Merge pull request #10 from phidatalab/optional-components

Allow components to be individually activated

config/eip.tf

@@ -1,13 +1,15 @@
 resource "aws_eip" "cluster_loadbalancer_eip" {
+  count = var.enable_eip ? 1 : 0
+
   vpc              = true
   public_ipv4_pool = "amazon"
   tags             = merge(tomap({ "Name" : "${var.eks_cluster_name}-loadbalancer-eip" }), var.common_tags)
 }
 
 output "radar_base_eip_allocation_id" {
-  value = aws_eip.cluster_loadbalancer_eip.allocation_id
+  value = var.enable_eip ? aws_eip.cluster_loadbalancer_eip[0].allocation_id : null
 }
 
 output "radar_base_eip_public_dns" {
-  value = aws_eip.cluster_loadbalancer_eip.public_dns
+  value = var.enable_eip ? aws_eip.cluster_loadbalancer_eip[0].public_dns : null
 }

config/karpenter.tf

@@ -1,4 +1,6 @@
 module "karpenter" {
+  count = var.enable_karpenter ? 1 : 0
+
   source  = "terraform-aws-modules/eks/aws//modules/karpenter"
   version = "19.17.2"
 
@@ -14,6 +16,8 @@ module "karpenter" {
 }
 
 resource "helm_release" "karpenter" {
+  count = var.enable_karpenter ? 1 : 0
+
   namespace        = "karpenter"
   create_namespace = true
 
@@ -34,21 +38,23 @@ resource "helm_release" "karpenter" {
 
   set {
     name  = "serviceAccount.annotations.eks\\.amazonaws\\.com/role-arn"
-    value = module.karpenter.irsa_arn
+    value = module.karpenter[0].irsa_arn
   }
 
   set {
     name  = "settings.aws.defaultInstanceProfile"
-    value = module.karpenter.instance_profile_name
+    value = module.karpenter[0].instance_profile_name
   }
 
   set {
     name  = "settings.aws.interruptionQueueName"
-    value = module.karpenter.queue_name
+    value = module.karpenter[0].queue_name
   }
 }
 
 resource "kubectl_manifest" "karpenter_provisioner" {
+  count = var.enable_karpenter ? 1 : 0
+
   yaml_body = <<-YAML
     apiVersion: karpenter.sh/v1alpha5
     kind: Provisioner
@@ -89,6 +95,8 @@ resource "kubectl_manifest" "karpenter_provisioner" {
 }
 
 resource "kubectl_manifest" "karpenter_node_template" {
+  count = var.enable_karpenter ? 1 : 0
+
   yaml_body = <<-YAML
     apiVersion: karpenter.k8s.aws/v1alpha1
     kind: AWSNodeTemplate

config/msk.tf

@@ -1,4 +1,6 @@
 resource "aws_iam_role" "msk_role" {
+  count = var.enable_msk ? 1 : 0
+
   name = "${var.eks_cluster_name}-msk-role"
 
   assume_role_policy = jsonencode({
@@ -18,12 +20,17 @@ resource "aws_iam_role" "msk_role" {
 }
 
 resource "aws_iam_role_policy_attachment" "msk_policy_attachment" {
+  count = var.enable_msk ? 1 : 0
+
   policy_arn = "arn:aws:iam::aws:policy/AmazonMSKFullAccess"
-  role       = aws_iam_role.msk_role.name
+  role       = aws_iam_role.msk_role[0].name
 }
 
 resource "aws_security_group" "msk_cluster_access" {
+  count = var.enable_msk ? 1 : 0
+
   name_prefix = "${var.eks_cluster_name}-msk-"
+
   description = "This security group is for accessing the MSK cluster"
   vpc_id      = data.aws_vpc.main.id
 
@@ -45,6 +52,8 @@ resource "aws_security_group" "msk_cluster_access" {
 }
 
 resource "aws_msk_configuration" "msk_configuration" {
+  count = var.enable_msk ? 1 : 0
+
   kafka_versions = [var.kafka_version]
   name           = "${var.eks_cluster_name}-msk-configuration"
 
