My variables.tf
variable “region” {
default = “us-east-1”
}
variable “sso_profile” {
default = “terraform”
description = “The name of the AWS CLI SSO profile that you have configured for use with this account.”
}
variable “subnets” {
default = [“subnet-0d2477f1cb022573a”, “subnet-0d37c38fb286d09fa”, “subnet-0d7e116ee3c25f5ce”, “subnet-0c2d4f1dbbd5d1c37”,“subnet-0b72893e8e8201fb4”,“subnet-09a5db6dd629e2ff6”]
description = “A list of subnets to place the EKS cluster and workers within.”
}
variable “cluster_version” {
default = “1.27”
description = “Kubernetes version of the cluster.”
}
variable “cluster_name” {
default = “ams-dctm”
description = “AMS Documentum Cluster.”
}
variable “instance_types” {
default = [“t3.2xlarge”]
type = list
}
my main.tf
terraform {
required_providers {
aws = {
source = “hashicorp/aws”
version = “>= 3.27”
}
local = {
version = “~> 1.2”
}
null = {
version = “~> 2.1”
}
template = {
version = “~> 2.1”
}
kubernetes = {
version = “>= 1.9”
}
}
}
provider “aws” {
profile = var.sso_profile
region = var.region
}
data “aws_eks_cluster” “cluster” {
name = module.this-cluster.cluster_id
}
data “aws_eks_cluster_auth” “cluster” {
name = module.this-cluster.cluster_id
}
data “aws_caller_identity” “current” {}
data “tls_certificate” “oidc” {
url = data.aws_eks_cluster.cluster.identity.0.oidc.0.issuer
}
data “aws_cloudformation_export” “vpc_id” {
name = “ot-network-vpc-id”
}
data “aws_cloudformation_export” “pl_id” {
name = “ot-network-prefix-list”
}
data “aws_ssm_parameter” “proxy” {
name = “/Squid/Proxy”
}
data “aws_ssm_parameter” “noproxy” {
name = “/Squid/NoProxy”
}
resource “aws_security_group” “cluster_sg” {
name = “${var.cluster_name}-cluster-sg”
vpc_id = data.aws_cloudformation_export.vpc_id.value
ingress {
from_port = 443
to_port = 443
protocol = “tcp”
prefix_list_ids = [
data.aws_cloudformation_export.pl_id.value,
]
}
egress {
from_port = 0
to_port = 0
protocol = “-1”
cidr_blocks = [“0.0.0.0/0”]
}
}
resource aws_security_group_rule “cluster_ingress_worker” {
security_group_id = aws_security_group.cluster_sg.id
type = “ingress”
description = “Allow cluster to receive communication from the worker nodes.”
from_port = 443
to_port = 443
protocol = “tcp”
source_security_group_id = aws_security_group.worker_sg.id
}
resource aws_security_group_rule “cluster_ingress_self” {
security_group_id = aws_security_group.cluster_sg.id
type = “ingress”
description = “Allow masters to communicate with each other.”
from_port = 0
to_port = 65535
protocol = “-1”
source_security_group_id = aws_security_group.cluster_sg.id
}
resource “aws_security_group” “worker_sg” {
name = “${var.cluster_name}-worker-sg”
vpc_id = data.aws_cloudformation_export.vpc_id.value
ingress {
from_port = 443
to_port = 443
protocol = “tcp”
prefix_list_ids = [
data.aws_cloudformation_export.pl_id.value,
]
}
egress {
from_port = 0
to_port = 0
protocol = “-1”
cidr_blocks = [“0.0.0.0/0”]
}
}
resource aws_security_group_rule “worker_ingress_cluster” {
security_group_id = aws_security_group.worker_sg.id
type = “ingress”
description = “Allow workers pods to receive communication from the cluster control plane.”
from_port = 1025
to_port = 65535
protocol = “tcp”
source_security_group_id = aws_security_group.cluster_sg.id
}
resource aws_security_group_rule “worker_ingress_cluster_https” {
security_group_id = aws_security_group.worker_sg.id
type = “ingress”
description = “Allow pods running extension API servers on port 443 to receive communication from cluster control plane.”
from_port = 443
to_port = 443
protocol = “tcp”
source_security_group_id = aws_security_group.cluster_sg.id
}
resource aws_security_group_rule “worker_ingress_cluster_self” {
security_group_id = aws_security_group.worker_sg.id
type = “ingress”
description = “Allow node to communicate with each other.”
from_port = 0
to_port = 65535
protocol = “-1”
source_security_group_id = aws_security_group.worker_sg.id
}
provider “kubernetes” {
host = data.aws_eks_cluster.cluster.endpoint
cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
token = data.aws_eks_cluster_auth.cluster.token
load_config_file = false
}
module “this-cluster” {
source = “terraform-aws-modules/eks/aws”
cluster_name = var.cluster_name
cluster_version = var.cluster_version
subnets = var.subnets
vpc_id = data.aws_cloudformation_export.vpc_id.value
cluster_endpoint_private_access = true
cluster_endpoint_public_access = false
cluster_endpoint_private_access_cidrs = [“10.0.0.0/8”]
cluster_service_ipv4_cidr = “172.20.0.0/16”
manage_aws_auth = false
manage_worker_iam_resources = false
manage_cluster_iam_resources = false
cluster_iam_role_name = “otl-eks-cluster-role”
cluster_create_security_group = false
cluster_security_group_id = aws_security_group.cluster_sg.id
worker_create_security_group = false
worker_security_group_id = aws_security_group.worker_sg.id
cluster_enabled_log_types = [“api”, “audit”, “authenticator”, “controllerManager”, “scheduler”]
}
I am getting the below error when i run terraform plan,
C:\AWS\eks-tf-modified>terraform plan
╷
│ Error: Unsupported argument
│
│ on main.tf line 162, in module “this-cluster”:
│ 162: subnets = var.subnets
│
│ An argument named “subnets” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 167, in module “this-cluster”:
│ 167: cluster_endpoint_private_access_cidrs = [“10.0.0.0/8”]
│
│ An argument named “cluster_endpoint_private_access_cidrs” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 170, in module “this-cluster”:
│ 170: manage_aws_auth = false
│
│ An argument named “manage_aws_auth” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 171, in module “this-cluster”:
│ 171: manage_worker_iam_resources = false
│
│ An argument named “manage_worker_iam_resources” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 172, in module “this-cluster”:
│ 172: manage_cluster_iam_resources = false
│
│ An argument named “manage_cluster_iam_resources” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 174, in module “this-cluster”:
│ 174: cluster_iam_role_name = “otl-eks-cluster-role”
│
│ An argument named “cluster_iam_role_name” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 176, in module “this-cluster”:
│ 176: cluster_create_security_group = false
│
│ An argument named “cluster_create_security_group” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 178, in module “this-cluster”:
│ 178: worker_create_security_group = false
│
│ An argument named “worker_create_security_group” is not expected here.
╵
╷
│ Error: Unsupported argument
│
│ on main.tf line 179, in module “this-cluster”:
│ 179: worker_security_group_id = aws_security_group.worker_sg.id
│
│ An argument named “worker_security_group_id” is not expected here.
Can anyone help?