terraform-kubernetes-addons

Main components

Name	Description	Generic	AWS	Scaleway	GCP	Azure
admiralty	A system of Kubernetes controllers that intelligently schedules workloads across clusters	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
aws-ebs-csi-driver	Enable new feature and the use of `gp3` volumes	N/A	:heavy_check_mark:	N/A	N/A	N/A
aws-efs-csi-driver	Enable EFS Support	N/A	:heavy_check_mark:	N/A	N/A	N/A
aws-for-fluent-bit	Cloudwatch logging with fluent bit instead of fluentd	N/A	:heavy_check_mark:	N/A	N/A	N/A
aws-load-balancer-controller	Use AWS ALB/NLB for ingress and services	N/A	:heavy_check_mark:	N/A	N/A	N/A
aws-node-termination-handler	Manage spot instance lifecyle	N/A	:heavy_check_mark:	N/A	N/A	N/A
aws-calico	Use calico for network policy	N/A	:heavy_check_mark:	N/A	N/A	N/A
secrets-store-csi-driver-provider-aws	AWS Secret Store and Parameter store driver for secret store CSI driver	:heavy_check_mark:	N/A	N/A	N/A	N/A
cert-manager	automatically generate TLS certificates, supports ACME v2	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	N/A
cluster-autoscaler	scale worker nodes based on workload	N/A	:heavy_check_mark:	Included	Included	Included
cni-metrics-helper	Provides cloudwatch metrics for VPC CNI plugins	N/A	:heavy_check_mark:	N/A	N/A	N/A
external-dns	sync ingress and service records in route53	:x:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:x:
flux2	Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
ingress-nginx	processes `Ingress` object and acts as a HTTP/HTTPS proxy (compatible with cert-manager)	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:x:
k8gb	A cloud native Kubernetes Global Balancer	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
karma	An alertmanager dashboard	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
keda	Kubernetes Event-driven Autoscaling	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
kong	API Gateway ingress controller	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:x:	:x:
kube-prometheus-stack	Monitoring / Alerting / Dashboards	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:x:	:x:
loki-stack	Grafana Loki logging stack	:heavy_check_mark:	:heavy_check_mark:	:construction:	:x:	:x:
promtail	Ship log to loki from other cluster (eg. mTLS)	:construction:	:heavy_check_mark:	:construction:	:x:	:x:
prometheus-adapter	Prometheus metrics for use with the autoscaling/v2 Horizontal Pod Autoscaler in Kubernetes 1.6+	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
prometheus-cloudwatch-exporter	An exporter for Amazon CloudWatch, for Prometheus.	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
prometheus-blackbox-exporter	The blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP.	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
rabbitmq-cluster-operator	The RabbitMQ Cluster Operator automates provisioning, management of RabbitMQ clusters.	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
metrics-server	enable metrics API and horizontal pod scaling (HPA)	:heavy_check_mark:	:heavy_check_mark:	Included	Included	Included
node-problem-detector	Forwards node problems to Kubernetes events	:heavy_check_mark:	:heavy_check_mark:	Included	Included	Included
secrets-store-csi-driver	Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
sealed-secrets	Technology agnostic, store secrets on git	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:	:heavy_check_mark:
thanos	Open source, highly available Prometheus setup with long term storage capabilities	:x:	:heavy_check_mark:	:construction:	:x:	:x:
thanos-memcached	Open source, highly available Prometheus setup with long term storage capabilities	:x:	:heavy_check_mark:	:construction:	:x:	:x:
thanos-storegateway	Additional storegateway to query multiple object stores	:x:	:heavy_check_mark:	:construction:	:x:	:x:
thanos-tls-querier	Thanos TLS querier for cross cluster collection	:x:	:heavy_check_mark:	:construction:	:x:	:x:

Submodules

Submodules are used for specific cloud provider configuration such as IAM role for AWS. For a Kubernetes vanilla cluster, generic addons should be used.

Any contribution supporting a new cloud provider is welcomed.

Doc generation

Code formatting and documentation for variables and outputs is generated using pre-commit-terraform hooks which uses terraform-docs.

Follow these instructions to install pre-commit locally.

And install terraform-docs with go get github.com/segmentio/terraform-docs or brew install terraform-docs.

Contributing

Report issues/questions/feature requests on in the issues section.