@@ -66,7 +75,10 @@ PROPERTIES
 }
 
 resource "aws_msk_cluster" "msk_cluster" {
-  cluster_name           = "${var.eks_cluster_name}-msk-cluster"
+  count = var.enable_msk ? 1 : 0
+
+  cluster_name = "${var.eks_cluster_name}-msk-cluster"
+
   kafka_version          = var.kafka_version
   number_of_broker_nodes = 3
   enhanced_monitoring    = "DEFAULT"
@@ -79,7 +91,7 @@ resource "aws_msk_cluster" "msk_cluster" {
       }
     }
     client_subnets  = data.aws_subnets.private.ids
-    security_groups = [data.aws_security_group.vpc_default.id, aws_security_group.msk_cluster_access.id]
+    security_groups = [data.aws_security_group.vpc_default.id, aws_security_group.msk_cluster_access[0].id]
   }
 
   encryption_info {
@@ -108,15 +120,15 @@ resource "aws_msk_cluster" "msk_cluster" {
   }
 
   configuration_info {
-    arn      = aws_msk_configuration.msk_configuration.arn
+    arn      = aws_msk_configuration.msk_configuration[0].arn
     revision = 1
   }
 }
 
 output "radar_base_msk_bootstrap_brokers" {
-  value = aws_msk_cluster.msk_cluster.bootstrap_brokers_tls
+  value = var.enable_msk ? aws_msk_cluster.msk_cluster[0].bootstrap_brokers_tls : null
 }
 
 output "radar_base_msk_zookeeper_connect" {
-  value = aws_msk_cluster.msk_cluster.zookeeper_connect_string
+  value = var.enable_msk ? aws_msk_cluster.msk_cluster[0].zookeeper_connect_string : null
 }

config/rds.tf

@@ -1,9 +1,13 @@
 resource "aws_db_subnet_group" "rds_subnet" {
+  count = var.enable_rds ? 1 : 0
+
   name       = "${var.eks_cluster_name}-rds-subnet"
   subnet_ids = data.aws_subnets.private.ids
 }
 
 resource "aws_security_group" "rds_access" {
+  count = var.enable_rds ? 1 : 0
+
   name_prefix = "${var.eks_cluster_name}-"
   description = "This security group is for accessing the RDS DB"
   vpc_id      = data.aws_vpc.main.id
@@ -34,6 +38,8 @@ resource "aws_security_group" "rds_access" {
 }
 
 resource "aws_db_instance" "radar_postgres" {
+  count = var.enable_rds ? 1 : 0
+
   identifier                   = "${var.eks_cluster_name}-postgres"
   db_name                      = "radarbase"
   engine                       = "postgres"
@@ -47,14 +53,16 @@ resource "aws_db_instance" "radar_postgres" {
   skip_final_snapshot          = true
   publicly_accessible          = false
   multi_az                     = false
-  db_subnet_group_name         = aws_db_subnet_group.rds_subnet.name
-  vpc_security_group_ids       = [aws_security_group.rds_access.id]
+  db_subnet_group_name         = aws_db_subnet_group.rds_subnet[0].name
+  vpc_security_group_ids       = [aws_security_group.rds_access[0].id]
   performance_insights_enabled = true
 
   tags = merge(tomap({ "Name" : "${var.eks_cluster_name}-postgres" }), var.common_tags)
 }
 
 resource "kubectl_manifest" "create_databases" {
+  count = var.enable_rds ? 1 : 0
+
   yaml_body = <<-YAML
     apiVersion: batch/v1
     kind: Job
@@ -70,9 +78,9 @@ resource "kubectl_manifest" "create_databases" {
                 - "bash"
                 - "-c"
                 - |
-                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres.address} --port=5432 --username=${aws_db_instance.radar_postgres.username} --dbname=radarbase -c 'CREATE DATABASE managementportal;'
-                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres.address} --port=5432 --username=${aws_db_instance.radar_postgres.username} --dbname=radarbase -c 'CREATE DATABASE appserver;'
-                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres.address} --port=5432 --username=${aws_db_instance.radar_postgres.username} --dbname=radarbase -c 'CREATE DATABASE rest_sources_auth;'
+                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres[0].address} --port=5432 --username=${aws_db_instance.radar_postgres[0].username} --dbname=radarbase -c 'CREATE DATABASE managementportal;'
+                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres[0].address} --port=5432 --username=${aws_db_instance.radar_postgres[0].username} --dbname=radarbase -c 'CREATE DATABASE appserver;'
+                  PGPASSWORD=${var.radar_postgres_password} psql --host=${aws_db_instance.radar_postgres[0].address} --port=5432 --username=${aws_db_instance.radar_postgres[0].username} --dbname=radarbase -c 'CREATE DATABASE rest_sources_auth;'
           restartPolicy: Never
   YAML
 
