Skip to content

Commit 3752250

Browse files
committed
2 parents e31d52a + b19c8e2 commit 3752250

3 files changed

Lines changed: 38 additions & 0 deletions

File tree

KaaS/Elastic Kubernetes Service(EKS)/Terraform/add-ons/eks.tf

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,19 @@ module "eks" {
3434
}
3535
}
3636

37+
# Additional security group rules for worker nodes
38+
node_security_group_additional_rules = {
39+
# Allow port 10251 traffic from the cluster security group (metric server)
40+
ingress_10251_self = {
41+
description = "Allow metric server access from cluster security group"
42+
protocol = "tcp"
43+
from_port = 10251
44+
to_port = 10251
45+
type = "ingress"
46+
source_cluster_security_group = true
47+
}
48+
}
49+
3750
access_entries = {
3851
# One access entry with a policy associated
3952
admin = {
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
resource "aws_eks_addon" "metrics-server" {
2+
cluster_name = module.eks.cluster_name
3+
addon_name = "metrics-server"
4+
5+
resolve_conflicts_on_update = "OVERWRITE"
6+
7+
tags = {
8+
Name = "${local.name}-metrics-server"
9+
Project = local.name
10+
ManagedBy = "Terraform"
11+
}
12+
}
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
2+
resource "aws_eks_addon" "vpc-cni" {
3+
cluster_name = module.eks.cluster_name
4+
addon_name = "vpc-cni"
5+
6+
resolve_conflicts_on_update = "OVERWRITE"
7+
8+
tags = {
9+
Name = "${local.name}-vpc-cni"
10+
Project = local.name
11+
ManagedBy = "Terraform"
12+
}
13+
}

0 commit comments

Comments
 (0)