Azure AKS Terraform Module

The aks/azure Terraform module provides a way to install and configure:

Requirements

Name Version

terraform

>= 0.13

azuread

1.0.0

azurerm

2.48.0

helm

2.0.2

kubernetes

2.0.2

local

2.0.0

random

3.0.0

tls

3.0.0

Providers

Name Version

azuread

1.0.0

azurerm

2.48.0

random

3.0.0

Modules

Name Source Version

argocd

cluster

Azure/aks/azurerm

Resources

Name Type

azuread_application.oauth2_apps

resource

azuread_application_app_role.argocd_admin

resource

azuread_application_password.oauth2_apps

resource

azurerm_dns_cname_record.wildcard

resource

azurerm_policy_assignment.baseline

resource

azurerm_role_assignment.dns_zone_contributor

resource

azurerm_role_assignment.managed_identity_operator

resource

azurerm_role_assignment.reader

resource

azurerm_role_assignment.virtual_machine_contributor

resource

azurerm_storage_account.this

resource

azurerm_storage_container.loki

resource

azurerm_user_assigned_identity.cert_manager

resource

azurerm_user_assigned_identity.kube_prometheus_stack_prometheus

resource

random_password.grafana_admin_password

resource

random_password.oauth2_apps

resource

random_string.storage_account

resource

azurerm_client_config.current

data source

azurerm_dns_zone.this

data source

azurerm_kubernetes_cluster.cluster

data source

azurerm_policy_set_definition.baseline

data source

azurerm_policy_set_definition.restricted

data source

azurerm_resource_group.this

data source

azurerm_subscription.primary

data source

Inputs

Name Description Type Default Required

admin_group_object_ids

A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.

list(string)

[]

no

agents_size

The default virtual machine size for the Kubernetes agents

string

"Standard_D4s_v3"

no

app_of_apps_values_overrides

App of apps values overrides.

string

""

no

argocd_server_secretkey

ArgoCD Server Secert Key to avoid regenerate token on redeploy.

string

null

no

base_domain

The base domain used for Ingresses.

string

n/a

yes

cluster_name

The name of the Kubernetes cluster to create.

string

n/a

yes

extra_apps

Extra applications to deploy.

list(any)

[]

no

grafana_admin_password

The admin password for Grafana.

string

null

no

kubernetes_version

Specify which Kubernetes release to use.

string

"1.18.14"

no

oidc

OIDC configuration for core applications.

 
object({
    issuer_url              = string
    oauth_url               = string
    token_url               = string
    api_url                 = string
    client_id               = string
    client_secret           = string
    oauth2_proxy_extra_args = list(string)
  })

null

no

os_disk_size_gb

Disk size of nodes in GBs.

number

128

no

public_ssh_key

A custom ssh key to control access to the AKS cluster

string

""

no

repo_url

The source repo URL of ArgoCD’s app of apps.

string

"https://github.com/camptocamp/devops-stack.git"

no

resource_group_name

The Resource Group where the Managed Kubernetes Cluster should exist.

string

n/a

yes

target_revision

The source target revision of ArgoCD’s app of apps.

string

"master"

no

vnet_subnet_id

The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.

string

n/a

yes

Outputs

Name Description

app_of_apps_values

n/a

argocd_auth_token

The token to set in ARGOCD_AUTH_TOKEN environment variable.

argocd_server

The URL of the ArgoCD server.

grafana_admin_password

The admin password for Grafana.

kubeconfig

The content of the KUBECONFIG file.

node_resource_group

n/a

prometheus_user_assigned_identity_principal_id

n/a

repo_url

n/a

target_revision

n/a