eks-role-iam

castai/eks-role-iam/castai

Terraform Module HCL CASTAI

CAST AI terraform module providing access through AssumeRole IAM

Install

module "eks-role-iam" {

source = "castai/eks-role-iam/castai"

version = "2.0.3"

}

plain text: /constructs/tfmod-castai-eks-role-iam-castai/install.txt

⭐ Source on GitHub 📦 Registry page

README

Terraform module for creating AWS IAM resources required to connect EKS with CAST AI, providing access through AssumeRole IAM. ================== Website: https://www.cast.ai Requirements ------------ - Terraform 0.13+ Using the module ------------ A module to create AWS IAM policies and a role to connect to CAST.AI Requires castai/castai and hashicorp/aws providers to be configured. ``hcl module "castai-eks-role-iam" { source = "castai/eks-role-iam/castai" aws_account_id = var.aws_account_id aws_cluster_vpc_id = var.aws_vpc_id aws_cluster_region = var.aws_cluster_region aws_cluster_name = var.aws_cluster_name castai_user_arn = var.castai_user_arn } `` Examples Usage examples are located in terraform provider repo

Inputs (13)

Name	Type	Description	Default
aws_cluster_name	string	Name of the cluster IAM resources will be created for.	required
aws_cluster_vpc_id	string	VPC of the cluster IAM resources will created for.	required
castai_user_arn	string	ARN of CAST AI user for which AssumeRole trust access should be granted	required
aws_cluster_region	string	Region of the cluster IAM resources will created for.	required
aws_account_id	string	ID of AWS account the cluster is located in.	required
attach_worker_cni_policy	bool	Whether to attach the Amazon managed `AmazonEKS_CNI_Policy` IAM policy to the de	`true`
attach_ebs_csi_driver_policy	bool	Whether to attach the Amazon managed `AmazonEBSCSIDriverPolicy` IAM policy	`true`
castai_user_external_id	string	Optional external ID used in assume role policy condition	`null`
create_iam_resources_per_cluster	bool	Whether to generate IAM resources bound to single cluster that otherwise would b	`true`
aws_shared_vpc_account_id	string	Optional AWS account ID where the VPC and subnets are located, for shared VPC se	`null`
attach_ssm_managed_instance_core	bool	Whether to attach the Amazon managed `AmazonSSMManagedInstanceCore` IAM policy	`true`
enable_ipv6	bool	Whether to enable IPv6 CNI policy for the cluster.	`true`
max_session_duration	number	Maximum session duration (in seconds) that you want to set for the specified rol	`3600`