| Name | Description | Generic | AWS | Scaleway | GCP | Azure |
|---|---|---|---|---|---|---|
| admiralty | A system of Kubernetes controllers that intelligently schedules workloads across clusters | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| aws-ebs-csi-driver | Enable new feature and the use of gp3 volumes |
N/A | ✔️ | N/A | N/A | N/A |
| aws-efs-csi-driver | Enable EFS Support | N/A | ✔️ | N/A | N/A | N/A |
| aws-for-fluent-bit | Cloudwatch logging with fluent bit instead of fluentd | N/A | ✔️ | N/A | N/A | N/A |
| aws-load-balancer-controller | Use AWS ALB/NLB for ingress and services | N/A | ✔️ | N/A | N/A | N/A |
| aws-node-termination-handler | Manage spot instance lifecyle | N/A | ✔️ | N/A | N/A | N/A |
| aws-calico | Use calico for network policy | N/A | ✔️ | N/A | N/A | N/A |
| secrets-store-csi-driver-provider-aws | AWS Secret Store and Parameter store driver for secret store CSI driver | ✔️ | N/A | N/A | N/A | N/A |
| cert-manager | automatically generate TLS certificates, supports ACME v2 | ✔️ | ✔️ | ✔️ | ❌ | N/A |
| cluster-autoscaler | scale worker nodes based on workload | N/A | ✔️ | Included | Included | Included |
| cni-metrics-helper | Provides cloudwatch metrics for VPC CNI plugins | N/A | ✔️ | N/A | N/A | N/A |
| external-dns | sync ingress and service records in route53 | ❌ | ✔️ | ✔️ | ❌ | ❌ |
| flux2 | Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| ingress-nginx | processes Ingress object and acts as a HTTP/HTTPS proxy (compatible with cert-manager) |
✔️ | ✔️ | ✔️ | ❌ | ❌ |
| istio-operator | Service mesh for Kubernetes | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| k8gb | A cloud native Kubernetes Global Balancer | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| karma | An alertmanager dashboard | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| keda | Kubernetes Event-driven Autoscaling | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| keycloak | Identity and access management | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| kong | API Gateway ingress controller | ✔️ | ✔️ | ✔️ | ❌ | ❌ |
| kube-prometheus-stack | Monitoring / Alerting / Dashboards | ✔️ | ✔️ | ✔️ | ❌ | ❌ |
| kyverno | Kubernetes Native Policy Management | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| loki-stack | Grafana Loki logging stack | ✔️ | ✔️ | 🚧 | ❌ | ❌ |
| promtail | Ship log to loki from other cluster (eg. mTLS) | 🚧 | ✔️ | 🚧 | ❌ | ❌ |
| prometheus-adapter | Prometheus metrics for use with the autoscaling/v2 Horizontal Pod Autoscaler in Kubernetes 1.6+ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| prometheus-cloudwatch-exporter | An exporter for Amazon CloudWatch, for Prometheus. | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| prometheus-blackbox-exporter | The blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| rabbitmq-cluster-operator | The RabbitMQ Cluster Operator automates provisioning, management of RabbitMQ clusters. | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| metrics-server | enable metrics API and horizontal pod scaling (HPA) | ✔️ | ✔️ | Included | Included | Included |
| node-problem-detector | Forwards node problems to Kubernetes events | ✔️ | ✔️ | Included | Included | Included |
| secrets-store-csi-driver | Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume. | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| sealed-secrets | Technology agnostic, store secrets on git | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| strimzi-kafka-operator | Apache Kafka running on Kubernetes | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| thanos | Open source, highly available Prometheus setup with long term storage capabilities | ❌ | ✔️ | 🚧 | ❌ | ❌ |
| thanos-memcached | Open source, highly available Prometheus setup with long term storage capabilities | ❌ | ✔️ | 🚧 | ❌ | ❌ |
| thanos-storegateway | Additional storegateway to query multiple object stores | ❌ | ✔️ | 🚧 | ❌ | ❌ |
| thanos-tls-querier | Thanos TLS querier for cross cluster collection | ❌ | ✔️ | 🚧 | ❌ | ❌ |
| vault | A tool for secrets management, encryption as a service, and privileged access management | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
Submodules are used for specific cloud provider configuration such as IAM role for AWS. For a Kubernetes vanilla cluster, generic addons should be used.
Any contribution supporting a new cloud provider is welcomed.
Code formatting and documentation for variables and outputs is generated using pre-commit-terraform hooks which uses terraform-docs.
Follow these instructions to install pre-commit locally.
And install terraform-docs with go get github.com/segmentio/terraform-docs
or brew install terraform-docs.
Report issues/questions/feature requests on in the issues section.
