README.md

terraform-aws-coreos-kubernetes

Terraform module for creating a Highly Available Kubernetes cluster running on CoreOS in an AWS VPC.

Features

• TLS certificate generation

AWS

• AWS VPC Public and Private subnets
• Bastion Host
• Docker AWS Cloud Watch Logging Driver
• Multi-AZ Auto-Scaling Worker Nodes
• NAT Gateway

CoreOS

• etcd DNS Discovery Bootstrap

Kubernetes

• Highly Available ApiServer Configuration
• Service accounts enabled
• SkyDNS utilizing cluster's etcd

Terraform

• CoreOS AMI sourcing
• Terraform Pattern Modules

Prerequisites

• AWS Command Line Interface
• CFSSL: CloudFlare's PKI and TLS toolkit
• jq
• kubectl
• Terraform

Quick install prerequisites on Mac OS X with Homebrew:

$ brew update && brew install awscli cfssl jq kubernetes-cli terraform

Tested with prerequisite versions:

$ aws --version
aws-cli/1.10.8 Python/2.7.10 Darwin/15.2.0 botocore/1.3.28

$ cfssl version
Version: 1.1.0
Revision: dev
Runtime: go1.5.3

$ jq --version
jq-1.5

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"1", GitVersion:"v1.1.8+a8af33d", GitCommit:"a8af33dc07ee08defa2d503f81e7deea32dd1d3b", GitTreeState:"not a git tree"}

$ terraform --version
Terraform v0.6.12

Inspiration

• Code examples to create CoreOS cluster on AWS with Terraform by xuwang
• Kubernetes on CoreOS
• kaws: tool for deploying multiple Kubernetes clusters
• Terraform Infrastructure Design Patterns by Bart Spaans
• The infrastructure that runs Brandform

References

• CFSSL: CloudFlare's PKI and TLS toolkit
• etcd dns discovery bootstrap
• Generate EC2 Key Pair
• Makefile help target
• Self documenting Makefile
• ssl artifact generation