Full contributing guidelines are covered here.

Requirements

Name	Version
<a name="requirement_terraform"></a> terraform	>= 1.5.7
<a name="requirement_flux"></a> flux	~> 1.0
<a name="requirement_github"></a> github	~> 6.0
<a name="requirement_helm"></a> helm	~> 3.0
<a name="requirement_http"></a> http	>= 3
<a name="requirement_kubectl"></a> kubectl	~> 2.0
<a name="requirement_kubernetes"></a> kubernetes	~> 3.0
<a name="requirement_tls"></a> tls	~> 4.0

Providers

Name	Version
<a name="provider_flux"></a> flux	~> 1.0
<a name="provider_github"></a> github	~> 6.0
<a name="provider_helm"></a> helm	~> 3.0
<a name="provider_http"></a> http	>= 3
<a name="provider_kubectl"></a> kubectl	~> 2.0
<a name="provider_kubernetes"></a> kubernetes	~> 3.0
<a name="provider_random"></a> random	n/a
<a name="provider_time"></a> time	n/a
<a name="provider_tls"></a> tls	~> 4.0

Modules

No modules.

Resources

Name	Type
flux_bootstrap_git.flux	resource
github_branch_default.main	resource
github_repository.main	resource
github_repository_deploy_key.main	resource
helm_release.calico-crds	resource
helm_release.cert-manager	resource
helm_release.cert-manager-csi-driver	resource
helm_release.grafana-mcp	resource
helm_release.ingress-nginx	resource
helm_release.k8gb	resource
helm_release.karma	resource
helm_release.keda	resource
helm_release.kong	resource
helm_release.kube-prometheus-stack	resource
helm_release.linkerd-control-plane	resource
helm_release.linkerd-crds	resource
helm_release.linkerd-viz	resource
helm_release.linkerd2-cni	resource
helm_release.loki-stack	resource
helm_release.metrics-server	resource
helm_release.node-problem-detector	resource
helm_release.prometheus-adapter	resource
helm_release.prometheus-blackbox-exporter	resource
helm_release.promtail	resource
helm_release.reloader	resource
helm_release.sealed-secrets	resource
helm_release.secrets-store-csi-driver	resource
helm_release.tigera-operator	resource
helm_release.traefik	resource
helm_release.victoria-metrics-k8s-stack	resource
kubectl_manifest.cert-manager_cluster_issuers	resource
kubectl_manifest.csi-external-snapshotter	resource
kubectl_manifest.kong_crds	resource
kubectl_manifest.linkerd	resource
kubectl_manifest.linkerd-viz	resource
kubectl_manifest.prometheus-operator_crds	resource
kubernetes_config_map.loki-stack_grafana_ds	resource
kubernetes_namespace.cert-manager	resource
kubernetes_namespace.flux2	resource
kubernetes_namespace.grafana-mcp	resource
kubernetes_namespace.ingress-nginx	resource
kubernetes_namespace.k8gb	resource
kubernetes_namespace.karma	resource
kubernetes_namespace.keda	resource
kubernetes_namespace.kong	resource
kubernetes_namespace.kube-prometheus-stack	resource
kubernetes_namespace.linkerd	resource
kubernetes_namespace.linkerd-viz	resource
kubernetes_namespace.linkerd2-cni	resource
kubernetes_namespace.loki-stack	resource
kubernetes_namespace.metrics-server	resource
kubernetes_namespace.node-problem-detector	resource
kubernetes_namespace.prometheus-adapter	resource
kubernetes_namespace.prometheus-blackbox-exporter	resource
kubernetes_namespace.promtail	resource
kubernetes_namespace.reloader	resource
kubernetes_namespace.sealed-secrets	resource
kubernetes_namespace.secrets-store-csi-driver	resource
kubernetes_namespace.tigera-operator	resource
kubernetes_namespace.traefik	resource
kubernetes_namespace.victoria-metrics-k8s-stack	resource
kubernetes_network_policy.cert-manager_allow_control_plane	resource
kubernetes_network_policy.cert-manager_allow_monitoring	resource
kubernetes_network_policy.cert-manager_allow_namespace	resource
kubernetes_network_policy.cert-manager_default_deny	resource
kubernetes_network_policy.flux2_allow_monitoring	resource
kubernetes_network_policy.flux2_allow_namespace	resource
kubernetes_network_policy.grafana-mcp_allow_namespace	resource
kubernetes_network_policy.grafana-mcp_default_deny	resource
kubernetes_network_policy.ingress-nginx_allow_control_plane	resource
kubernetes_network_policy.ingress-nginx_allow_ingress	resource
kubernetes_network_policy.ingress-nginx_allow_linkerd_viz	resource
kubernetes_network_policy.ingress-nginx_allow_monitoring	resource
kubernetes_network_policy.ingress-nginx_allow_namespace	resource
kubernetes_network_policy.ingress-nginx_default_deny	resource
kubernetes_network_policy.k8gb_allow_namespace	resource
kubernetes_network_policy.k8gb_default_deny	resource