@@ -82,52 +90,52 @@ resource "kubectl_manifest" "create_databases" {
 }
 
 output "radar_base_rds_managementportal_host" {
-  value = aws_db_instance.radar_postgres.address
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].address : null
 }
 
 output "radar_base_rds_managementportal_port" {
-  value = aws_db_instance.radar_postgres.port
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].port : null
 }
 
 output "radar_base_rds_managementportal_username" {
-  value = aws_db_instance.radar_postgres.username
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].username : null
 }
 
 output "radar_base_rds_managementportal_password" {
-  value     = aws_db_instance.radar_postgres.password
+  value     = var.enable_rds ? aws_db_instance.radar_postgres[0].password : null
   sensitive = true
 }
 
 output "radar_base_rds_appserver_host" {
-  value = aws_db_instance.radar_postgres.address
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].address : null
 }
 
 output "radar_base_rds_appserver_port" {
-  value = aws_db_instance.radar_postgres.port
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].port : null
 }
 
 output "radar_base_rds_appserver_username" {
-  value = aws_db_instance.radar_postgres.username
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].username : null
 }
 
 output "radar_base_rds_appserver_password" {
-  value     = aws_db_instance.radar_postgres.password
+  value     = var.enable_rds ? aws_db_instance.radar_postgres[0].password : null
   sensitive = true
 }
 
 output "radar_base_rds_rest_sources_auth_host" {
-  value = aws_db_instance.radar_postgres.address
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].address : null
 }
 
 output "radar_base_rds_rest_sources_auth_port" {
-  value = aws_db_instance.radar_postgres.port
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].port : null
 }
 
 output "radar_base_rds_rest_sources_auth_username" {
-  value = aws_db_instance.radar_postgres.username
+  value = var.enable_rds ? aws_db_instance.radar_postgres[0].username : null
 }
 
 output "radar_base_rds_rest_sources_auth_password" {
-  value     = aws_db_instance.radar_postgres.password
+  value     = var.enable_rds ? aws_db_instance.radar_postgres[0].password : null
   sensitive = true
 }

config/route53.tf

@@ -1,71 +1,89 @@
 resource "aws_route53_zone" "primary" {
+  count = var.enable_route53 ? 1 : 0
+
   name = var.domain_name
   tags = merge(tomap({ "Name" : "${var.eks_cluster_name}-primary-zone" }), var.common_tags)
 }
 
 resource "aws_route53_record" "main" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 && var.enable_eip ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
-  records = [aws_eip.cluster_loadbalancer_eip.public_dns]
+  records = [aws_eip.cluster_loadbalancer_eip[0].public_dns]
 }
 
 resource "aws_route53_record" "alertmanager" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "alertmanager.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 resource "aws_route53_record" "dashboard" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "dashboard.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 resource "aws_route53_record" "grafana" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "grafana.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 resource "aws_route53_record" "graylog" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "graylog.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 resource "aws_route53_record" "prometheus" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "prometheus.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 resource "aws_route53_record" "s3" {
-  zone_id = aws_route53_zone.primary.zone_id
+  count = var.enable_route53 ? 1 : 0
+
+  zone_id = aws_route53_zone.primary[0].zone_id
   name    = "s3.${var.environment}.${var.domain_name}"
   type    = "CNAME"
   ttl     = 300
   records = ["${var.environment}.${var.domain_name}"]
 }
 
 module "external_dns_irsa" {
+  count = var.enable_route53 ? 1 : 0
+
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
   version = "~> 5.0"
 
   role_name                     = "${var.eks_cluster_name}-external-dns-irsa"
   attach_external_dns_policy    = true
-  external_dns_hosted_zone_arns = ["arn:aws:route53:::hostedzone/${aws_route53_zone.primary.id}"]
+  external_dns_hosted_zone_arns = ["arn:aws:route53:::hostedzone/${aws_route53_zone.primary[0].id}"]
 
   oidc_providers = {
     ex = {
@@ -78,12 +96,14 @@ module "external_dns_irsa" {
 }
 
 module "cert_manager_irsa" {
+  count = var.enable_route53 ? 1 : 0
+
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
   version = "~> 5.0"
 
   role_name                     = "${var.eks_cluster_name}-cert-manager-irsa"
   attach_cert_manager_policy    = true
-  cert_manager_hosted_zone_arns = ["arn:aws:route53:::hostedzone/${aws_route53_zone.primary.id}"]
+  cert_manager_hosted_zone_arns = ["arn:aws:route53:::hostedzone/${aws_route53_zone.primary[0].id}"]
 
   oidc_providers = {
     main = {
@@ -96,5 +116,5 @@ module "cert_manager_irsa" {
 }
 
 output "radar_base_route53_hosted_zone_id" {
-  value = aws_route53_zone.primary.zone_id
+  value = var.enable_route53 ? aws_route53_zone.primary[0].zone_id : null
 }