Full contributing guidelines are covered here.
| Name | Version |
|---|---|
| terraform | >= 0.13 |
| flux | ~> 0.10 |
| github | ~> 4.0 |
| helm | ~> 2.0 |
| kubectl | ~> 1.0 |
| kubernetes | ~> 2.0 |
| Name | Version |
|---|---|
| flux | ~> 0.10 |
| github | ~> 4.0 |
| helm | ~> 2.0 |
| http | n/a |
| kubectl | ~> 1.0 |
| kubernetes | ~> 2.0 |
| random | n/a |
| time | n/a |
| tls | n/a |
No modules.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| admiralty | Customize admiralty chart, see admiralty.tf for supported values |
any |
{} |
no |
| cert-manager | Customize cert-manager chart, see cert-manager.tf for supported values |
any |
{} |
no |
| cert-manager-csi-driver | Customize cert-manager-csi-driver chart, see cert-manager.tf for supported values |
any |
{} |
no |
| cluster-autoscaler | Customize cluster-autoscaler chart, see cluster-autoscaler.tf for supported values |
any |
{} |
no |
| cluster-name | Name of the Kubernetes cluster | string |
"sample-cluster" |
no |
| csi-external-snapshotter | Customize csi-external-snapshotter, see csi-external-snapshotter.tf for supported values |
any |
{} |
no |
| external-dns | Map of map for external-dns configuration: see external_dns.tf for supported values |
any |
{} |
no |
| flux | Customize Flux chart, see flux.tf for supported values |
any |
{} |
no |
| flux2 | Customize Flux chart, see flux2.tf for supported values |
any |
{} |
no |
| helm_defaults | Customize default Helm behavior | any |
{} |
no |
| ingress-nginx | Customize ingress-nginx chart, see nginx-ingress.tf for supported values |
any |
{} |
no |
| istio-operator | Customize istio operator deployment, see istio_operator.tf for supported values |
any |
{} |
no |
| k8gb | Customize k8gb chart, see k8gb.tf for supported values |
any |
{} |
no |
| karma | Customize karma chart, see karma.tf for supported values |
any |
{} |
no |
| keda | Customize keda chart, see keda.tf for supported values |
any |
{} |
no |
| keycloak | Customize keycloak chart, see keycloak.tf for supported values |
any |
{} |
no |
| kong | Customize kong-ingress chart, see kong.tf for supported values |
any |
{} |
no |
| kube-prometheus-stack | Customize kube-prometheus-stack chart, see kube-prometheus-stack.tf for supported values |
any |
{} |
no |
| kyverno | Customize kyverno chart, see kyverno.tf for supported values |
any |
{} |
no |
| labels_prefix | Custom label prefix used for network policy namespace matching | string |
"particule.io" |
no |
| linkerd-viz | Customize linkerd-viz chart, see linkerd-viz.tf for supported values |
any |
{} |
no |
| linkerd2 | Customize linkerd2 chart, see linkerd2.tf for supported values |
any |
{} |
no |
| linkerd2-cni | Customize linkerd2-cni chart, see linkerd2-cni.tf for supported values |
any |
{} |
no |
| loki-stack | Customize loki-stack chart, see loki-stack.tf for supported values |
any |
{} |
no |
| metrics-server | Customize metrics-server chart, see metrics_server.tf for supported values |
any |
{} |
no |
| npd | Customize node-problem-detector chart, see npd.tf for supported values |
any |
{} |
no |
| priority-class | Customize a priority class for addons | any |
{} |
no |
| priority-class-ds | Customize a priority class for addons daemonsets | any |
{} |
no |
| prometheus-adapter | Customize prometheus-adapter chart, see prometheus-adapter.tf for supported values |
any |
{} |
no |
| prometheus-blackbox-exporter | Customize prometheus-blackbox-exporter chart, see prometheus-blackbox-exporter.tf for supported values |
any |
{} |
no |
| promtail | Customize promtail chart, see loki-stack.tf for supported values |
any |
{} |
no |
| rabbitmq-operator | Customize rabbitmq-operator chart, see rabbitmq-operator.tf for supported values |
any |
{} |
no |
| sealed-secrets | Customize sealed-secrets chart, see sealed-secrets.tf for supported values |
any |
{} |
no |
| secrets-store-csi-driver | Customize secrets-store-csi-driver chart, see secrets-store-csi-driver.tf for supported values |
any |
{} |
no |
| strimzi-kafka-operator | Customize strimzi-kafka-operator chart, see strimzi-kafka-operator.tf for supported values |
any |
{} |
no |
| thanos | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-memcached | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-storegateway | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| thanos-tls-querier | Customize thanos chart, see thanos.tf for supported values |
any |
{} |
no |
| tigera-operator | Customize tigera-operator chart, see tigera-operator.tf for supported values |
any |
{} |
no |
| traefik | Customize traefik chart, see traefik.tf for supported values |
any |
{} |
no |
| vault | Customize Hashicorp Vault chart, see vault.tf for supported values |
any |
{} |
no |
| victoria-metrics-k8s-stack | Customize Victoria Metrics chart, see victoria-metrics-k8s-stack.tf for supported values |
any |
{} |
no |
| Name | Description |
|---|---|
| grafana_password | n/a |
| loki-stack-ca | n/a |
| promtail-cert | n/a |
| promtail-key | n/a |
| vault_ca_key | n/a |
| vault_ca_pem | n/a |
| vault_tls_client_cert_pem | n/a |
| vault_tls_client_key | n/a |