kubernetes_network_policy.karma_allow_ingress	resource
kubernetes_network_policy.karma_allow_namespace	resource
kubernetes_network_policy.karma_default_deny	resource
kubernetes_network_policy.keda_allow_namespace	resource
kubernetes_network_policy.keda_default_deny	resource
kubernetes_network_policy.kong_allow_ingress	resource
kubernetes_network_policy.kong_allow_monitoring	resource
kubernetes_network_policy.kong_allow_namespace	resource
kubernetes_network_policy.kong_default_deny	resource
kubernetes_network_policy.kube-prometheus-stack_allow_control_plane	resource
kubernetes_network_policy.kube-prometheus-stack_allow_ingress	resource
kubernetes_network_policy.kube-prometheus-stack_allow_namespace	resource
kubernetes_network_policy.kube-prometheus-stack_default_deny	resource
kubernetes_network_policy.linkerd-viz_allow_control_plane	resource
kubernetes_network_policy.linkerd-viz_allow_monitoring	resource
kubernetes_network_policy.linkerd-viz_allow_namespace	resource
kubernetes_network_policy.linkerd-viz_default_deny	resource
kubernetes_network_policy.linkerd2-cni_allow_namespace	resource
kubernetes_network_policy.linkerd2-cni_default_deny	resource
kubernetes_network_policy.loki-stack_allow_ingress	resource
kubernetes_network_policy.loki-stack_allow_namespace	resource
kubernetes_network_policy.loki-stack_default_deny	resource
kubernetes_network_policy.metrics-server_allow_control_plane	resource
kubernetes_network_policy.metrics-server_allow_namespace	resource
kubernetes_network_policy.metrics-server_default_deny	resource
kubernetes_network_policy.npd_allow_namespace	resource
kubernetes_network_policy.npd_default_deny	resource
kubernetes_network_policy.prometheus-adapter_allow_namespace	resource
kubernetes_network_policy.prometheus-adapter_default_deny	resource
kubernetes_network_policy.prometheus-blackbox-exporter_allow_namespace	resource
kubernetes_network_policy.prometheus-blackbox-exporter_default_deny	resource
kubernetes_network_policy.promtail_allow_ingress	resource
kubernetes_network_policy.promtail_allow_namespace	resource
kubernetes_network_policy.promtail_default_deny	resource
kubernetes_network_policy.reloader_allow_namespace	resource
kubernetes_network_policy.reloader_default_deny	resource
kubernetes_network_policy.sealed-secrets_allow_namespace	resource
kubernetes_network_policy.sealed-secrets_default_deny	resource
kubernetes_network_policy.secrets-store-csi-driver_allow_namespace	resource
kubernetes_network_policy.secrets-store-csi-driver_default_deny	resource
kubernetes_network_policy.tigera-operator_allow_namespace	resource
kubernetes_network_policy.tigera-operator_default_deny	resource
kubernetes_network_policy.traefik_allow_ingress	resource
kubernetes_network_policy.traefik_allow_monitoring	resource
kubernetes_network_policy.traefik_allow_namespace	resource
kubernetes_network_policy.traefik_default_deny	resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_control_plane	resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_ingress	resource
kubernetes_network_policy.victoria-metrics-k8s-stack_allow_namespace	resource
kubernetes_network_policy.victoria-metrics-k8s-stack_default_deny	resource
kubernetes_priority_class.kubernetes_addons	resource
kubernetes_priority_class.kubernetes_addons_ds	resource
kubernetes_secret.linkerd_trust_anchor	resource
kubernetes_secret.loki-stack-ca	resource
kubernetes_secret.promtail-tls	resource
kubernetes_secret.webhook_issuer_tls	resource
random_string.grafana_password	resource
time_sleep.cert-manager_sleep	resource
tls_cert_request.promtail-csr	resource
tls_locally_signed_cert.promtail-cert	resource
tls_private_key.identity	resource
tls_private_key.linkerd_trust_anchor	resource
tls_private_key.loki-stack-ca-key	resource
tls_private_key.promtail-key	resource
tls_private_key.webhook_issuer_tls	resource
tls_self_signed_cert.linkerd_trust_anchor	resource
tls_self_signed_cert.loki-stack-ca-cert	resource
tls_self_signed_cert.webhook_issuer_tls	resource
github_repository.main	data source
http_http.csi-external-snapshotter	data source
http_http.kong_crds	data source
http_http.prometheus-operator_crds	data source
http_http.prometheus-operator_version	data source
kubectl_file_documents.csi-external-snapshotter	data source
kubectl_file_documents.kong_crds	data source
kubectl_path_documents.cert-manager_cluster_issuers	data source

