Some other fixes from using commit0 for a real project

templates/commit0/commit0.tmpl

@@ -12,7 +12,7 @@ infrastructure:
     accountId: {{ .Infrastructure.AWS.AccountID }}
     region: {{ .Infrastructure.AWS.Region }}
     eks:
-      clusterName: staging
+      clusterName: {{.ProjectName}}-staging-{{ .Infrastructure.AWS.Region }}
     cognito:
       enabled: true
     s3Hosting:

templates/kubernetes/terraform/modules/kubernetes/monitoring/main.tf

@@ -19,6 +19,6 @@ data "aws_iam_policy" "CloudWatchAgentServerPolicy" {
 }
 
 resource "aws_iam_role_policy_attachment" "k8s_monitoring_role_policy" {
-  role       = "${aws_iam_role.k8s_monitoring.id}"
-  policy_arn = "${data.aws_iam_policy.CloudWatchAgentServerPolicy.arn}"
+  role       = aws_iam_role.k8s_monitoring.id
+  policy_arn = data.aws_iam_policy.CloudWatchAgentServerPolicy.arn
 }

templates/kubernetes/terraform/modules/kubernetes/provider.tf

@@ -5,12 +5,16 @@ data "aws_eks_cluster" "cluster" {
 }
 
 data "aws_eks_cluster_auth" "cluster_auth" {
-  name = "${data.aws_eks_cluster.cluster.name}"
+  name = data.aws_eks_cluster.cluster.name
+}
+
+provider "aws" {
+  region  = var.region
 }
 
 provider "kubernetes" {
-  host                   = "${data.aws_eks_cluster.cluster.endpoint}"
-  cluster_ca_certificate = "${base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)}"
-  token                  = "${data.aws_eks_cluster_auth.cluster_auth.token}"
+  host                   = data.aws_eks_cluster.cluster.endpoint
+  cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
+  token                  = data.aws_eks_cluster_auth.cluster_auth.token
   load_config_file       = false
-}
+}

templates/kubernetes/terraform/modules/kubernetes/variables.tf

@@ -23,6 +23,6 @@ variable "external_dns_owner_id" {
 }
 
 variable "external_dns_assume_roles" {
-  type        = "list"
   description = "List of roles that should be able to assume the external dns role (most likely the role of the cluster worker nodes)"
+  type        = list(string)
 }

templates/terraform/README.md

@@ -93,3 +93,9 @@
  environment/development$ terraform init
  environment/development$ terraform plan
  ```
+
+## To use kubectl with the created EKS cluster:
+
+ Exchange your aws credentials for kubernetes credentials.
+ This will add a new context to your kubeconfig.
+ `aws eks update-kubeconfig --name <cluster name> --region <aws region>`

templates/terraform/modules/s3_hosting/main.tf

@@ -67,8 +67,15 @@ resource "aws_s3_bucket_policy" "client_assets" {
   policy = data.aws_iam_policy_document.assets_origin[each.value].json
 }
 
+# To use an ACM cert with CF it has to exist in us-east-1
+provider "aws" {
+  region = "us-east-1"
+  alias  = "east1"
+}
+
 # Find an already created ACM cert for this domain
 data "aws_acm_certificate" "wildcard_cert" {
+  provider    = "aws.east1"
   domain      = var.cert_domain
   most_recent = "true"
 }

templates/terraform/modules/vpc/main.tf

@@ -31,4 +31,7 @@ module "vpc" {
     environment = var.environment
   }
 
+  vpc_tags = {
+    "kubernetes.io/cluster/${var.kubernetes_cluster_name}" = "shared"
+  }
 }