kops-state-backend

cloudposse/kops-state-backend/aws

Terraform Module HCL AWS

Easily bootstrap kops clusters (DNS & S3 Bucket)

Install

module "kops-state-backend" {

source = "cloudposse/kops-state-backend/aws"

version = "0.3.0"

}

plain text: /constructs/tfmod-cloudposse-kops-state-backend-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-kops-state-backend ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-kops-state-backend) ![Latest Release](https://github.com/cloudposse/terraform-aws-kops-state-backend/releases/latest) ![Slack Community](https://slack.cloudposse.com) Terraform module to provision dependencies for kops (config S3 bucket & DNS zone). The module supports the following: 1. Forced server-side encryption at rest for the S3 bucket 2. S3 bucket versioning to allow for kops state recovery in the case of accidental deletions or human errors 3. Block public access in bucket level by default --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_em

Inputs (16)

Name	Type	Description	Default
namespace	string	Namespace (e.g. `eg` or `cp`)	required
stage	string	Stage (e.g. `prod`, `dev`, `staging`)	required
name	string	Name (e.g. `kops-state`)	`"kops-state"`
parent_zone_id	string	Parent DNS zone ID	`""`
force_destroy	string	A boolean that indicates all objects should be deleted from the bucket so that t	`false`
domain_enabled	string	A boolean that determines whether a DNS Zone for the kops domain is created	`"true"`
cluster_name	string	Kops cluster name (e.g. `us-east-1` or `cluster-1`)	`"us-east-1"`
delimiter	string	Delimiter to be used between `namespace`, `stage`, `name`, and `attributes`	`"-"`
attributes	list	Additional attributes (e.g. `1`)	`[]`
tags	map	Additional tags (e.g. map(`BusinessUnit`,`XYZ`)	`{}`
parent_zone_name	string	Parent DNS zone name (e.g. `domain.com`)	`""`
region	string	AWS Region the S3 bucket should reside in	`"us-east-1"`
acl	string	The canned ACL to apply to the S3 bucket	`"private"`
block_public_access_enabled	string	Block all public access from bucket level	`"true"`
zone_name	string	Template for the DNS zone name	`"${name}.${parent_zone_name}"`
create_bucket	string	Set to `false` to use existing S3 bucket for kops state store instead of creatin	`"true"`