Deploy EKS cluster with Terraform

This terraform project will create a ready to use cluster with the necessary addons and features.

All the source is available here: https://github.com/rizvn/eks-terraform

The following tapology will be deployed:

• VPC with
  • 3 public subnets
  • 3 private subnets
  • NAT Gateway
• EKS cluster with
  • OIDC enabled for IRSA
  • With Addons
    • CoreDNS
    • VPC CNI with Network policy support
    • Kube-proxy
• Ingress-only nodegroup
• General nodegroup

Additional modules are defined under the extras and can enabled through values in 01-variables.tf

Additional modules are configured through 04-extras.tf. The following modules are available:

• AWS Load balancer
• Cluster Autoscaler
• Karpenter Autoscaler
• Nginx Ingress (internal and external)
• Users (IAM users with EKS Access)
• EFS fs connected to the EKS cluster using EFS CSI driver
• EBS CSI driver for gp3 volumes
• AWS VPN Client for remote access to private subnets

Clone the git repo

git clone git@github.com:rizvn/eks-terraform.git

cd eks-terraform

Set Default AWS Profile to use. This should be the profile that has the necessary permissions to create the resources in the account

export AWS_PROFILE=test

Update values and flags in 01-variable.tf

Deploy

terraform init
terraform apply

Update local kubeconfig for the new cluster

aws eks update-kubeconfig --region <your-region> --name  <your-cluster-name>

List nodes to test connectivity

kubectl get nodes