Enable nodegroup taints (#239)

* Enable nodegroup taints

* terraform-docs: automated action

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: OlamideOl1

aws/cluster/README.md

@@ -105,7 +105,7 @@ module "cluster" {
 | <a name="input_log_retention_in_days"></a> [log\_retention\_in\_days](#input\_log\_retention\_in\_days) | How many days until control plane logs are purged | `number` | `7` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name for this EKS cluster | `string` | n/a | yes |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | Prefix to be applied to created resources | `list(string)` | `[]` | no |
-| <a name="input_node_groups"></a> [node\_groups](#input\_node\_groups) | Node groups to create in this cluster | <pre>map(object({<br>    capacity_type   = optional(string, "ON_DEMAND")<br>    instance_types  = list(string),<br>    enforce_imdsv2  = optional(bool, false)<br>    max_size        = number<br>    max_unavailable = optional(number, 3)<br>    min_size        = number<br>  }))</pre> | n/a | yes |
+| <a name="input_node_groups"></a> [node\_groups](#input\_node\_groups) | Node groups to create in this cluster | <pre>map(object({<br>    capacity_type   = optional(string, "ON_DEMAND")<br>    instance_types  = list(string),<br>    enforce_imdsv2  = optional(bool, false)<br>    max_size        = number<br>    max_unavailable = optional(number, 3)<br>    min_size        = number<br>    taints = optional(list(object({<br>      key    = string<br>      value  = optional(string)<br>      effect = string<br>    })), [])<br>  }))</pre> | n/a | yes |
 | <a name="input_prevent_log_group_destroy"></a> [prevent\_log\_group\_destroy](#input\_prevent\_log\_group\_destroy) | When true, the CloudWatch log group will be protected from deletion. Terraform will fail if a destroy is attempted on this resource. | `bool` | `false` | no |
 | <a name="input_tags"></a> [tags](#input\_tags) | Tags to be applied to all created resources | `map(string)` | `{}` | no |
 

aws/cluster/main.tf

@@ -57,6 +57,7 @@ module "node_groups" {
   role            = module.node_role.instance
   subnets         = values(data.aws_subnet.private)
   tags            = var.tags
+  taints          = each.value.taints
 
   depends_on = [module.node_role]
 }

aws/cluster/modules/eks-node-group/README.md

@@ -37,6 +37,7 @@
 | <a name="input_role"></a> [role](#input\_role) | IAM role nodes in this group will assume | `object({ arn = string })` | n/a | yes |
 | <a name="input_subnets"></a> [subnets](#input\_subnets) | Subnets in which the node group should run | `list(object({ id = string, availability_zone = string }))` | n/a | yes |
 | <a name="input_tags"></a> [tags](#input\_tags) | Tags to be applied to created resources | `map(string)` | `{}` | no |
+| <a name="input_taints"></a> [taints](#input\_taints) | List of `key`, `value`, `effect` objects representing Kubernetes taints.<br>`effect` must be one of `NO_SCHEDULE`, `NO_EXECUTE`, or `PREFER_NO_SCHEDULE`.<br>`key` and `effect` are required, `value` may be null. | <pre>list(object({<br>    key    = string<br>    value  = optional(string)<br>    effect = string<br>  }))</pre> | `[]` | no |
 
 ## Outputs
 

aws/cluster/modules/eks-node-group/main.tf

@@ -35,6 +35,15 @@ resource "aws_eks_node_group" "this" {
     AvailabilityZone = each.key
   })
 
+  dynamic "taint" {
+    for_each = var.taints
+    content {
+      key    = taint.value["key"]
+      value  = taint.value["value"]
+      effect = taint.value["effect"]
+    }
+  }
+
   lifecycle {
     ignore_changes = [scaling_config[0].desired_size]
   }

aws/cluster/modules/eks-node-group/variables.tf

@@ -46,6 +46,21 @@ variable "subnets" {
   description = "Subnets in which the node group should run"
 }
 
+variable "taints" {
+  type = list(object({
+    key    = string
+    value  = optional(string)
+    effect = string
+  }))
+  description = <<-EOT
+    List of `key`, `value`, `effect` objects representing Kubernetes taints.
+    `effect` must be one of `NO_SCHEDULE`, `NO_EXECUTE`, or `PREFER_NO_SCHEDULE`.
+    `key` and `effect` are required, `value` may be null.
+    EOT
+  default     = []
+  nullable    = false
+}
+
 variable "tags" {
   type        = map(string)
   description = "Tags to be applied to created resources"

aws/cluster/variables.tf

@@ -60,6 +60,11 @@ variable "node_groups" {
     max_size        = number
     max_unavailable = optional(number, 3)
     min_size        = number
+    taints = optional(list(object({
+      key    = string
+      value  = optional(string)
+      effect = string
+    })), [])
   }))
 }