Inputs

Name	Description	Type	Default	Required
<a name="input_cert-manager"></a> cert-manager	Customize cert-manager chart, see `cert-manager.tf` for supported values	`any`	`{}`	no
<a name="input_cert-manager-csi-driver"></a> cert-manager-csi-driver	Customize cert-manager-csi-driver chart, see `cert-manager.tf` for supported values	`any`	`{}`	no
<a name="input_cluster-autoscaler"></a> cluster-autoscaler	Customize cluster-autoscaler chart, see `cluster-autoscaler.tf` for supported values	`any`	`{}`	no
<a name="input_cluster-name"></a> cluster-name	Name of the Kubernetes cluster	`string`	`"sample-cluster"`	no
<a name="input_csi-external-snapshotter"></a> csi-external-snapshotter	Customize csi-external-snapshotter, see `csi-external-snapshotter.tf` for supported values	`any`	`{}`	no
<a name="input_external-dns"></a> external-dns	Map of map for external-dns configuration: see `external_dns.tf` for supported values	`any`	`{}`	no
<a name="input_flux2"></a> flux2	Customize Flux chart, see `flux2.tf` for supported values	`any`	`{}`	no
<a name="input_grafana-mcp"></a> grafana-mcp	Customize grafana-mcp chart, see `grafana-mcp.tf` for supported values	`any`	`{}`	no
<a name="input_helm_defaults"></a> helm_defaults	Customize default Helm behavior	`any`	`{}`	no
<a name="input_ingress-nginx"></a> ingress-nginx	Customize ingress-nginx chart, see `nginx-ingress.tf` for supported values	`any`	`{}`	no
<a name="input_ip-masq-agent"></a> ip-masq-agent	Configure ip masq agent chart, see `ip-masq-agent.tf` for supported values. This addon works only on GCP.	`any`	`{}`	no
<a name="input_k8gb"></a> k8gb	Customize k8gb chart, see `k8gb.tf` for supported values	`any`	`{}`	no
<a name="input_karma"></a> karma	Customize karma chart, see `karma.tf` for supported values	`any`	`{}`	no
<a name="input_keda"></a> keda	Customize keda chart, see `keda.tf` for supported values	`any`	`{}`	no
<a name="input_kong"></a> kong	Customize kong-ingress chart, see `kong.tf` for supported values	`any`	`{}`	no
<a name="input_kube-prometheus-stack"></a> kube-prometheus-stack	Customize kube-prometheus-stack chart, see `kube-prometheus-stack.tf` for supported values	`any`	`{}`	no
<a name="input_labels_prefix"></a> labels_prefix	Custom label prefix used for network policy namespace matching	`string`	`"particule.io"`	no
<a name="input_linkerd"></a> linkerd	Customize linkerd chart, see `linkerd.tf` for supported values	`any`	`{}`	no
<a name="input_linkerd-viz"></a> linkerd-viz	Customize linkerd-viz chart, see `linkerd-viz.tf` for supported values	`any`	`{}`	no
<a name="input_linkerd2"></a> linkerd2	Customize linkerd2 chart, see `linkerd2.tf` for supported values	`any`	`{}`	no
<a name="input_linkerd2-cni"></a> linkerd2-cni	Customize linkerd2-cni chart, see `linkerd2-cni.tf` for supported values	`any`	`{}`	no
<a name="input_loki-stack"></a> loki-stack	Customize loki-stack chart, see `loki-stack.tf` for supported values	`any`	`{}`	no
<a name="input_metrics-server"></a> metrics-server	Customize metrics-server chart, see `metrics_server.tf` for supported values	`any`	`{}`	no
<a name="input_npd"></a> npd	Customize node-problem-detector chart, see `npd.tf` for supported values	`any`	`{}`	no
