1a.unmanaged.example.com" "SubnetType" = "Private" "kubernetes.io/cluster/unmanaged.example.com" = "owned" "kubernetes.io/role/internal-elb" = "1" } vpc_id = "vpc-12345678" } resource "aws_subnet" "us-test-1b-unmanaged-example-com" { availability_zone = "us-test-1b" cidr_block = "172.20.64.0/19" enable_resource_name_dns_a_record_on_launch = true private_dns_hostname_type_on_launch = "resource-name" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "us-test-1b.unmanaged.example.com" "SubnetType" = "Private" "kubernetes.io/cluster/unmanaged.example.com" = "owned" "kubernetes.io/role/internal-elb" = "1" } vpc_id = "vpc-12345678" } resource "aws_subnet" "utility-us-test-1a-unmanaged-example-com" { availability_zone = "us-test-1a" cidr_block = "172.20.4.0/22" enable_resource_name_dns_a_record_on_launch = true private_dns_hostname_type_on_launch = "resource-name" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "utility-us-test-1a.unmanaged.example.com" "SubnetType" = "Utility" "kubernetes.io/cluster/unmanaged.example.com" = "owned" "kubernetes.io/role/elb" = "1" } vpc_id = "vpc-12345678" } resource "aws_subnet" "utility-us-test-1b-unmanaged-example-com" { availability_zone = "us-test-1b" cidr_block = "172.20.8.0/22" enable_resource_name_dns_a_record_on_launch = true private_dns_hostname_type_on_launch = "resource-name" tags = { "KubernetesCluster" = "unmanaged.example.com" "Name" = "utility-us-test-1b.unmanaged.example.com" "SubnetType" = "Utility" "kubernetes.io/cluster/unmanaged.example.com" = "owned" "kubernetes.io/role/elb" = "1" } vpc_id = "vpc-12345678" } data "aws_vpc" "unmanaged-example-com" { id = "vpc-12345678" } terraform { required_version = ">= 0.15.0" required_providers { aws = { "configuration_aliases" = [aws.files] "source" = "hashicorp/aws" "version" = ">= 5.0.0" } } }