| admission_plugins |
List of admission plugins to enable |
string |
"MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ServiceAccount" |
no |
| allocate_node_cidrs |
Whether to assign PodCIDRs to Node resources or not. Only needed in case Cilium runs in 'kubernetes' IPAM mode. |
bool |
true |
no |
| allow_workload_on_cp_nodes |
Allow workloads on CP nodes or not. Allowing it means Talos Linux default taints are removed from CP nodes which is typically required for single-node clusters. More details here: https://www.talos.dev/v1.5/talos-guides/howto/workers-on-controlplane/ |
bool |
false |
no |
| cluster_architecture |
Cluster architecture. Choose 'arm64' or 'amd64'. If you choose 'arm64', ensure to also override the control_plane.instance_type and worker_groups.instance_type with an ARM64-based instance type like 'm7g.large'. |
string |
"amd64" |
no |
| cluster_id |
The ID of the cluster. |
number |
"1" |
no |
| cluster_name |
Name of cluster |
string |
n/a |
yes |
| config_patch_files |
Path to talos config path files that applies to all nodes |
list(string) |
[] |
no |
| control_plane |
Info for control plane that will be created |
object({
instance_type = optional(string, "m5.large")
config_patch_files = optional(list(string), [])
tags = optional(map(string), {})
}) |
{} |
no |
| controlplane_count |
Defines how many controlplane nodes are deployed in the cluster. |
number |
3 |
no |
| deploy_external_cloud_provider_iam_policies |
Whether to auto-deploy the externalCloudProvider-required IAM policies. See https://cloud-provider-aws.sigs.k8s.io/prerequisites/. |
bool |
false |
no |
| disable_kube_proxy |
Whether to deploy Kube-Proxy or not. By default, KP shouldn't be deployed. |
bool |
true |
no |
| enable_external_cloud_provider |
Whether to enable or disable externalCloudProvider support. See https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/. |
bool |
false |
no |
| external_cloud_provider_manifest |
externalCloudProvider manifest to be applied if var.enable_external_cloud_provider is enabled. If you want to deploy it manually (e.g., via Helm chart), enable var.enable_external_cloud_provider but set this value to an empty string (""). See https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/. |
string |
"https://raw.githubusercontent.com/isovalent/terraform-aws-talos/main/manifests/aws-cloud-controller.yaml" |
no |
| iam_instance_profile_control_plane |
IAM instance profile to attach to the control plane instances to give AWS CCM the sufficient rights to execute. |
string |
null |
no |
| iam_instance_profile_worker |
IAM instance profile to attach to the worker instances to give AWS CCM the sufficient rights to execute. |
string |
null |
no |
| kubernetes_api_allowed_cidr |
The CIDR from which to allow to access the Kubernetes API |
string |
"0.0.0.0/0" |
no |
| kubernetes_version |
Kubernetes version to use for the Talos cluster, if not set, the K8s version shipped with the selected Talos version will be used. Check https://www.talos.dev/latest/introduction/support-matrix/. For example '1.29.3'. |
string |
"" |
no |
| metadata_options |
Metadata to attach to the instances. |
map(string) |
{
"http_endpoint": "enabled",
"http_put_response_hop_limit": 1,
"http_tokens": "optional"
} |
no |
| pod_cidr |
The CIDR to use for Pods. Only required in case allocate_node_cidrs is set to 'true'. Otherwise, simply configure it inside Cilium's Helm values. |
string |
"100.64.0.0/14" |
no |
| region |
The region in which to create the Talos Linux cluster. |
string |
n/a |
yes |
| service_cidr |
The CIDR to use for services. |
string |
"100.68.0.0/16" |
no |
| tags |
The set of tags to place on the cluster. |
map(string) |
n/a |
yes |
| talos_api_allowed_cidr |
The CIDR from which to allow to access the Talos API |
string |
"0.0.0.0/0" |
no |
| talos_version |
Talos version to use for the cluster, if not set, the newest Talos version. Check https://github.com/siderolabs/talos/releases for available releases. |
string |
"v1.9.1" |
no |
| vpc_cidr |
The IPv4 CIDR block for the VPC. |
string |
"10.0.0.0/16" |
no |
| vpc_id |
ID of the VPC where to place the VMs. |
string |
n/a |
yes |
| worker_groups |
List of node worker node groups to create |
list(object({
name = string
instance_type = optional(string, "m5.large")
config_patch_files = optional(list(string), [])
tags = optional(map(string), {})
})) |
[
{
"name": "default"
}
] |
no |
| workers_count |
Defines how many worker nodes are deployed in the cluster. |
number |
2 |
no |