<a name="input_priority-class"></a> priority-class	Customize a priority class for addons	`any`	`{}`	no
<a name="input_priority-class-ds"></a> priority-class-ds	Customize a priority class for addons daemonsets	`any`	`{}`	no
<a name="input_prometheus-adapter"></a> prometheus-adapter	Customize prometheus-adapter chart, see `prometheus-adapter.tf` for supported values	`any`	`{}`	no
<a name="input_prometheus-blackbox-exporter"></a> prometheus-blackbox-exporter	Customize prometheus-blackbox-exporter chart, see `prometheus-blackbox-exporter.tf` for supported values	`any`	`{}`	no
<a name="input_promtail"></a> promtail	Customize promtail chart, see `loki-stack.tf` for supported values	`any`	`{}`	no
<a name="input_reloader"></a> reloader	Customize reloader chart, see `reloader.tf` for supported values	`any`	`{}`	no
<a name="input_sealed-secrets"></a> sealed-secrets	Customize sealed-secrets chart, see `sealed-secrets.tf` for supported values	`any`	`{}`	no
<a name="input_secrets-store-csi-driver"></a> secrets-store-csi-driver	Customize secrets-store-csi-driver chart, see `secrets-store-csi-driver.tf` for supported values	`any`	`{}`	no
<a name="input_thanos"></a> thanos	Customize thanos chart, see `thanos.tf` for supported values	`any`	`{}`	no
<a name="input_thanos-memcached"></a> thanos-memcached	Customize thanos chart, see `thanos.tf` for supported values	`any`	`{}`	no
<a name="input_thanos-receive"></a> thanos-receive	Customize thanos chart, see `thanos-receive.tf` for supported values	`any`	`{}`	no
<a name="input_thanos-storegateway"></a> thanos-storegateway	Customize thanos chart, see `thanos.tf` for supported values	`any`	`{}`	no
<a name="input_thanos-tls-querier"></a> thanos-tls-querier	Customize thanos chart, see `thanos.tf` for supported values	`any`	`{}`	no
<a name="input_thanos-tls-querier-ca-cert"></a> thanos-tls-querier-ca-cert	TLS CA certificate, used to generate the client mTLS materials	`string`	`""`	no
<a name="input_thanos-tls-querier-ca-private-key"></a> thanos-tls-querier-ca-private-key	TLS CA private key, used to generate the client mTLS materials	`string`	`""`	no
<a name="input_tigera-operator"></a> tigera-operator	Customize tigera-operator chart, see `tigera-operator.tf` for supported values	`any`	`{}`	no
<a name="input_traefik"></a> traefik	Customize traefik chart, see `traefik.tf` for supported values	`any`	`{}`	no
<a name="input_velero"></a> velero	Customize velero chart, see `velero.tf` for supported values	`any`	`{}`	no
<a name="input_victoria-metrics-k8s-stack"></a> victoria-metrics-k8s-stack	Customize Victoria Metrics chart, see `victoria-metrics-k8s-stack.tf` for supported values	`any`	`{}`	no

Outputs

Name	Description
<a name="output_grafana_password"></a> grafana_password	n/a
<a name="output_loki-stack-ca"></a> loki-stack-ca	n/a
<a name="output_loki-stack-ca-key"></a> loki-stack-ca-key	n/a
<a name="output_promtail-cert"></a> promtail-cert	n/a
<a name="output_promtail-key"></a> promtail-key	n/a

particuleio/terraform kubernetes addons

What is particuleio/terraform kubernetes addons?

How to use particuleio/terraform kubernetes addons?

Key Features

Optimized Use Cases

particuleio/terraform kubernetes addons FAQ

What is an MCP server?

Is this server ready for production?

Official Documentation