K8s Namespace Module

Terraform module for creating Kubernetes Namespaces.

Requirements

Name	Version
terraform	>= 0.13
aws	>= 4

Providers

Name	Version
aws	>= 4
kubernetes	n/a

Modules

No modules.

Resources

Name	Type
aws_ecr_lifecycle_policy.this	resource
aws_ecr_repository.application_repos	resource
aws_ecr_repository_policy.application_repos	resource
aws_s3_bucket.tf_state	resource
aws_s3_bucket_acl.tf_states	resource
aws_s3_bucket_ownership_controls.tf_states	resource
aws_s3_bucket_policy.https_only	resource
aws_s3_bucket_public_access_block.tf_state	resource
aws_s3_bucket_versioning.tf_states	resource
kubernetes_namespace.default	resource
kubernetes_network_policy.allow_acme	resource
kubernetes_network_policy.allow_dns	resource
kubernetes_network_policy.deny_all	resource
kubernetes_resource_quota.default	resource
kubernetes_secret_v1.newrelic_license_key	resource
aws_caller_identity.current	data source
aws_iam_policy_document.application_repos	data source
aws_iam_policy_document.https_only	data source

Inputs

Name	Description	Type	Default	Required
name	Namespace name (e.g. sonarqube or onlineshop-dev)	string	n/a	yes
additional_ecr_repo_roles	Additional roles for cross account push	list(string)	[]	no
additional_namespace_labels	Additional namespace labels	map(string)	{}	no
cpu_quota	CPU Quota for Namespace	string	"1000m"	no
create_ecr_lifecycle	Option to disable the ECR lifecycle policy	bool	true	no
create_network_policies	Option to disable network policies	bool	true	no
create_newrelic_license_secret	Option to disable NewRelic license secret creation	bool	false	no
create_state_bucket	Option to disable state bucket creation	bool	true	no
ecr_lifecycle_policy	Custom ECR lifecycle policy in JSON format	string	null	no
ecr_repo_role	Adds role for cross account push	string	""	no
ecr_repos	Creates an ECR repository for each item passed in the list	list(string)	[]	no
loadbalancer_quota	Loadbalancer Quota for Namespace	number	0	no
mem_quota	Memory Quota for Namespace	string	"2Gi"	no
newrelic_license_key	NewRelic license key to be stored in a secret	string	null	no
security_level_audit	Policy violations will trigger the addition of an audit annotation to the event recorded in the audit log, but are otherwise allowed.	string	"restricted"	no
security_level_enforce	Policy violations will cause the pod to be rejected.	string	"baseline"	no
security_level_warn	Policy violations will trigger a user-facing warning, but are otherwise allowed.	string	"restricted"	no
state_bucket_name	Option to override S3 state bucket name	string	null	no

Outputs

Name	Description
name	n/a

Docs

To update the docs just run

$ terraform-docs .