terraform-aws-eks-blueprint-konnect-runtime-instance's Introduction

Kong Konnect - Gateway - EKS Blueprint AddOn

Introduction

Kong Konnect is an API lifecycle management platform designed from the ground up for the cloud native era and delivered as a service. This platform lets you build modern applications better, faster, and more securely. The management plane is hosted in the cloud by Kong, while the runtime engine, Kong Gateway — Kong’s lightweight, fast, and flexible API gateway — is managed by you within your preferred network environment.

Helm Chart

Instructions to use the Helm Chart

See the Kong Helm Chart

Examples

See blueprint-kong-samples.

Requirements

Name	Version
terraform	>= 1.0.0
aws	>= 3.72
helm	>= 2.4.1
kubectl	>= 1.14
kubernetes	>= 2.10

Providers

Name	Version
aws	>= 3.72
kubectl	>= 1.14
kubernetes	>= 2.10
time	n/a

Modules

Name	Source	Version
add_ons	aws-ia/eks-blueprints-addons/aws	1.1.0
external_secret_irsa	aws-ia/eks-blueprints-addon/aws	1.1.0
kong_helm	aws-ia/eks-blueprints-addon/aws	1.1.0

Resources

Name	Type
kubectl_manifest.secret	resource
kubectl_manifest.secretstore	resource
kubernetes_namespace_v1.kong	resource
kubernetes_service_account_v1.external_secret_sa	resource
time_sleep.this	resource
aws_caller_identity.current	data source
aws_iam_policy_document.kong_external_secret_secretstore	data source
aws_kms_alias.secret_manager	data source
aws_partition.current	data source
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
cluster_endpoint	Endpoint for your Kubernetes API server	`string`	n/a	yes
cluster_name	Name of the EKS cluster	`string`	n/a	yes
cluster_version	Kubernetes `<major>.<minor>` version to use for the EKS cluster (i.e.: `1.24`)	`string`	n/a	yes
create_delay_dependencies	Dependency attribute which must be resolved before starting the `create_delay_duration`	`list(string)`	`[]`	no
create_delay_duration	The duration to wait before creating resources	`string`	`"30s"`	no
kong_config	Kong addon configuration values	`any`	`{}`	no
oidc_provider_arn	The ARN of the cluster OIDC Provider	`string`	n/a	yes
tags	A map of tags to add to all resources	`map(string)`	`{}`	no

Outputs

Name	Description
namespace	Namespace in which kong is being created

terraform-aws-eks-blueprint-konnect-runtime-instance's People

Contributors

Stargazers

Watchers

terraform-aws-eks-blueprint-konnect-runtime-instance's Issues

Unable to deploy a 1.28 EKS Cluster

Trying to create an EKS 1.28 (and likely 1.27) cluster fails with:

module.eks_blueprints_kubernetes_addon_kong.kubectl_manifest.secretstore: Creating...

╷
│ Error: kong/kong-secretstore failed to fetch resource from kubernetes: the server could not find the requested resource
│ 
│   with module.eks_blueprints_kubernetes_addon_kong.kubectl_manifest.secretstore,
│   on .terraform/modules/eks_blueprints_kubernetes_addon_kong/main.tf line 111, in resource "kubectl_manifest" "secretstore":
│  111: resource "kubectl_manifest" "secretstore" {
│ 
╵

It appears as though the gavinbunney/kubectl terraform provider is no longer supported as per:
gavinbunney/terraform-provider-kubectl#270

Switching to the alekc\kubectl provider after the initial failure allows the cluster deploy successfully, however you cannot deploy from scratch with the alekc provider because it times out trying to create the same resource (apologies I don't have the exact error and I need to move on from spinning up and tearing down clusters!). There appears to be an open enhancement to make the timeout configurable:
alekc/terraform-provider-kubectl#7

I don't think it matters too much, but I'm working on a combination of the konnect-kic & konnect-fargate examples from here i.e a Fargate based Cluster using KIC

Recommend Projects

kong / terraform-aws-eks-blueprint-konnect-runtime-instance Goto Github PK